Related Experiment Videos
Review of a medical illustration department's data processing system to confirm general data protection regulation
1Medical Illustration Department, University Hospitals, Birmingham NHS Foundation Trust, Birmingham, UK.
Insights
The Medical Illustration Department at Queen Elizabeth Hospital Birmingham complies with General Data Protection Regulation (GDPR) for clinical photography and video data. Current practices meet GDPR standards, but future enhancements are recommended for administrative processing capabilities.
Area of Science:
- Medical Illustration
- Data Management
- Healthcare Compliance
Background:
- The Medical Illustration Department (MID) at Queen Elizabeth Hospital Birmingham (QEHB) manages clinical photography and video data.
- Compliance with the General Data Protection Regulation (GDPR) is crucial for handling sensitive patient information.
Purpose of the Study:
- To review the current data processing and storage arrangements for clinical photography and video within the MID at QEHB.
- To assess the department's compliance with GDPR requirements.
Main Methods:
- Review of existing workflows and technical solutions for data processing and storage.
- Assessment against GDPR principles and requirements.
Main Results:
- The current workflow and technical processing solution satisfy GDPR requirements.
- Informed consent procedures for photographic and video use are adequate.
- No additional financial costs or technical skills were required at the time of the review for GDPR implementation.
Conclusions:
- The MID at QEHB is compliant with GDPR for its current clinical photography and video data handling.
- Future data processing designs should incorporate improved administrative capabilities to meet GDPR's access and information rights.
- Non-compliance with GDPR poses significant financial risks, while Brexit is unlikely to impact compliance.
Abstract:
This article reviews the clinical photography and video data processing and storage arrangements of the Medical Illustration Department (MID) at the Queen Elizabeth Hospital Birmingham National Health Service (NHS) Foundation Trust (QEHB), part of the University Hospitals Birmingham (UHB) NHS Foundation Trust umbrella group. This review suggests that the department's current workflow and technical processing solution satisfies the requirements of the general data protection regulation (GDPR). At the time of writing, there were no additional financial costs or technical skills required for implementing GDPR regulations but this could change in future data processing systems. There are significant potential costs for non-compliance with GDPR. Brexit is unlikely to have any effect on complying with GDPR requirements. The GDPR gives the public the right to access information and be informed of how and why it is processed. It is recommended that improved administrative processing capability to accommodate this requirement should be included in future data processing designs. At the QEHB informed consent for use of photographs and videos is currently adequate to satisfy the common law of confidence.