Professionals experience problems too!
​
Professionals have their own range of problems - arguably a wider spread, given the different roles they play and the different approaches to data protection taken by different professions.
​
However, professionals have several problems in common when they work directly with residents, for example, when...
​
-
their systems hold incomplete and/or contradictory information, and don’t provide a single view of the truth
-
...and it's unclear which of two (or more) contradictory records is the more accurate, up-to-date or trustworthy
​ -
they have to spend time and resource re-creating information that is already held by others
​ -
other services (or members of the public) assume they have access to information, but they don’t
-
it takes too long to track down information
​ -
they have to make complex and nuanced decisions out of normal business hours, and can’t contact colleagues to ask for information known to other services or held on other systems.
​
-
their organisation doesn't give them clarity about when and where data sharing is possible or necessary, and/or doesn't give them access to data held in other systems that is crucial to the person's role
Data Protection Officers experience problems when...
-
they can't easily locate all the records held about someone when responding to a Subject Access Request
-
staff aren't given the tools to manage data efficiently, leading to multiple disconnected records which are hard to update, correct, secure or delete when necessary
System administrators experience problems when...
​
-
integrations between systems have to be created and maintained on a case-by-case basis, with no overarching integration architecture to support them
-
they're required to maintain manual lookup tables for data that should be available automatically
-
data is inconsistently and/or poorly structured, leading to cumbersome processes for data extraction, reporting and/or system migration
​
Organisations experience problems when...
​
-
data is unstructured and cannot be interrogated or analysed easily
-
reporting is focused only on statutory returns rather than business intelligence
-
an emergency event occurs, and they urgently need to know who is affected by it and how
-
staff don’t seek out information that may be (or should be) out there.​​​​​​
​
​
The next part of the discussion is about the specific data we're talking about here. It's easy to get sidetracked in the Data Zone - if you'd prefer to skip over it, feel free to move on to What GDPR actually says. Trust me, the Data Zone isn't going anywhere, and you can always come back to it.