General Data Protection Regulation - are we up to date?

Area of Science:

• Data Protection Law
• Regulatory Compliance
• Healthcare Administration

Background:

• The General Data Protection Regulation (GDPR) enhances individual data control and organizational accountability.
• Ensuring staff compliance with GDPR is crucial for data protection in practice.

Purpose of the Study:

• To assess staff knowledge of the General Data Protection Regulation (GDPR).
• To evaluate the effectiveness of tailored teaching interventions in improving GDPR understanding.
• To identify areas requiring further improvement for full GDPR compliance.

Main Methods:

• A questionnaire-based knowledge audit with 18 questions was administered to staff.
• A gold standard pass mark was set at 14/18.
• Interventions included tailored teaching sessions and online learning components.

Main Results:

• Initial audit (Cycle 1) showed a pass rate of 1.6% (1/63).
• Following targeted education, the pass rate increased to 83.9% (47/56) in Cycle 2.
• Staff knowledge and understanding require further enhancement to meet the established gold standard.

Conclusions:

• Baseline GDPR knowledge among staff was inadequate.
• Tailored teaching interventions demonstrated a significant positive impact on knowledge acquisition.
• Continuous cycles of education and auditing are necessary to achieve and maintain full GDPR compliance.