A PDPL compliance programme for a healthcare group
Patient data sat in many systems, with no single record of what was held, why, or who could see it.
- Personal-data inventory and flow mapping
- Lawful-basis, consent and retention records
- A data-subject request process and breach procedure
Result: A defensible PDPL position and a process the privacy team could run day to day.






