GDPR Data processing modelComputerized pharmacy management and statistical analysis of its sales
Purposes (9)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (4)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Information about the patient's lifestyle habits
Data details
Data conservation rules
Active base:
3 years from the last dispensing or intervention on the patient's file. No statutory period; the controller should set the period based on continuity of care.
Misuse of Drugs Regulations 2001, reg. 23; Human Medicines Regulations 2012, reg. 253; Companies Act 2006, s.388; NHS Records Management Code of Practice; Limitation Act 1980
Intermediate archiving:
Archived on separate media for the periods required for the relevant registers and records: - Controlled drugs registers and related records: 2 years from the date of the last entry (Misuse of Drugs Regulations 2001, reg. 23). - Prescription-only medicines register (private prescriptions, emergency supplies): 2 years (Human Medicines Regulations 2012, reg. 253). - Other patient and dispensing records: no single statutory period for community pharmacies; the controller should set the period based on the NHS Records Management Code of Practice and the limitation periods for claims (Limitation Act 1980). - Accounting records: 3 years (private company) or 6 years (public company) (Companies Act 2006, s.388).
Destruction
Health data
Data details
Definition
Products delivered by the optician
Data conservation rules
Active base:
5 years from the last dispensing or intervention. No statutory period; the controller should set the period based on continuity of care and the NHS Records Management Code of Practice.
Misuse of Drugs Regulations 2001, reg. 23; Human Medicines Regulations 2012, reg. 253; Companies Act 2006, s.388; NHS Records Management Code of Practice; Limitation Act 1980
Intermediate archiving:
Archived on separate media for the periods required for the relevant registers and records: - Controlled drugs registers and related records: 2 years from the date of the last entry (Misuse of Drugs Regulations 2001, reg. 23). - Prescription-only medicines register (private prescriptions, emergency supplies): 2 years (Human Medicines Regulations 2012, reg. 253). - Other patient and dispensing records: no single statutory period for community pharmacies; the controller should set the period based on the NHS Records Management Code of Practice and the limitation periods for claims (Limitation Act 1980). - Accounting records: 3 years (private company) or 6 years (public company) (Companies Act 2006, s.388).
Destruction
Pharmacy patient identity data
Data details
Definition
person's date of birth
Data conservation rules
Active base:
3 years from the last dispensing or intervention on the patient's file. No statutory period; the controller should set the period based on continuity of care.
Misuse of Drugs Regulations 2001, reg. 23; Human Medicines Regulations 2012, reg. 253; Companies Act 2006, s.388; NHS Records Management Code of Practice; Limitation Act 1980
Intermediate archiving:
Archived on separate media for the periods required for the relevant registers and records: - Controlled drugs registers and related records: 2 years from the date of the last entry (Misuse of Drugs Regulations 2001, reg. 23). - Prescription-only medicines register (private prescriptions, emergency supplies): 2 years (Human Medicines Regulations 2012, reg. 253). - Other patient and dispensing records: no single statutory period for community pharmacies; the controller should set the period based on the NHS Records Management Code of Practice and the limitation periods for claims (Limitation Act 1980). - Accounting records: 3 years (private company) or 6 years (public company) (Companies Act 2006, s.388).
Destruction
Prescriber's identity
Data details
Definition
Medical Specialty
Definition
Name of the person
Data conservation rules
Active base:
3 years from the last dispensing or intervention on the patient's file. No statutory period; the controller should set the period based on continuity of care.
Misuse of Drugs Regulations 2001, reg. 23; Human Medicines Regulations 2012, reg. 253; Companies Act 2006, s.388; NHS Records Management Code of Practice; Limitation Act 1980
Intermediate archiving:
Archived on separate media for the periods required for the relevant registers and records: - Controlled drugs registers and related records: 2 years from the date of the last entry (Misuse of Drugs Regulations 2001, reg. 23). - Prescription-only medicines register (private prescriptions, emergency supplies): 2 years (Human Medicines Regulations 2012, reg. 253). - Other patient and dispensing records: no single statutory period for community pharmacies; the controller should set the period based on the NHS Records Management Code of Practice and the limitation periods for claims (Limitation Act 1980). - Accounting records: 3 years (private company) or 6 years (public company) (Companies Act 2006, s.388).
Destruction
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Other
Attribution / Pas d'utilisation commerciale
CC-BY-NC
