After undertaking a data protection audit for a federation of GP practices and walk in centres, we were appointed as their external data protection officer. Each practice continues to have a data lead. We deal with data protection queries and problems which the data lead may encounter and either requires assistance or a second opinion. Issues have included where there appears to be conflicting guidance on confidentiality and GDPR or Caldecott Principles and GDPR.
We have also drafted data sharing agreements and processor agreements and assisted with a practice merger.