Firms must make sure they comply fully with the General Data Protection Regulation (GDPR) at all times. A customer’s data must be processed in line with the Data Protection Act 2018. This act implements the EU General Data Protection Regulation and governs how personal data can be used.
Firms will need to take particular care to make sure those customers who may have mental capacity issues understand when they are being asked to give consent to their personal data being captured and processed.
Further information on the provisions of the GDPR- which apply to all customers, not just those who may have mental capacity issues – is set out in the ‘The GDPR’ module here.
