Practical DPO support and a simple compliance platform
Built for Primary Care
Designed around the day-to-day realities of GP practices and PCNs.
Trusted by 110+ GP practices - Rated Excellent
DPIAs, incidents, policies and DPO advice in one place
10+ years’ experience supporting Primary Care
From parental SARs to rectification requests, we understand your world
Practice Manager, Norfolk GP Practice
"A solicitor has requested a patient's medical records. Can we release them without consent?"
Admin Lead, Suffolk GP Practice
"A patient wants information removed from their medical record. What are our obligations?"
Governance Lead, London GP Practice
"Do we need a DPIA before introducing a new AI tool into the practice?"
Who These Services Are For
Our Primary Care DPO service and compliance platform are designed for organisations that:
-
Need practical GDPR and Information Governance support
-
Want a retained DPO service for GP practices, PCNs, or healthcare teams
-
Need help managing DPIAs, SARs, incidents, policies, and audit actions
-
Are working through NHS DSP Toolkit or wider compliance requirements
-
Want one place to track data protection tasks, risks, evidence, and progress
Services
1
Report Incidents
Practices and PCNs can report data breaches and security incidents directly through myKafico. We help assess, mitigate, and score incidents in line with the NHS Incident Scoring approach, giving you a clear record of actions, outcomes, and evidence.
Support and features include:
-
Breach and incident reporting
-
NHS incident scoring
-
Mitigation guidance
-
Audit-ready evidence records
2
DPO Queries
Give your team direct access to expert DPO and Information Governance support through myKafico. Submit questions, request guidance, and track responses in one place, from GDPR queries and subject access requests to data sharing, retention, and compliance concerns.
Support and features include:
-
GDPR and Information Governance advice
-
Subject access request support
-
Data sharing and confidentiality guidance
-
Policy and compliance queries
-
Tracked responses and audit history
3
Raise a DPIA
Create and manage Data Protection Impact Assessments directly within myKafico. Our platform helps practices and PCNs raise a project so our team can assess risks, document mitigations, and demonstrate compliance with UK GDPR and NHS Information Governance requirements.
Support includes:
-
Structured DPIA workflows
-
Risk identification and scoring
-
Mitigation tracking
-
DPO review and guidance
-
Centralised audit and evidence records
4
Compliance Tasks
Stay on top of recurring Information Governance and compliance responsibilities with guided monthly tasks delivered through myKafico.
Practices and PCNs can track progress, maintain evidence, and demonstrate ongoing compliance with NHS and UK GDPR requirements.
Support includes:
-
Monthly compliance task tracking
-
Evidence and document management
-
Policy review reminders
-
Compliance progress monitoring
-
Audit-ready activity records