With the GDPR self-scan With the NFG, you can map out your practice's compliance with privacy regulations in fifteen minutes. You answer 22 short questions about record keeping, security, and client rights, and receive an immediate score with an overview of what still needs to be done.
Why this GDPR self-assessment for therapists?
Many healthcare providers and therapists do not know exactly what they need to comply with when it comes to privacy legislation. The GDPR self-assessment is specifically designed for small practices: no legal jargon, but practical questions about your daily work. This way, you can see in just a few minutes whether your retention periods, data processing agreements, and security are in order.
How does the GDPR self-scan work?
You will go through eight themes: file and legal basis, informing clients, client requests, security, suppliers and processors, the processing register, data breaches, and the organization of your practice. For each question, you can choose from “Yes”, “Partially”, or “No”, and where applicable, “Not applicable”. At the end, you can review your results and print them or save them as a PDF.
Your answers remain in your own browser: nothing is sent, stored, or read along, not even by the NFG. You can therefore take the scan multiple times without worry, for example, whenever you make an adjustment in your practice.
What do you get out of the GDPR self-scan?
After completing the GDPR self-scan, you will immediately see which aspects are already well-organized and which action points require attention. This is valuable, as a data breach or an incomplete processing register can have major consequences for you and your clients. By repeating the scan regularly, you maintain an overview of the current status of your practice.
For more background, also read our privacy policy. For the official rules and reporting obligation, you can contact the Dutch Data Protection Authority.
Please note: this GDPR self-assessment is a tool and not legal advice. If you have doubts about your specific situation, consult a lawyer or the GDPR helpdesk for healthcare and welfare.
