Legislation and the codes of conduct and professional practice that relate to handling information and data protection

Deddfwriaeth a’r codau ymddygiad ac ymarfer proffesiynol wrth drin gwybodaeth a diogelu data

Secure records

Handling information: It is important that individuals receiving care, education and support have the right to confidentiality. Each organisation that handles information should have a code of practice outlining the steps to be taken in order to ensure that confidential information is handled appropriately. The code will help organisations to ensure that there are rules to be followed in relation to handling information.

Data protection: Every child, young person and parent/carer has the right to have the information collected about them kept confidentially. There is a legal duty on childcare workers to protect the information kept and processed. Everyone who deals with personal data should follow specific rules, referred to as data protection principles.

Data Protection Act 1998: This act protects personal information and gives individuals the right to see any information kept about them. The data stored about an individual should not be shared with others without the permission of that individual. The information should not be kept for longer than necessary. The act protects the rights of individuals and prevents information from being shared unlawfully.

The act contains eight principles that contribute towards good practice and the information recorded about individuals must be:

  • processed fairly and lawfully
  • available for one or two specific and lawful purposes only
  • suitable and relevant
  • correct and current
  • kept for the necessary length of time only
  • processed in accordance with the rights within the act
  • lawful and there must be measures in place to prevent data from being processed in an unauthorised manner
  • disclosed to relevant recipients only.

United Kingdom (UK) Data Protection Act 2018 / General Data Protection Regulation (GDPR): Both of these work side by side. They came into force in May 2018. The law protecting personal information on individuals has been modernised. It gives further consideration to the rights of individuals as well as giving them more control over their information. As well as the principles included in the Data Protection Act 1998, the United Kingdom Data Protection Act 2018 gives individuals the following rights:

  • to know how the data is being used
  • access to personal data
  • to have incorrect data updated
  • to delete data
  • to prevent or limit the processing of their data.

https://bit.ly/2y4FeXG

https://www.gov.uk/data-protection

The National Health Service's Code of Practice on Confidentiality: In order to show responsibility when dealing with confidentiality, the NHS' code of practice on confidentiality notes what health and care organisations need to do. It considers good practice and legal requirements by getting patient consent to use their health records.

https://bit.ly/2M7hYk0

The Information Commissioner's Office: Organisations that provide care and education to children need to ensure that they are registered with the Information Commissioner's Office. Registration can be completed online, and there is a charge for doing so. If childcare workers process personal information electronically for the purpose of childcare, it is essential that they are registered. This includes using a digital camera to take photographs of children.

https://ico.org.uk/for-organisations/business/

https://ico.org.uk/for-organisations/data-protection-fee/

Trin gwybodaeth: Mae’n bwysig bod unigolion sy’n derbyn gofal, addysg a chefnogaeth yn cael yr hawl i gyfrinachedd. Dylai pob sefydliad sy’n trin gwybodaeth roi cod ymarfer ar waith sy’n amlinellu’r camau y dylid eu cymryd er mwyn sicrhau bod gwybodaeth gyfrinachol yn cael ei thrin yn briodol. Bydd y cod o gymorth i sefydliadau wrth iddyn nhw sicrhau bod rheolau sy’n gysylltiedig â thrin gwybodaeth ar waith.

Diogelu data: Mae gan bob plentyn, person ifanc a rhieni/gofalwyr yr hawl i’r wybodaeth a gesglir amdanynt gael ei chadw’n gyfrinachol. Mae dyletswydd gyfreithiol ar ymarferwr i ddiogelu’r wybodaeth sy’n cael ei chadw a’i phrosesu. Mae’n angenrheidiol bod pawb sy’n ymdrin â data personol yn dilyn rheolau a elwir yn egwyddorion diogelu data.

Deddf Gwarchod Data 1998: Mae’r ddeddf hon yn diogelu gwybodaeth bersonol ac yn rhoi hawl i unigolion gael gweld y wybodaeth a gedwir amdanynt. Ni ddylai’r data sy’n cael ei storio am berson gael ei rannu ag eraill heb dderbyn caniatâd y person hwnnw. Nid yw’n angenrheidiol i gadw’r wybodaeth am fwy o amser nag sydd ei angen. Mae’r ddeddf yn amddiffyn hawliau unigolion ac yn atal gwybodaeth rhag cael ei rhannu’n anghyfreithlon.

Mae’r ddeddf yn cynnwys wyth egwyddor sy’n cyfrannu at arfer da ac mae’n rhaid i’r wybodaeth a gofnodir am unigolion fod:

  • wedi ei phrosesu’n deg ac yn gyfreithlon
  • ar gael at un neu ddau bwrpas penodol a chyfreithlon yn unig
  • yn addas a pherthnasol
  • yn gywir a chyfredol
  • ar gadw am gyfnod angenrheidiol yn unig
  • yn cael ei phrosesu yn unol â’r hawliau o fewn y ddeddf
  • yn gyfreithlon a bod mesurau mewn lle i atal data gael ei brosesu heb awdurdod
  • yn cael ei datgelu i dderbynyddion perthnasol yn unig.

Deddf Diogelu Data 2018 y Deyrnas Unedig (DU) Rheoliad Gwarchod Data Cyffredinol (RhGDC): Mae’r ddwy ddeddfwriaeth yma yn gweithio ochr yn ochr. Daethon nhw i rym ym mis Mai 2018. Mae’r gyfraith sy’n amddiffyn gwybodaeth bersonol unigolion wedi’i moderneiddio. Mae’n rhoi mwy o ystyriaeth i hawliau’r unigolion yn ogystal â rhoi mwy o reolaeth iddynt dros eu gwybodaeth. Yn ogystal ag egwyddorion Deddf Diogelu Data 1998, mae Deddf Gwarchod Data'r Deyrnas Unedig 2018 yn rhoi’r hawl i unigolyn gael:

  • gwybod sut mae’r data yn cael ei ddefnyddio
  • mynediad at ddata personol
  • data anghywir wedi’i ddiweddaru
  • dileu data
  • atal neu cyfyngu prosesu eu data.

https://bit.ly/2y6zE76

https://www.gov.uk/data-protection

Côd Ymarfer Gwasanaeth Iechyd Gwladol (GIG) ar Gyfrinachedd: Er mwyn arddangos cyfrifoldeb wrth ymdrin â chyfrinachedd, mae côd ymarfer GIG ar gyfrinachedd yn nodi beth sydd angen i sefydliadau iechyd a gofal ei wneud. Mae’n ystyried arfer da ac anghenion cyfreithiol trwy gael cydsyniad y cleifion i ddefnyddio eu cofnodion iechyd.

https://bit.ly/2M7hYk0

Swyddfa Comisiynydd Gwybodaeth: Mae angen i sefydliadau gofal ac addysg plant sicrhau eu bod yn cofrestru gyda Swyddfa Comisiynydd Gwybodaeth. Gellir cofrestru ar-lein a chodir tâl am hyn. Os ydy gweithiwr gofal plant yn prosesu gwybodaeth bersonol yn electroneg at bwrpas gofal plant mae’n hanfodol ei fod o/hi yn cofrestru. Mae hyn yn cynnwys defnyddio camera digidol i dynnu lluniau o blant.

https://ico.org.uk/for-organisations/business/

https://ico.org.uk/for-organisations/data-protection-fee/

Legislation and the codes of conduct and professional practice that relate to handling information and data protection

Complete the activity below.

Deddfwriaeth a’r codau ymddygiad ac ymarfer proffesiynol wrth drin gwybodaeth a diogelu data

Cwblhewch y gweithgaredd isod.