"Data protection

Record management systems need to meet the requirements set out under the Public Records Act 1958, the Data Protection Act 1998, the soon to be introduced General Data Protection Regulations 2018 and the Freedom of Information Act 2000. Legislation requires an organisation to store and process records in a particular way and there are key obligations placed on an organisation regarding confidentiality, security and data sharing.

With the rise of mobile working and the need for information on the go, more and more people are using smart devices to access electronic data and in-house records. Such devices present added concerns when it comes data security — they can be lost, misplaced, stolen and hacked into. Data can be protected in a variety of ways to ensure that all formats: desktop or virtual cloud-based systems, an online or data management system or information accessible on hand-held devices can be password protected and files can be encrypted to prevent making them easily accessible, should systems be compromised"

https://app.croneri.co.uk/feature-articles/keeping-health-and-safety-records-electronically

"GDPR penalties and fines. The maximum fine under the GDPR is up to 4% of annual global turnover or €20 million – whichever is greater – for organisations that infringe its requirements"