WriteUpp – Consent for GDPR (Desktop v2.05.23)
In today’s update we’ve introduced the consent feature which is primarily designed to help you comply with the GDPR (General Data Protection Regulation), although it can be used as a mechanism to record any form of consent.
In particular, this feature relates to Article 13 of the GDPR, the “right to be informed”. It requires you to present and gain consent to the following information in your privacy statement:
- who are you
- why you need their personal data
- how you will use it within your practice
- how they can modify it
- how they can access it
- how they can retract consent to hold and process their records
- how they can raise a complaint, should they wish to do so.
This new feature is intended to streamline the process of gaining consent to your privacy statement as well as giving you clear visibility of those clients that do and don’t have a valid consent.
To find out how to create a consent form click here
Once you have created a consent form just click on Create -> Consent
then you have two ways to get consent:
Once you have consent from your client (in person or via email) a log entry will be made in the new privacy tab of their patient summary, as below. It shows the name of the form that has been consented to, the way they have consented, who has consented and the relationship of the consenter to the client. It also provides you with additional GDPR-required information relating to when the record was created and when it was last modified.
If you click on the row you will be taken through to the EXACT details of the consent form that was consented to, including the version number.
You will also see a visual cue in the active patient button, see below:
and you will see a visual indication on the patient tab of the patient summary where a green icon indicates that consent has been granted.
If you need help with the wording of this statement please contact a lawyer specialising in privacy and data protection (we use Aaron & Partners (in the UK)) or your professional body may be able to help.
As well as introducing the consent function we’ve also made several improvements:
- Reintroduced the ability to indent/outdent text within Redactor
- MP3 files are now supported as attachments
- Option to remove PII (Patient Identifiable Information) from notes and assessments
- It is now no longer possible to set the date of death before the date of birth
- Correct note state is now displayed on printouts