[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjLn23pB4pYdSvVoRDtLxnzcJj18NocD54KRCPt60WwM":3,"$fDuOfbrGklFg9DNstLQj01v77JKgm8YTNP3W1V3nd5U4":76,"faq-section-":240,"white_papers":241},{"tableOfContents":4,"markDownContent":5,"htmlContent":6,"metaTitle":7,"metaDescription":8,"wordCount":9,"readTime":10,"title":11,"nbDownloads":12,"excerpt":13,"lang":14,"url":15,"intro":13,"featured":4,"state":16,"author":17,"authorId":18,"datePublication":22,"dateCreation":23,"dateUpdate":24,"mainCategory":25,"categories":41,"metaDatas":47,"imageUrl":66,"imageThumbUrls":67,"id":75},false,"# What Is GDPR in Health and Social Care?\n\nThe **General Data Protection Regulation (GDPR)** plays a crucial role in protecting personal information across the health and social care sector. From hospitals and GP practices to care homes and social services, organisations handle sensitive personal data every day.\n\nBut what exactly does GDPR mean in care, and how does it affect healthcare professionals and care providers?\n\nIn the UK, the **UK GDPR**, alongside the Data Protection Act 2018, establishes the legal framework for collecting, processing, storing and sharing personal information.\n\nFor a broader understanding of data protection legislation, read our guide on [what the GDPR is and how it works](https://www.dastra.eu/en/blog/what-is-the-gdpr/57249).\n\n## What Does GDPR Mean in Health and Social Care?\n\nIn health and social care, GDPR refers to the rules organisations must follow to protect the personal information of patients, residents and individuals receiving care.\n\nHealthcare and social care providers routinely process sensitive information, including:\n\n- Medical records and patient histories.\n\n- Diagnoses, treatments and prescriptions.\n\n- Mental health information.\n\n- Disability and support needs.\n\n- Personal identification and contact details.\n\n- Care plans and assessments.\n\nUnder the UK GDPR, information concerning an individual's health is classified as **special category data**, meaning it requires additional legal safeguards.\n\nThis is particularly important in care settings, where the misuse or unauthorised disclosure of personal information can have serious consequences for individuals.\n\n## Why Is GDPR Important in Health and Social Care?\n\nGDPR helps healthcare organisations protect patient confidentiality, maintain trust and ensure personal information is handled responsibly.\n\nIts main objectives include:\n\n- **Protecting patient privacy:** Ensuring sensitive medical and personal information is appropriately safeguarded.\n\n- **Preventing data breaches:** Reducing the risk of unauthorised access, loss or disclosure of personal data.\n\n- **Promoting transparency:** Helping individuals understand how their personal information is collected and used.\n\n- **Ensuring accountability:** Requiring organisations to demonstrate compliance with data protection legislation.\n\n- **Supporting secure data sharing:** Enabling healthcare professionals to exchange relevant information lawfully and securely.\n\nFor example, a care home may need to share a resident's medical information with a hospital to ensure appropriate treatment. GDPR does not prohibit this sharing, but requires it to have a valid legal basis and appropriate safeguards.\n\n## What Are the 7 Principles of GDPR in Health and Social Care?\n\nHealthcare and social care organisations must comply with the seven fundamental principles of the UK GDPR.\n\n1. **Lawfulness, fairness and transparency:** Personal data must be processed lawfully, fairly and transparently.\n\n2. **Purpose limitation:** Information must be collected for specified, explicit and legitimate purposes.\n\n3. **Data minimisation:** Organisations should only collect personal data that is necessary for its intended purpose.\n\n4. **Accuracy:** Patient and care records must be accurate and kept up to date where necessary.\n\n5. **Storage limitation:** Personal information must not be kept longer than necessary, subject to applicable retention requirements.\n\n6. **Integrity and confidentiality:** Appropriate technical and organisational measures must protect personal data.\n\n7. **Accountability:** Organisations must demonstrate that they comply with these principles.\n\nUnderstanding these principles is essential for organisations seeking to develop an effective [GDPR compliance framework](https://www.dastra.eu/en/blog/what-is-the-gdpr/57249).\n\n## How Does GDPR Apply to Healthcare and Care Workers?\n\nGDPR affects anyone who handles personal information in a healthcare or social care environment, including doctors, nurses, social workers, care assistants and administrative staff.\n\nIn practice, professionals should:\n\n- Access patient records only when authorised and necessary for their responsibilities.\n\n- Avoid sharing confidential information with unauthorised individuals.\n\n- Use approved systems to store and communicate sensitive information.\n\n- Report suspected data breaches promptly through their organisation's procedures.\n\n- Follow their organisation's data protection and confidentiality policies.\n\n### Do Healthcare Providers Always Need Patient Consent?\n\nNo. One common misconception is that healthcare professionals must always obtain GDPR consent before processing patient information.\n\nUnder the UK GDPR, organisations must identify an appropriate lawful basis under Article 6. When processing health information, they must also meet a separate condition under Article 9.\n\nFor example, **Article 9(2)(h)** allows certain processing necessary for providing health or social care, subject to legal requirements and confidentiality safeguards.\n\nThis means healthcare providers may be able to process relevant patient information without relying on GDPR consent.\n\nHowever, separate duties of confidentiality may still apply, and consent or another justification may be required for particular disclosures.\n\n## How Can Health and Social Care Organisations Comply With GDPR?\n\nMaintaining GDPR compliance requires more than protecting medical records. Organisations need clear processes for managing personal data throughout its lifecycle.\n\nKey measures include:\n\n- **Maintaining records of processing activities (RoPA):** Documenting how personal information is collected, used, stored and shared, where required.\n\n- **Conducting Data Protection Impact Assessments (DPIAs):** Identifying and mitigating risks associated with processing likely to result in high risks to individuals.\n\n- **Managing data subject requests:** Establishing procedures to respond to individuals exercising their data protection rights.\n\n- **Implementing access controls:** Ensuring employees can only access the information necessary for their roles.\n\n- **Managing data breaches:** Establishing processes to detect, investigate and report personal data breaches where required.\n\n- **Training staff:** Helping employees understand their data protection responsibilities.\n\nUsing a dedicated privacy management platform such as [Dastra](https://www.dastra.eu/en) can help organisations centralise compliance activities, maintain records of processing, manage DPIAs and monitor data protection risks.\n\n## Conclusion\n\nUnderstanding **GDPR in health and social care** is essential for protecting sensitive information, maintaining patient trust and meeting legal obligations.\n\nBy implementing appropriate data protection measures, training employees and establishing clear governance procedures, healthcare and social care organisations can protect personal information while continuing to provide effective care.\n\nFor more information about data protection obligations and best practices, explore our [complete GDPR guide](https://www.dastra.eu/en/blog/what-is-the-gdpr/57249).","\u003Ch1 id=\"what-is-gdpr-in-health-and-social-care\">What Is GDPR in Health and Social Care?\u003C/h1>\n\u003Cp>The \u003Cstrong>General Data Protection Regulation (GDPR)\u003C/strong> plays a crucial role in protecting personal information across the health and social care sector. From hospitals and GP practices to care homes and social services, organisations handle sensitive personal data every day.\u003C/p>\n\u003Cp>But what exactly does GDPR mean in care, and how does it affect healthcare professionals and care providers?\u003C/p>\n\u003Cp>In the UK, the \u003Cstrong>UK GDPR\u003C/strong>, alongside the Data Protection Act 2018, establishes the legal framework for collecting, processing, storing and sharing personal information.\u003C/p>\n\u003Cp>For a broader understanding of data protection legislation, read our guide on \u003Ca href=\"https://www.dastra.eu/en/blog/what-is-the-gdpr/57249\">what the GDPR is and how it works\u003C/a>.\u003C/p>\n\u003Ch2 id=\"what-does-gdpr-mean-in-health-and-social-care\">What Does GDPR Mean in Health and Social Care?\u003C/h2>\n\u003Cp>In health and social care, GDPR refers to the rules organisations must follow to protect the personal information of patients, residents and individuals receiving care.\u003C/p>\n\u003Cp>Healthcare and social care providers routinely process sensitive information, including:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cp>Medical records and patient histories.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Diagnoses, treatments and prescriptions.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Mental health information.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Disability and support needs.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Personal identification and contact details.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Care plans and assessments.\u003C/p>\n\u003C/li>\n\u003C/ul>\n\u003Cp>Under the UK GDPR, information concerning an individual's health is classified as \u003Cstrong>special category data\u003C/strong>, meaning it requires additional legal safeguards.\u003C/p>\n\u003Cp>This is particularly important in care settings, where the misuse or unauthorised disclosure of personal information can have serious consequences for individuals.\u003C/p>\n\u003Ch2 id=\"why-is-gdpr-important-in-health-and-social-care\">Why Is GDPR Important in Health and Social Care?\u003C/h2>\n\u003Cp>GDPR helps healthcare organisations protect patient confidentiality, maintain trust and ensure personal information is handled responsibly.\u003C/p>\n\u003Cp>Its main objectives include:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cp>\u003Cstrong>Protecting patient privacy:\u003C/strong> Ensuring sensitive medical and personal information is appropriately safeguarded.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Preventing data breaches:\u003C/strong> Reducing the risk of unauthorised access, loss or disclosure of personal data.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Promoting transparency:\u003C/strong> Helping individuals understand how their personal information is collected and used.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Ensuring accountability:\u003C/strong> Requiring organisations to demonstrate compliance with data protection legislation.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Supporting secure data sharing:\u003C/strong> Enabling healthcare professionals to exchange relevant information lawfully and securely.\u003C/p>\n\u003C/li>\n\u003C/ul>\n\u003Cp>For example, a care home may need to share a resident's medical information with a hospital to ensure appropriate treatment. GDPR does not prohibit this sharing, but requires it to have a valid legal basis and appropriate safeguards.\u003C/p>\n\u003Ch2 id=\"what-are-the-7-principles-of-gdpr-in-health-and-social-care\">What Are the 7 Principles of GDPR in Health and Social Care?\u003C/h2>\n\u003Cp>Healthcare and social care organisations must comply with the seven fundamental principles of the UK GDPR.\u003C/p>\n\u003Col>\n\u003Cli>\u003Cp>\u003Cstrong>Lawfulness, fairness and transparency:\u003C/strong> Personal data must be processed lawfully, fairly and transparently.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Purpose limitation:\u003C/strong> Information must be collected for specified, explicit and legitimate purposes.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Data minimisation:\u003C/strong> Organisations should only collect personal data that is necessary for its intended purpose.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Accuracy:\u003C/strong> Patient and care records must be accurate and kept up to date where necessary.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Storage limitation:\u003C/strong> Personal information must not be kept longer than necessary, subject to applicable retention requirements.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Integrity and confidentiality:\u003C/strong> Appropriate technical and organisational measures must protect personal data.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Accountability:\u003C/strong> Organisations must demonstrate that they comply with these principles.\u003C/p>\n\u003C/li>\n\u003C/ol>\n\u003Cp>Understanding these principles is essential for organisations seeking to develop an effective \u003Ca href=\"https://www.dastra.eu/en/blog/what-is-the-gdpr/57249\">GDPR compliance framework\u003C/a>.\u003C/p>\n\u003Ch2 id=\"how-does-gdpr-apply-to-healthcare-and-care-workers\">How Does GDPR Apply to Healthcare and Care Workers?\u003C/h2>\n\u003Cp>GDPR affects anyone who handles personal information in a healthcare or social care environment, including doctors, nurses, social workers, care assistants and administrative staff.\u003C/p>\n\u003Cp>In practice, professionals should:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cp>Access patient records only when authorised and necessary for their responsibilities.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Avoid sharing confidential information with unauthorised individuals.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Use approved systems to store and communicate sensitive information.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Report suspected data breaches promptly through their organisation's procedures.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>Follow their organisation's data protection and confidentiality policies.\u003C/p>\n\u003C/li>\n\u003C/ul>\n\u003Ch3 id=\"do-healthcare-providers-always-need-patient-consent\">Do Healthcare Providers Always Need Patient Consent?\u003C/h3>\n\u003Cp>No. One common misconception is that healthcare professionals must always obtain GDPR consent before processing patient information.\u003C/p>\n\u003Cp>Under the UK GDPR, organisations must identify an appropriate lawful basis under Article 6. When processing health information, they must also meet a separate condition under Article 9.\u003C/p>\n\u003Cp>For example, \u003Cstrong>Article 9(2)(h)\u003C/strong> allows certain processing necessary for providing health or social care, subject to legal requirements and confidentiality safeguards.\u003C/p>\n\u003Cp>This means healthcare providers may be able to process relevant patient information without relying on GDPR consent.\u003C/p>\n\u003Cp>However, separate duties of confidentiality may still apply, and consent or another justification may be required for particular disclosures.\u003C/p>\n\u003Ch2 id=\"how-can-health-and-social-care-organisations-comply-with-gdpr\">How Can Health and Social Care Organisations Comply With GDPR?\u003C/h2>\n\u003Cp>Maintaining GDPR compliance requires more than protecting medical records. Organisations need clear processes for managing personal data throughout its lifecycle.\u003C/p>\n\u003Cp>Key measures include:\u003C/p>\n\u003Cul>\n\u003Cli>\u003Cp>\u003Cstrong>Maintaining records of processing activities (RoPA):\u003C/strong> Documenting how personal information is collected, used, stored and shared, where required.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Conducting Data Protection Impact Assessments (DPIAs):\u003C/strong> Identifying and mitigating risks associated with processing likely to result in high risks to individuals.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Managing data subject requests:\u003C/strong> Establishing procedures to respond to individuals exercising their data protection rights.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Implementing access controls:\u003C/strong> Ensuring employees can only access the information necessary for their roles.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Managing data breaches:\u003C/strong> Establishing processes to detect, investigate and report personal data breaches where required.\u003C/p>\n\u003C/li>\n\u003Cli>\u003Cp>\u003Cstrong>Training staff:\u003C/strong> Helping employees understand their data protection responsibilities.\u003C/p>\n\u003C/li>\n\u003C/ul>\n\u003Cp>Using a dedicated privacy management platform such as \u003Ca href=\"https://www.dastra.eu/en\">Dastra\u003C/a> can help organisations centralise compliance activities, maintain records of processing, manage DPIAs and monitor data protection risks.\u003C/p>\n\u003Ch2 id=\"conclusion\">Conclusion\u003C/h2>\n\u003Cp>Understanding \u003Cstrong>GDPR in health and social care\u003C/strong> is essential for protecting sensitive information, maintaining patient trust and meeting legal obligations.\u003C/p>\n\u003Cp>By implementing appropriate data protection measures, training employees and establishing clear governance procedures, healthcare and social care organisations can protect personal information while continuing to provide effective care.\u003C/p>\n\u003Cp>For more information about data protection obligations and best practices, explore our \u003Ca href=\"https://www.dastra.eu/en/blog/what-is-the-gdpr/57249\">complete GDPR guide\u003C/a>.\u003C/p>\n","What Is GDPR in Health and Social Care? | Dastra","Discover what GDPR means in health and social care, how it protects patient data, and the key rules healthcare providers and care organisations must follow.",958,5,"What Is GDPR in Health and Social Care?",0,null,"en","what-is-gdpr-in-health-and-social-care","Published",{"id":18,"displayName":19,"avatarUrl":13,"bio":13,"blogUrl":13,"color":13,"userId":20,"creationDate":21},25699,"Zelie Aderic",28682,"2026-08-06T20:46:39.3043599","2026-10-08T11:35:00","2026-10-08T11:35:27.4960702","2026-10-08T11:43:04.5049292",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":31},2,"Blog","A list of curated articles provided by the community","blog","#28449a",[32,35,38],{"lang":33,"name":27,"description":34},"fr","Une liste d'articles rédigés par la communauté",{"lang":36,"name":27,"description":37},"es","Una lista de artículos escritos por la comunidad",{"lang":39,"name":27,"description":40},"de","Eine Liste von Artikeln, die von der Community verfasst wurden",[42],{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":43},[44,45,46],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},[48],{"typeMetaDataId":49,"value":50,"id":65},9,{"title":51,"items":52},"Frequently Asked Questions :",[53,56,59,62],{"question":54,"answer":55},"What are the 7 principles of GDPR in care?","\u003Cp>An example is a care home restricting access to residents' medical records so that only authorised staff can view information necessary for providing care. This helps protect confidentiality and prevent unauthorised access.\u003C/p>",{"question":57,"answer":58},"Can care workers share patient information under GDPR?","\u003Cp>The seven principles are lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.\u003C/p>",{"question":60,"answer":61},"Who is responsible for GDPR compliance in healthcare?","\u003Cp>Yes. Care homes must comply with applicable data protection legislation when handling residents' personal information, including medical records, care plans and contact details.\u003C/p>",{"question":63,"answer":64},"How long can healthcare organisations keep patient records?","\u003Cp>GDPR does not establish a single retention period for all medical records. Healthcare organisations must follow applicable legal and regulatory retention requirements, including relevant NHS records management guidance, and should not keep personal data longer than necessary.\u003C/p>",118223,"https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-original.jpg",[68,69,70,71,72,73,74],"https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-1000.webp","https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2.webp","https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-1500.webp","https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-800.webp","https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-600.webp","https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-300.webp","https://static.dastra.eu/content/b6bc1fe2-5680-4109-907e-c22566838c11/en-calendrier-2-100.webp",60653,{"total":77,"items":78,"parent":235},8,[79,100,121,143,164,184,202,218],{"id":80,"name":81,"description":82,"url":83,"color":84,"parentId":26,"count":13,"imageUrl":13,"parent":85,"order":77,"translations":90},20,"Inside Dastra","Go behind the scenes at Dastra: company news, culture, events, team highlights, and the people driving our GDPR solution.","dastra-life","#e3cf68",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":86},[87,88,89],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},[91,94,97],{"lang":33,"name":92,"description":93},"Vie de Dastra","Plongez dans les coulisses de Dastra : actualités internes, culture d’entreprise, événements, équipes et engagements. Découvrez qui se cache derrière notre solution RGPD.",{"lang":39,"name":95,"description":96},"Innerhalb von Dastra","Eintauchen in das Unternehmen",{"lang":36,"name":98,"description":99},"Dentro de Dastra","Sumérjase en la empresa",{"id":101,"name":102,"description":103,"url":104,"color":105,"parentId":26,"count":13,"imageUrl":13,"parent":106,"order":111,"translations":112},69,"Expertise","Gain insights from our experts on GDPR compliance, data protection, and privacy challenges. In-depth articles, professional analysis, and real-world best practices.","indepth","#000000",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":107},[108,109,110],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},7,[113,115,118],{"lang":33,"name":102,"description":114},"Bénéficiez des conseils de nos experts sur la conformité RGPD, la protection des données et les enjeux privacy. Articles de fond, analyses et retours d’expérience métier.",{"lang":39,"name":116,"description":117},"Fachwissen","Entdecken Sie die Artikel unserer DSGVO-Experten",{"lang":36,"name":119,"description":120},"Experiencia","Descubre los artículos de nuestros expertos en Privacy",{"id":122,"name":123,"description":124,"url":125,"color":126,"parentId":26,"count":13,"imageUrl":13,"parent":127,"order":132,"translations":133},4,"Use cases","Discover how companies use Dastra to manage their GDPR compliance. Testimonials, use cases, and real-world integrations of our privacy management solution.","case-studies","#b61b9c",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":128},[129,130,131],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},6,[134,137,140],{"lang":33,"name":135,"description":136},"Retours d'expérience","Découvrez comment les entreprises utilisent Dastra pour piloter leur conformité RGPD. Témoignages, cas d’usage et intégrations concrètes de notre solution de privacy management.",{"lang":39,"name":138,"description":139},"Case Studies","Entdecken Sie die Erfahrungsberichte unserer Kunden",{"lang":36,"name":141,"description":142},"Casos prácticos","Descubra los testimonios de nuestros clientes",{"id":144,"name":145,"description":146,"url":147,"color":148,"parentId":26,"count":13,"imageUrl":13,"parent":149,"order":10,"translations":154},10,"Release notes","Keep up with the latest features of Dastra: product updates, new functionalities, and improvements to our GDPR compliance and data management platform.","release","#8c316a",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":150},[151,152,153],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},[155,158,161],{"lang":33,"name":156,"description":157},"Notes de version","Restez informé(e) des dernières fonctionnalités de Dastra : mises à jour, évolutions produit et améliorations de notre solution de conformité RGPD et de gestion des données personnelles.",{"lang":39,"name":159,"description":160},"Veröffentlichungen","Alle Versionshinweise und Funktionen von Dastra",{"lang":36,"name":162,"description":163},"Lanzamientos","Todas las notas de la versión e información sobre las funciones de Dastra",{"id":49,"name":165,"description":166,"url":167,"color":168,"parentId":26,"count":13,"imageUrl":13,"parent":169,"order":122,"translations":174},"News","Stay up to date with the latest news from data protection authorities: decisions, fines, guidelines, and regulatory trends in GDPR and privacy.","news","#1676ca",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":170},[171,172,173],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},[175,178,181],{"lang":33,"name":176,"description":177},"Actualités","Suivez les dernières actualités des autorités de protection des données (CNIL, EDPS, etc.) : décisions, sanctions, lignes directrices et tendances réglementaires en matière de RGPD et de privacy.",{"lang":36,"name":179,"description":180},"Actualidad","Todos los artículos relativos a las autoridades de protección de datos",{"lang":39,"name":182,"description":183},"Nachrichten","Alle Artikel mit Bezug zu Datenschutzbehörden",{"id":185,"name":186,"description":187,"url":188,"color":105,"parentId":26,"count":13,"imageUrl":13,"parent":189,"order":194,"translations":195},221,"AI Governance","Best practices, regulatory frameworks and real-world insights to manage AI responsibly and in compliance with the AI Act.","ai-governance",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":190},[191,192,193],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},3,[196,199],{"lang":33,"name":197,"description":198},"Gouvernance de l'IA","Bonnes pratiques, cadres réglementaires et retours d'expérience pour piloter l'IA de façon responsable et conforme à l'AI Act.",{"lang":39,"name":200,"description":201},"KI-Governance","Best Practices, regulatorische Rahmenbedingungen und Praxiserfahrungen für einen verantwortungsvollen KI-Einsatz im Einklang mit dem AI Act.",{"id":203,"name":204,"description":205,"url":206,"color":105,"parentId":26,"count":13,"imageUrl":13,"parent":207,"order":26,"translations":212},220,"Compliance","Regulatory news, practical guides and analysis to keep your organization compliant with the GDPR and beyond.","compliance",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":208},[209,210,211],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},[213,216],{"lang":33,"name":214,"description":215},"Conformité","Actualités réglementaires, guides pratiques et analyses pour maintenir votre organisation en conformité RGPD et au-delà.",{"lang":39,"name":204,"description":217},"Regulatorische Neuigkeiten, Praxisleitfäden und Analysen, um Ihre Organisation DSGVO-konform und darüber hinaus aufzustellen.",{"id":219,"name":220,"description":221,"url":222,"color":105,"parentId":26,"count":13,"imageUrl":13,"parent":223,"order":228,"translations":229},219,"Privacy","Principles, techniques and trends in personal data protection — from privacy by design to data subject rights.","privacy",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":224},[225,226,227],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},1,[230,232],{"lang":33,"name":220,"description":231},"Principes, techniques et tendances autour de la protection des données personnelles — de la privacy by design aux droits des personnes.",{"lang":39,"name":233,"description":234},"Datenschutz","Grundsätze, Methoden und Trends zum Schutz personenbezogener Daten — von Privacy by Design bis zu Betroffenenrechten.",{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":236},[237,238,239],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},[],{"items":242,"total":309,"size":228,"page":228},[243],{"title":244,"nbDownloads":111,"excerpt":245,"lang":14,"url":246,"intro":247,"featured":4,"state":16,"author":248,"authorId":249,"datePublication":253,"dateCreation":254,"dateUpdate":255,"mainCategory":256,"categories":262,"metaDatas":295,"imageUrl":299,"imageThumbUrls":300,"id":308},"AI Act Transparency Notice Template (Word Format) Compliant with Article 50","Download a Microsoft Word template for AI transparency notices compliant with Article 50 of the EU AI Act, including four ready-to-use notice variants for AI providers and deployers.","ai-act-transparency-notice-template-word-format-compliant-with-article-50","Since 2 August 2026, Article 50 of the European Artificial Intelligence Act (AI Act) has introduced transparency obligations for several categories of AI systems. AI providers and deployers must inform individuals when they interact with AI, are exposed to AI-generated content, are subject to emotion recognition or biometric categorisation, or encounter AI-generated deepfakes. To help organisations comply with these requirements, Dastra provides a free Microsoft Word template that can be adapted and integrated into your documentation, websites and user interfaces.",{"id":249,"displayName":250,"avatarUrl":251,"bio":13,"blogUrl":13,"color":13,"userId":249,"creationDate":252},38,"Paul-Emmanuel Bidault","https://static.dastra.eu/tenant-27/avatar/38/paul-emmanuel-bidault-150.jpg","2019-12-03T19:09:28","2026-08-06T12:40:00","2026-08-06T12:40:04.9054724","2026-09-14T13:50:25.0328281",{"id":257,"name":258,"description":13,"url":259,"color":260,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":194,"translations":261},70,"Livre blanc","white-papers","#1795d3",[],[263,268,273,275,283,291],{"id":26,"name":27,"description":28,"url":29,"color":30,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":12,"translations":264},[265,266,267],{"lang":33,"name":27,"description":34},{"lang":36,"name":27,"description":37},{"lang":39,"name":27,"description":40},{"id":269,"name":270,"description":13,"url":271,"color":105,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":132,"translations":272},48,"Ressources","resources",[],{"id":257,"name":258,"description":13,"url":259,"color":260,"parentId":13,"count":13,"imageUrl":13,"parent":13,"order":194,"translations":274},[],{"id":276,"name":277,"description":278,"url":279,"color":280,"parentId":269,"count":13,"imageUrl":281,"parent":13,"order":12,"translations":282},83,"IA","Toutes les ressources sur l'IA","intelligence-artificielle","#342d9f","https://static.dastra.eu/tag/9bce43f2-c750-4e6c-9b31-18ea1409a5ba/dalle-2024-11-25-225448-a-modern-and-sleek-square-logo-for-artificial-intellige-original.webp",[],{"id":284,"name":285,"description":286,"url":287,"color":288,"parentId":269,"count":13,"imageUrl":289,"parent":13,"order":12,"translations":290},92,"Artificial intelligence","Key ressources for AI","ai-ressources","#0f1cd7","https://static.dastra.eu/tag/3cf3f039-04ed-4b3a-b386-a99b43cb4e64/ai-act-bis-original.png",[],{"id":185,"name":186,"description":187,"url":188,"color":105,"parentId":26,"count":13,"imageUrl":13,"parent":13,"order":194,"translations":292},[293,294],{"lang":33,"name":197,"description":198},{"lang":39,"name":200,"description":201},[296],{"typeMetaDataId":122,"value":297,"id":298},"https://static.dastra.eu/backofficefilescontainer/875e1e54-f479-43ff-9572-c4add516b85c/Dastra-AI-transparency-notice-template-art50-EN.docx",117744,"https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-original.png",[301,302,303,304,305,306,307],"https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-1000.webp","https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en.webp","https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-1500.webp","https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-800.webp","https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-600.webp","https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-300.webp","https://static.dastra.eu/content/34bf6ba9-1e42-45b0-b292-63b6a01a0c70/ai-transparency-notice-1600x900-en-100.webp",60275,14]