Posts tagged " hypnotherapy "

GDPR AND ALTERNATIVE THERAPY CONSENT FORMS

July 24th, 2019 Posted by Acupuncture, Alternative Medicine, Clinic app, Consent forms, Consultation Forms, Electronic signatures, GDPR, Holistic Health, Hypnotherapy, Medical History Form, Paperless, Photography, Sports Therapy, Uncategorized, Web Design No Comment yet

It is now over one year since the GDPR legislation came into effect on the 25th of May 2018, and it’s still a major area of concern to many small and medium-sized endeavours.

The Alternative Medicine sector is no exception as I discovered when we exhibited at the Holistic Medicine Exhibition at the ICC in Birmingham recently. 

Almost everyone I spoke to wanted to know if we could help them with compliance. It was as important as the cost savings of going paperless for them. Convenience for them and their clients is the other main benefit.

Many of them were members of a Professional Hypnotherapy Association. They comply with the hypnotherapy code of ethics they studied as part of Hypnotherapy training. Therefore complying with GDPR is important too.

Fortunately, using paperless forms is a great cure for many GDPR headaches.

Nothing worries us more than the unknown. So I thought I’d write down a few words about how GDPR affects Hypnotherapists.

GDPR IS A SOLUTION NOT JUST A PROBLEM

Many people saw GDPR for alternative practitioners as a problem. By offering more transparency it safeguards consumer rights in our online world. Not a problem but a solution.

However, GDPR was written by highly paid lawyers. It appears designed to be complex to keep them in business. 

So here is my take on it, let’s start from the top, shall we? 

WHAT IS PERSONAL DATA?

Personal data means information relating to an identifiable person. Information including, names, addresses, dates of birth, ethnicity, medical information etc.

If you collect personal data for example, using an iPEGS electronic consent form you are the Controller and we are the Processor. The same is true for Medical history, Treatment plan or in fact any of our forms.

As a controller, you determine the purposes of processing personal data. We as a processor, are responsible for processing the data, storing it securely as well as keeping it accessible and within the law. 

A RECENT SURVEY SHOWED NEARLY 40% OF SMALL BUSINESSES DID NOT UNDERSTAND GDPR REGULATIONS

Most people who use paper forms are both the controller and processor. They hold all the responsibility themselves. 

HANDWRITTEN FORMS ARE DATA TOO

GDPR applies to both automated personal data and to manual filing systems. Handwritten forms are data just as the most sophisticated online form, only more cumbersome. 

You must keep an inventory of all personal data that you process.

If that data is digital with the right provider it is relatively simple to keep within the law. Paper-based data is much harder to manage.

THINGS YOU AS CONTROLLER OF PERSONAL DATA SHOULD CONSIDER

  • You must obtain consent to collect data, even the informed Consent to treatment form. You must receive Informed consent to collect Informed consent.
  • How do you store information? In a filing cabinet, on an excel sheet, or securely encrypted in the cloud?
  • Do you share or transport data and if so, how? Is it in the car as you travel between clients? Scanned, printed out and posted, emailed? All these present risks. If submitted securely to a UK data centre, as with iPEGS forms, for example, those risks disappear. Unlike your data might.
  • Is the information subject to a retention schedule?
  • You must keep client data, usually for 7 years.
  • The type of information you are holding (names, addresses, dates of birth, medical history, etc).
  • Do you collect it as paper forms, electronic forms, etc?
  • Will the information for marketing, research, evidence of permission?
  • Who will share the data?
  • Will there be an effect on the individual concerned and is it likely to cause any individuals to object or complain?

ALTERNATIVE THERAPISTS CLIENT’S RIGHTS UNDER GDPR

  • The right to be aware, of data you hold on them.
  • To have timely access to their personal data.
  • The right to request rectification, without delay.
  • To have personal data deleted.
  • The right to data portability, which allows individuals to obtain and reuse their personal data.
  • The right to object, for example, using their data for direct marketing.

If you lose data and let’s face it losing a paper form is easy to do even in the best run surgeries, this counts as a breach.

GDPR WHAT ARE THE RISKS FOR THE HYPNOTHERAPY PRACTITIONER?

If someone gains unauthorised access to your client’s private information, you have 72 hours to report the data breach to both your customers and any data controllers, if your company is large enough to require a GDPR data controller. Failure to report breaches within this timeframe can lead to heavy fines. 

For most practices, GDPR creates the need for greater investment either in consultant’s fees or in your own valuable time. Ensuring your operational processes are up to the required standards, ensuring websites, forms etc are designed and optimised for the latest protocols.

THINGS TO CONSIDER WHEN CONTROLLING DATA

  • Are you or someone on your team trained on data protection?
  • What changes have you made this year to become GDPR compliant?
  • Have you built client consent into your system ?

Clients can give consent in various ways, such as email, a contact form on the website, a check-box on your landing page, tick box on the form etc.

Consent records must specify the time and date when consent was given, as well as the exact means they delivered consent. 

COMPLIANCE INSPIRES TRUST

Compliance not only protects the patient, but it also protects your surgery from overstepping the boundaries.

Companies who seem to cut corners with data protection might well cut corners elsewhere. Most of us are members of a National Hypnotherapy association and have no problems with Hypnotherapy ethical issues. Cutting corners is not in our DNA we understand Our ethics and professionalism are all we have. So going digital make sense.

Can you simply and rapidly process data deletion for clients. Is it at the press of a button or will it take hours of work?

Do any 3rd parties have access to your client’s data? Third party access to data is all too common, third parties who might be using the same network or facilities, you need to be aware of any other parties who might have access to the data you’re collecting. This can be a particular problem in mixed therapy practices. Is it kept in a filing cabinet where others have access or a shared network?

How easy is it to export your data? Is it available at the touch of a button or is it a trip down to the cellar and a root through the filing cabinets?

PRIVACY BY DESIGN

One component of GDPR is privacy by design. This requires therapists to design their systems with the proper security protocols in place from the start. Failure to design your systems of data collection the right way will result in a hefty fine. It is a good idea to take a good look at your website if it hasn’t had a design overhaul in the last year or so.

Are your forms easy to find and wipe? Who has copies? Are you holding data on your phone, laptop or PC and do others have access to these devices?

GDPR seems complex, but essentially it refers to the need to have business systems designed with proper security and privacy measures integral. iPEGS paperless forms, for example, is such a system.

If you would like to find out more about how a system such as iPEGS can help you manage your client data, please check out our website www.ipegs.co.uk or contact me directly steve @ipegs.co.uk or call me on 01244 955350, I will be pleased to help.

GDPR ISSUES FOR THE ALTERNATIVE MEDICINE SECTOR

July 24th, 2019 Posted by Acupuncture, Alternative Medicine, Consent forms, Consultation Forms, GDPR, Holistic Health, Insurance, Paperless, Security No Comment yet

Most of us are way beneath the higher risk threshold but our insurance companies are taking these levels of risk on our behalf and charging us to do so.

I spent some time this weekend chatting to specialist Healthcare Insurance Brokers at the exhibition and they were very pleased to see me. They assured me that the actuaries will sleep better knowing their clients are using iPEGS paperless forms.

Now I like a well-rested actuary as well as the next man, but my objective is to get them to discount insurance for our users. Not only is your risk less, so are theirs, after all.

For most practices, GDPR creates the need for greater investment either in consultant’s fees or in your own valuable time. Ensuring your operational processes are up to the required standards, ensuring websites, forms etc are designed and optimised for the latest protocols.

Large companies may appoint a DPO (data protection officer). However, for most of us DPO is just another hat to hang alongside the, therapist, counsellor, head of HR, finance, marketeer, sales manager and parent hats ti name a few. Being too busy is no defence in law unfortunately. I’ve always believed it’s a clever man who buys his brains. So if we can rely on professionals like iPEGS and save money into the bargain it’s a bonus.

COMPLIANCE INSPIRES TRUST

Compliance isn’t solely an expense, in order to conform to the rules, it helps to inspire trust and confidence in the eyes of our patients.

Companies who seem to cut corners with data protection might well cut corners elsewhere. Most of us are members of a National Hypnotherapy association and have no problems with Hypnotherapy ethical issues. Cutting corners is not in our DNA we understand our ethics and professionalism are all we have. So going digital make sense.

Compliance not only protects the patient, but it also protects your clinic from overstepping the boundaries.

THINGS TO CONSIDER WHEN CONTROLLING DATA

  • Are you or someone on your team trained on data protection?
  • What changes have you made this year to become GDPR compliant?
  • Have you built client consent into your system?

Clients can give consent in various ways, such as email, a contact form on the website, a check-box on your landing page, tick box on the form etc.

Consent records must specify the time and date when consent was given, as well as the exact means that they delivered consent. 

Can you simply and rapidly process data deletion for clients. Is it at the press of a button or will it take hours of work?

Do any 3rd parties have access to your client’s data? Third party access to data is all too common, third parties who might be using the same network or facilities, you need to be aware of any other parties who might have access to the data you’re collecting. This can be a particular problem in mixed therapy practices. Is it kept in a filing cabinet where others have access or a shared network?

WHAT PROTECTIVE MEASURES DO YOU HAVE IN PLACE?

Are there proper security protocols in place that will detect data breaches when they occur? How do you know if your client’s data had been hacked into or copied? The last thing you want is to find out about a data breach from your users and valued client. This is a sure-fire way to lose trust. 

How easy is it to export your data? Is it available at the touch of a button or is it a trip down to the cellar and a root through the filing cabinets?

One component of GDPR is privacy by design. This requires therapists to design their systems with the proper security protocols in place from the start. Failure to design your systems of data collection the right way will result in a hefty fine. It is a good idea to take a good look at your website if it hasn’t had a design overhaul in the last year or so.

Are your forms easy to find and wipe? Who has copies? Are you holding data on your laptop or PC? Do others have access to these devices?

The concept seems sort of complex, but essentially it refers to the need to have business systems designed with proper security and privacy measures integral. iPEGS paperless forms provides such a system.

If you would like to help improve the management of your client data and in the way you collect it please check out our website www.ipegs.co.uk or contact me directly steve@ipegs.co.uk or call on 01244 955350, I will be pleased to help.

Time for Hypnotherapy Consultation forms to go Paperless?

June 10th, 2019 Posted by Alternative Medicine, Consent forms, Consultation Forms, Electronic signatures, Holistic Health, Hypnotherapy, Medical History Form, Paperless, Sports Therapy, Uncategorized No Comment yet

Paper Hypnotherapy Consultation Forms – are they obsolete?


When was the last time you made a call from a phone box? Is it months or years?

I can remember my first mobile phone. It was the size of a brick and with the battery, it weighed more than one. I loved that phone, now my mobile is worse than the kids when it comes to demanding my attention.

I have another question, when was the last time you wrote a letter? Not an email, a real paper and envelope, stamp and letter box letter?

All that paper and stamps and you waiting weeks for a reply.

Do you remember Nora Ephron’s movie ‘You Have Mail’ with Meg Ryan and Tom Hanks? I loved that movie and email changed our world, didn’t it? It became our liberation!

Since then we haven’t looked back. Email too, is not exactly what we planned for it but can you imagine life without it? Email is digital, paperless, almost instantaneous and easy to file away where you can find it.

Ok, so can you please tell me why you are still using the same paper based Hypnotherapy Consultation Form that you used when you carried change for the phone box and had a book of stamps in your desk drawer?

Why are you still dragging out the clipboard with your Hypnotherapy Consent Form neatly printed out ready for filling in and squirrelling away in a filing cabinet along with the patient’s Health History Form, your notes and options? After all, we all love a clipboard shoved in our face don’t we? Hypnotherapy is all about decreasing stress not increasing it.

Isn’t time your Consultation Forms caught up with the rest of your world?


You certainly have an elegant and informative web page. Your mobile phone is as smart as the computers that NASA used for the moon landing. You do your accounts on Accounting Software not an abacus. So why are you still using paper forms?

Is it because no one has offered you a quick, flexible solution?

iPEGS offers state of the art, paperless forms for Hypnotherapists


With iPEGS you can ditch the paper ‘Stop Smoking Assessment Form’ for a state-of-the-art paperless digital form. One that can be stylish and effective as your webpage.

You can add your own logo and colours so that the forms match your webpage as well as electronic signatures, photos and automatic reminders. We can create your ‘Treatment Consent forms’, ‘Weight Loss Assessments’, ‘Stop Smoking Assessments’ and even ‘Feedback forms’ with one of our set up packages or if you prefer, you can build them yourself with our easy to use form builder. It is all so easy and we are here to help you throughout the process, we have years of experience in form design and take huge pride in our ongoing support.

We are all used to digital devices nowadays so being able to complete iPEGS electronic forms either at your premises or prior to the appointment via a mobile phone, tablet or computer will save you time, paper and stress.

Paper files are costly in space and time, not to mention resources, both natural and financial. Being able to pull up a patient’s records instantly saves time and allows you to spend more time with your patient.


Security and Paperless Forms


By using iPEGS Cloud-based Storage, this guarantees your data is secure as if it was locked in a safe. We encrypt, transmit and store it securely at our UK Data Centres,

We are Cyber Essentials Certified and ISAME GDPR Ready. So by using iPEGS, you can relax knowing you data is secure and compliant.

Isn’t it time you threw the paper forms away like the bell bottoms and those jackets with the huge shoulder pads and embraced the 21st century?

Paperless means you can send forms to your patient / guardian prior to their appointment using iPEGS Remote, via email as a web form. By completing forms prior to the appointment the patient has more time to complete their medical history thoroughly, they can complete the form in their own time, sign and submit, saving valuable time, improving efficiency and the customer experience.

Alternatively, if you have walk in customers or if your client didn’t have time to complete the form prior to the appointment, using a tablet or iPad you can simply access your web forms via your browser or via the free iPEGS app.

Changing to paperless Hypnotherapy forms with iPEGS.


I’m interested, how do I get started?

If you would like to find out more please click here or why not get in touch? Email me directly: steve @ ipegs.co.uk or give me a call on 01244 955350.