Data Protection and Confidentiality
Medico-legal work involves sensitive personal data, including medical records. Therefore, all work must be carried out under strict confidentiality and data protection controls.
Where required, we can operate under:
* A written Data Processing Agreement
* Confidentiality agreements
* Staff confidentiality undertakings
* Secure access controls
* Password-protected systems
* Limited user permissions
* Audit trails
* Secure document transfer procedures
* Data retention and deletion policies
* Breach reporting procedures
Where data is accessed or processed outside the UK, the UK client should ensure that appropriate international data transfer safeguards are in place.