"Data protection

Record
management systems need to meet the requirements set out under the
Public Records Act 1958, the Data Protection Act 1998, the soon to be
introduced General Data Protection Regulations 2018 and the Freedom of
Information Act 2000. Legislation requires an organisation to store and
process records in a particular way and there are key obligations
placed on an organisation regarding confidentiality, security and data
sharing.

With the rise of mobile working and the need for
information on the go, more and more people are using smart devices to
access electronic data and in-house records. Such devices present added
concerns when it comes data security — they can be lost, misplaced,
stolen and hacked into. Data can be protected in a variety of ways to
ensure that all formats: desktop or virtual cloud-based systems, an
online or data management system or information accessible on hand-held
devices can be password protected and files can be encrypted to prevent
making them easily accessible, should systems be compromised"

https://app.croneri.co.uk/feature-articles/keeping-health-and-safety-records-electronically

"GDPR penalties and fines. The maximum fine under the GDPR
is up to 4% of annual global turnover or €20 million – whichever is greater – for organisations that infringe its requirements"