ROPAi
The library · plain English, no lectures

Why it matters.

Data protection is usually explained in articles and acronyms. This page explains it in the only terms that count: what happens to a person when each duty is kept, or not. It is the same education built into ROPAi, where every line appears at the moment you make the decision it describes. Free to read, free to borrow for your team.

Read it in the voice of the people your data is about

The register

Knowing what you hold, and why

A record of what you process is maintained

The record is reviewed, not archived

Lawful basis

The justification behind every use

Every activity has a recorded lawful basis

Retention

Promises about time

Every activity has a retention limit

Risk, before it happens

Impact assessments and kept promises

High-risk processing gets an impact assessment

Conditions on approvals are tracked to closure

Suppliers and contracts

Control when something goes wrong

Every processor has a written contract

Data that crosses borders

Protection that travels

Every transfer carries its safeguard

Accountability

Evidence, and a person who answers

An audit trail is kept

Someone is named, and answers

Confidential patient information

The Caldicott questions, asked plainly

Every use has a justified purpose

The first question is the only one that matters at the bedside: is this use of confidential patient information actually justified? Every register entry should be able to answer it.

Minimum necessary, always

Every extra field collected is extra exposure for the patient with zero extra care. Minimum necessary is not a limit on care. It is a limit on harm.

Confidentiality is the deal

Confidentiality is the deal that makes patients tell clinicians the truth. Handling data lawfully is how the deal is kept.

Responsibility has a name

When responsibility for patient data is everyone’s, it is no one’s. A named owner is the difference between a culture and a hope.

The duties behind common choices

What you take on the moment you choose
Legitimate interests

This choice creates a balancing duty: you will need to show the person’s interests were weighed and not overridden.

Consent

Consent must be as easy to withdraw as it was to give. Choosing it means building for the day someone says no.

Contract

Necessary means necessary: only the processing the agreement genuinely requires is covered.

Legal obligation

This basis borrows its strength from a specific law. Record which one, because someone will ask.

Special-category data

This data can harm people just by being known. An extra condition is required on top of the lawful basis.

Short retention

The safest record is the one you no longer hold. Short retention is protection, not loss.

Cross-border transfer

The signed safeguard is the protection that travels with the data. Without it, the transfer stands unguarded.

Now read it against your own register.

Inside ROPAi, these lines appear where they belong: on your live evidence, at the moment of the decision, in the voice of the people your data is about. The register that watches itself, and teaches while it does.

Get early access
Written by ROPAi · the same education that ships inside the product · ropai.io
Sector voices for patients, residents and customers; more voices and languages coming with each pack.