The Medical Specialist Group

The Medical Speciality Group (MSG) is a Guernsey-based organisation providing secondary health care and services to islanders across a broad range of specialisms. In the provision of these medical services, the MSG processes a large volume of extremely sensitive personal data where adequate controls of data and processes are needed to protect the rights of their patients.

CBO Data Protection Health Check

CBO was commissioned to deliver a Data Protection Health Check to provide the MSG with an independent and detailed review of their current data protection framework. The Health Check was tailored to the MSG and was delivered utilising an industry best practice GDPR toolkit and data protection maturity model, alongside CBO’s practical data protection experience.

The areas of focus for the health check included;

• Policies and the supporting operational procedures

• Management of sensitive patient data

• Records retention (electronic and hard copy)

• Third-party data sharing and supplier management

Outcome

The CBO health check provided a detailed report confirming the MSG’s data protection compliance and identified tangible improvements that can be made to embed and improve data protection controls in the organisation. In addition, the report confirmed that following completion of the key recommendations, the MSG would have defined and repeatable controls across all core data protection areas.

Following the health check, CBO continued to support the MSG by completing a series of Data Protection Impact Assessments for its core processing activities and IT systems. This work supported the implementation of a dedicated Data Protection management system (DPOrganiser) within the MSG and allowed the organisation to further embed data protection in business as usual activities.

Jon Buckland, Chief Executive, MSG, said

“CBO provided independent advice and perspective to help the MSG review its Data Protection systems and clear guidance as to how we could improve. The implementation plan was developed collaboratively in a structured process which has meant we have been able to deliver changes at pace.”