As an HCPC registered clinical psychologist I inevitably hold and process clients’ contact details, personal and sensitive data, for the purpose of psychological consultation, therapy and the production of expert witness reports. I keep hard copies of reports and clinical notes in files in my secured office at my residence and I have a secured dedicated archive room. I keep encrypted electronic copies of reports on a password and firewall protected laptop. Encrypted reports are backed up onto an external hard drive. Emails are deleted after a round of email exchanges is complete. As a legal requirement I keep clients’ files and documents for 7 years after which, they are destroyed by a professional shredding company. Medical records sent to me as an expert witness are sent on for shredding once I am informed that the legal case has been concluded or settled. I am ICO registered and I have attended GDPR training (January 2018).
Consultant Clinical Psychologist