Community pharmacies should be processing data which complies with the Data Protection principles previously mentioned.
The Data Protection Act 2018 confers a legal obligation on data controllers to demonstrate and document compliance and changes the original reactive duty to a proactive one.
Ongoing recording and documentation of activities will demonstrate accountability to the ICO if required.