General Data Protection Regulations (GDPR) are EU-wide regulations which came into force on 25th May
They supersede previous data protection legislation and do have a lot of good things in them about you having more control over who does what with information about you. In terms of things such as these minutes, agenda and information, the GDPR and Office of the Information Commissioner look to be taking a fairly light touch. However, I need to let you know how I believe that I am complying with GDPR requirements.
- People receiving the minutes, agenda and information will have requested to do so.
- I hold your e-mail address AND NOTHING ELSE in relation to the emails.
- Your e-mail address is held outside my mail system, so would not be readily accessible to hackers.
- The minutes, agenda and information are sent out “blind copied” – i.e. no-one else sees your e-mail address.
- The only circumstances where your e-mail address (or any other details about you) will be disclosed in terms of the minutes, agenda and information will be: –
To the secretary if the chair becomes unavailable to administrate the minutes etc. and/or the practices managers.
- Your e-mail address will be removed from the list of the minutes, agenda and information recipients at any time upon receipt of an e-mail request from you for me to do so.
Most of this is pretty much existing good practise and common sense / courtesy. The above applies to matters relating to the minutes, agenda and information. Where we know each other through general social contact, I will feel free to take a more relaxed social approach – which generally is not covered by GDPR.
South East Leeds PPG may disclose personally identifiable information under special circumstances, such as to comply with the law or when your actions violate the Terms of Service.