On the second day of the Data Protection in the Public Sector Conference, Friday 6th June 2008, delegates will have the opportunity to attend two of the four half-day Workshops on important aspects of data protection compliance.

Each Workshop provides delegates with the opportunity to work through practical scenarios and allows in-depth analysis and discussion in important areas of data protection compliance.  All of the Workshops are run by experts who discuss practical and realistic case studies.  During the sessions, there will be considerable opportunity to put questions to the Workshop leaders and to discuss issues with other delegates.

These data protection Workshops can be booked separately or in conjunction with the Speakers’ Presentations Day.  Attendance at the Workshops is optional, but it is anticipated that most Conference delegates will wish to attend one or more of these practical sessions.

Each Workshop is accredited by the Law Society with 3 CPD Points.

A:  Public sector data sharing: when, why, whether, and how to share data

Damien Welfare - Barrister, 2-3 Gray’s Inn Square

The Government is keen to promote data sharing, and the Information Commissioner has issued a Framework Code of Practice, designed to help you produce your own code of practice.  This Workshop examines the issues and the practicalities of lawful data sharing, including:

• The benefits of data sharing, and how much information should be shared
• The challenges of maintaining public trust and respecting personal privacy
• The powers that exist to share data, and the conditions under which data may be shared, as well as the restrictions on disclosure
• How to write your own code of practice, and what it should contain
• Other steps to consider before you share data

B:  Handling subject access requests - the latest thinking

Andrew Dyson - Partner, DLA Piper

This interactive Workshop explores solutions to common subject access request issues, as well as practical strategies for providing a compliant response that does not cause undue burden or harm to your organisation.  This Workshop includes:

• Understanding when access rights apply: latest thinking on the scope of ‘personal data’
• The exemptions: how and when they can be properly applied
• Dealing with problem requests
• Section 7 vs Section 40: understanding the interaction between SARs and Freedom of Information requests
• Strategies for managing requests in a shared service environment

Afternoon Workshops  ( 2.00 pm - 5.15 pm )
 

C:  Data security - what it means in practice

Jackie Gray - Associate, Dickinson Dees LLP

Recent high profile security breaches have thrown data protection in the Public Sector firmly into the spotlight, capturing the attention of the public and media alike.  In light of such data security concerns and the latest recommendations from the Government and the Information Commissioner, this Workshop looks at the types of organisational, technical and security measures which Public Sector organisations should have in place.  In particular the session includes:

• What measures Public Sector organisations need to take to protect against unauthorised processing, data loss, damage and destruction with reference to examples of security breaches which have occurred, recommendations and guidance on good practice
• The data controller / data processor distinction and the obligations each has under the DPA
• The safeguards required in relation to data processing and sharing arrangements with other public organisations or private contractors, looking at:
  • shared service delivery arrangements and outsourcing arrangements for the processing of personal information
  • data processing agreements and DPA clauses in contracts
  • data sharing protocols, and
  • the role of privacy impact assessments and use of the new ICO Privacy Impact Assessment Handbook

D:  Data protection issues in health and social care

Anne Crofts - Partner, Beachcroft LLP
Emma Bate - Associate, Beachcroft LLP

NHS and Local Authority health and social care providers develop and process some of the most sensitive information about individuals.  Recent breaches of security in hospitals, such as laptops and discs being lost, paper records found dumped, as well as increasing concerns being voiced by politicians and doctors all highlight some of the particular issues and difficulties faced by health and social care providers.  The hugely ambitious electronic health record programme is another concern.  This Workshop examines current hot topics and uses case studies and materials to explore particular issues facing health and social care providers, such as:

• Information sharing between organisations, whether for providing care or for other purposes
• The secondary use of patient data, for example for research or for marketing and fundraising: when consent is required and what are the alternatives to consent
• Creating and using a Foundation Trust’s membership database: being aware of the pitfalls
• Data security: particular issues for the NHS such as transition from paper to electron

Workshop Leaders - Biographies: