The Client
Prestige Nursing & Care, Plymouth, is a renowned provider of high-quality, personalised homecare services. Catering to a diverse range of clients, the organisation handles substantial volumes of sensitive personal data, including health-related information. As part of the Elevate Care International group, which has been collaborating with DPAS since 2023, Prestige Nursing & Care sought DPAS’s support to ensure compliance with UK GDPR, the Data Protection Act 2018, and other relevant legislation. Additionally, they aimed to strengthen their information security practices in preparation for an upcoming franchising project.
What did they need?
Due to the busy nature of Prestige Nursing and Care, internal resources were limited, therefore engaging with DPAS allowed Prestige Nursing and Care to be confident that there was no stone left unturned, in order to develop a comprehensive plan going forward.
Prestige sought the support of DPAS to:
- Evaluate compliance with UK GDPR, PECR, and information security requirements.
- Assess policies, procedures, and accountability documentation.
- Identify vulnerabilities in handling sensitive personal data.
- Review current systems and potential franchisees access
How did we help?
The DPAS consultancy team conducted several meetings with various stakeholders to establish the areas that would need to be addressed. These included:
- Policies and procedures:
- Reviewed current policies and documentation
- Assessed the handling of client and employee personal data across the organisation.
- Accountability documentation:
- Evaluated data-sharing and data processing agreements.
- Information security:
- Examined the technical and organisational measures in place to safeguard client and employee data.
The result
The consultations recognised areas where processes could be improved to further strengthen the compliance position.
DPAS supplied a range of templates and conducted document reviews to bolster Prestige Nursing & Care’s compliance position. Additionally, DPAS recommended conducting a Data Privacy Impact Assessment (DPIA) to evaluate the risks associated with processing personal data for the project—a process in which DPAS continues to provide ongoing support.
Prestige Nursing and Care are now working towards a best practice standard, allowing them to demonstrate their commitment to data protection compliance, and further foster a culture of trust.
What the client had to say:
“DPAS have always been extremely responsive and helpful when I have required data protection support in my role as the Data Protection Single Point of Contact for Prestige Nursing & Care. The DPAS team are extremely knowledgeable and are able to apply and describe data protection in real life to support and ensure that Prestige Nursing & Care fulfil our legal obligations under UK GDPR and data protection law. DPAS have been instrumental in supporting Prestige Nursing & Care as we embark on our franchising journey, to ensure that our franchise agreements are aligned with the relevant data protection legislation.”
— Sarah Ghent, Head of Risk Management, Prestige Nursing & Care
