No Fees!
There are no fees, costs or charges for this report.There are no fees, costs or charges to amend and rescind this report.
All fees are paid by the third party for compiling this UK GDPR report. This report is sent to you for information purposes allowing you the opportunity to address any of the UK GDPR issues before any further action is taken.
dentaal have registered with the ICO as a Data Controller. This has been confirmed on the ICO website. This is correct.
dentaal have registered with the the Care Quality Commission. This is correct.
dentaal have completed NHS DSP Tool Kit before the 30th June deadline. This is correct.
As a public authority dentaal was required to appoint a trained and qualified DPO. The name and details of the appointed DPO should have been entered in section 1.1.5 of the NHS DSP Tool kit. No appointed trained and qualified DPO was entered there. This is a contractual and mandatory requirement for all public authorities. The NHS DSP Tool Kit is in error.
This was submitted to the NHS and CQC but due to NOT appointing a trained and qualified DPO dentaal are in breach of their NHS Contract and NOT GDPR compliant. This NHS DSP Tookit Error must be corrected.
This is required by the ICO, NHS and CQC
https://ico.org.uk/for-organisations/data-protection-fee/change/update-your-registration-details/
You can verify the details in this report referencing these public registers to ensure this report on dentaal is accurate, up to date, and compliant with the NHS, ICO, and CQC data protection mandatory requirements.
https://www.cqc.org.uk/search/all?filters%5B%5D=services%3Adentist&radius=all
dentaal are not GDPR compliant and are in breach of their NHS contract for not appointing a trained and qualified DPO for their practice.
dentaal failed to appoint and designate a trained and qualified appointed DPO in the NHS DSP Tool Kit as a mandatory NHS requirement because no trained and qualified DPO has been appointed. Their NHS DSP Tool Kit is invalid and should be designated as “Regulations not met”
dentaal has NOT informed the ICO of the appointment of a trained and qualified DPO by amending their ICO Data Controller registration because they have not appointed a trained and qualified DPO.
Under Article 37(1)(a) of the GDPR it is illegal for a public authority to legally claim that its data protection standards are met if it has failed to appoint a Data Protection Officer (DPO). Currently The dentaal currently have a NHS and CQC quality rating as “Regulations Met” This is an incorrect and misleading claim and MUST be reported to the Care Quality Commission (CQC) if not rectified.
Once reported the CQC can either give two weeks notice prior to their inspection or in the case of any illegal activity or reports inspect your premises without any prior notice.
1. As required by the NHS, ICO and CQC you must appoint a trained and qualified DPO for your dental practice.
This can be an external DPO company or individual who is an expert on GDPR and has been trained as a medical DPO or an internal DPO who has been trained and expert in GDPR. However if you appoint an internal DPO we will require proof of the DPO and GDPR training for your nominated internal DPO.
Please note:
The courses and certificates below do not satisfy our training requirements for an internal DPO and do not meet our criteria for GDPR and DPO training verification:
Level 2 Data Protection Certificates. Data Security Level 1 on e-lfh Certificates and BDA DPO Certificates.
We will also not accept Free GDPR Compliance DPO Courses Like:
Allison DPO Certificates.“Train Me UK” DPO Certificates Similar free DPO training certificates. For more information please contact us using the form above.
2. We will require a confirmation that you have updated the ICO Data Controller registration informing the ICO who your appointed DPO is.
3. We will require a confirmation that you have updated your NHS DSP Tool Kit.
4. At the bottom of your privacy policy you should state the name and contact details of your new DPO. We need to have a website link to your privacy policy to confirm this.