{"id":16292,"date":"2021-05-01T01:01:26","date_gmt":"2021-05-01T00:01:26","guid":{"rendered":"https:\/\/bant.org.uk\/?page_id=16292"},"modified":"2026-02-04T21:26:46","modified_gmt":"2026-02-04T21:26:46","slug":"general-data-protection-regulation-gdpr","status":"publish","type":"page","link":"https:\/\/bant.org.uk\/bant-professional-practice-handbook\/general-data-protection-regulation-gdpr\/","title":{"rendered":"GENERAL DATA PROTECTION REGULATION (UK GDPR)"},"content":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” el_id=”top-section” z_index=”” css=”.vc_custom_1619337773730{padding-bottom: 45px !important;}”][vc_column][vc_raw_html]JTVCcHJpbnRmcmllbmRseSU1RA==[\/vc_raw_html][vc_column_text]Information on the UK General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018.\u00a0 It explains each of the data protection principals, rights and obligations and includes templates for a typical nutritional therapy business.\u00a0 Everyone who handles personal data needs to be aware of and trained in UK GDPR and members need to ensure they comply with the legislation.[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” anchor=”main_anchor1″][vc_column]\n\n\t\n\t Introduction and Templates<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Processing Data<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Privacy Notices<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Consent<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Data Protection Policy<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Subject Access Requests<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Information Security<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Legitimate Interests Assessment<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t Data Breaches<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”5″ up=”2″ down=”2″]\n\n\t\n\t FAQs<\/span><\/i><\/span>\t<\/a>\n\n[vc_separator type=”transparent” thickness=”30″][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=”” anchor=”introduction-and-templates” el_class=”anchordiv”][vc_column_inner el_class=”anchor_col” css=”.vc_custom_1618397491357{padding-top: 30px !important;padding-right: 30px !important;padding-bottom: 30px !important;padding-left: 30px !important;}”][vc_column_text]<\/p>\n

Introduction and Templates:<\/i> Top<\/span><\/a><\/h3>\n

On 25th<\/sup> May 2018 the European General Data Protection Regulations (GDPR) superseded the Data Protection Act 1998. GDPR updated data protection rules to be more appropriate to the modern digital age. Following the UK’s departure from the EU, the provisions of the EU GDPR have been incorporated directly into UK law as the\u00a0UK GDPR.<\/p>\n

UK GDPR gives more rights to individuals in the processing of their personal data which means that individuals can request access, corrections and removal of their personal information in ways that weren\u2019t available before.\u00a0 The UK GDPR requires clear evidence of consent from individuals and there is also a focus on transparency with privacy notices<\/a> detailing how data will be used and a requirement for procedures documenting exactly how data will be processed and secured.<\/p>\n

Additionally, UK GDPR gives greater powers to the ICO (Information Commissioner\u2019s Office)<\/a> to investigate organisations and breaches.\u00a0 The ICO have a\u00a012 step plan<\/a>\u00a0to help businesses achieve compliance and also offer an\u00a0Advice Service<\/a>\u00a0and\u00a0Live Chat<\/a>.\u00a0 Anyone that processes personal information (i.e., all NTs) must register with the Information Commission\u2019s Office (ICO) and pay the annual fee<\/a>.<\/p>\n

Members are advised to watch the BANT GDPR Webinar<\/a>,<\/u> which summarises the information provided here and will guide them through the steps they need to take to become UK GDPR compliant.<\/p>\n

BANT has produced the following UK GDPR Templates for a typical nutritional therapy business:<\/p>\n