Avon LMC

Phlebotomy (Adult) (F2F)
2026-09-22 09:45 - 12:45 (Europe/London) | Kingswood Health Centre, Alma Rd, Bristol BS15 4EJ, United Kingdom
Number of Capacity: 8
Summary:
A beginner phlebotomy course introduces students to the essential knowledge and hands?on skills needed to safely and effectively draw blood from patients.

Course Content:

Basic Anatomy and Physiology
Procedure and Infection Control
Trouble Shooting
Practical Session
Competencies

Expected Outcome:

Describe, discuss and demonstrate the correct technique for taking blood samples, summarising problems and how to overcome them, including the procedure to follow when a specimen is not obtained
Know how to reassure individuals prior to, during and after blood collection
Recognise infection control and risk measures appropriate to the procedure

Trans & Non-Binary Awareness
2026-09-23 10:30 - 12:30 | Avon LMC, 14A High Street, Staple Hill, Bristol, Bristol, BS16 5HP, United Kingdom
The rights of transgender and non-binary people have become an urgent political issue, but the community is very diverse and poorly understood after years of misgendering, misinformation and stereotyping.

Our training is aimed at those working in the public, private, social purpose and voluntary and community sectors and it is relevant to administrators, practitioners, staff and managers.
The overall aim of the course is to help organisations improve the services they deliver to trans & non-binary people.
The course includes:

What is Trans & Non-Binary? – trans people from a biological, social and historical viewpoint;
Trans & Non-Binary lives – What is involved in gender transition, and what issues do trans people face during and after the process?
Using the right words – A guide to the complexities of trans language; and
Trans & Non-Binary people and the law – the Gender Recognition Act, the Equality Act, the Supreme Court Ruling and more.

DPO Programme - Module 1 (Virtual)
2026-10-07 11:30 - 14:00
Number of capacity: 15

Summary
This focused online session establishes the legal and structural foundations of data controllership within a GP partnership. It examines Articles 4, 5, 6, 9 and 24 UK GDPR and concentrates on partner-level accountability, liability exposure and governance architecture.
The emphasis is on evidential readiness — what a GP practice must be able to demonstrate under regulatory scrutiny.
A 2.5-hour doctrine-led governance session covering:

Who is legally the Data Controller in a GP partnership
Joint controllership risk within PCN arrangements
Public task vs consent discipline
Special category safeguards and APD requirements
Accountability under Article 5(2)
Governance documentation architecture
Enforcement reasoning and fine logic

Mapped to NHS DSPT Standards 1–3
Course Content

Controllership in partnership structures
Lawful basis of discipline in primary care
Special category safeguards and policy requirements
Accountability and evidential burden
Governance reform blueprint for GP practices

Expected Outcome

Define the legal responsibilities of a GP data controller
Distinguish lawful basis misuse (consent vs public task)
Identify structural governance gaps within their practice

DPO Programme - Module 2 (Virtual)
2026-10-14 09:30 - 12:30
Number of capacity: 15

Summary
This operational workshop provides a structured governance model for handling Subject Access Requests (SARs) and related data subject rights within General Practice.
It is workflow-driven, defensibility-focused, and designed to reduce ICO escalation risk.
A 3-hour SAR lifecycle workshop covering:

Valid SAR recognition and statutory clock start
One-month deadline discipline
Identity verification proportionality
Record search and extraction scope
Redaction governance and documentation
Clinical harm exemption
Rectification vs annotation
Refusal defensibility
ICO escalation pathway
SAR governance model for GP practice

Mapped to NHS DSPT Standards 1–3.
Course Content

SAR validity and statutory timing
Search scope and extraction governance
Redaction and exemption decision-making
Litigation interface and escalation management
SAR logging architecture and oversight model

Expected Outcome

Operate a compliant and defensible SAR workflow
Apply exemptions proportionately and lawfully
Maintain SAR documentation capable of regulatory scrutiny

DPO Programme - Module 3 (Virtual)
2026-10-14 13:00 - 16:00
Number of capacity: 15

Summary
This module examines breach governance under Articles 32–34 UK GDPR from a defensibility and regulatory reasoning perspective.
It focuses on risk-to-rights assessment, notification thresholds, documentation architecture, and board-level oversight.
A 3-hour governance session covering:

Legal definition of personal data breach
Risk to rights and freedoms assessment model
72-hour ICO notification threshold
Article 32 proportionality
Patient notification test (Article 34)
Insider misuse and supply chain exposure
Mitigation as regulatory credit
Breach documentation architecture
Governance oversight model

Mapped to NHS DSPT Standards 1–3.
Course Content

Breach identification and classification
Risk scoring and reportability decisions
ICO notification and patient communication
Mitigation and documentation defensibility
Breach governance structure for GP practices

Expected Outcome

Conduct structured breach risk assessments
Determine ICO notification thresholds confidently
Maintain defensible breach documentation and escalation logs

DPO Programme - Module 4 (Virtual)
2026-10-21 09:30 - 12:30
Number of capacity: 15

Summary
This session integrates operational data protection mechanics into board-level assurance and strategic governance.
It focuses on Article 30 Records of Processing (ROPA), DPO obligations, documentation architecture, and compliance maturity modelling.
A 3-hour strategic governance session covering:

ROPA completeness and audit utility
Processor listing discipline
DPO independence requirements
Caldicott Guardian interface
Governance documentation hierarchy
Training assurance evidence
Compliance maturity levels (1–4)
Board reporting structure
Integrated governance dashboard model

Mapped to NHS DSPT Standards 1–3.
Course Content

Article 30 ROPA architecture and audit readiness
DPO governance and independence
Documentation and asset ownership mapping
Compliance maturity assessment
Annual assurance cycle design

Expected Outcome

Maintain an audit-ready ROPA
Demonstrate DPO structural independence
Articulate governance maturity at board level

DPO Programme - Module 5 (Virtual)
2026-10-21 14:00 - 16:30
Number of capacity: 15

Summary
This applied workshop guides delegates through the lifecycle of a Data Protection Impact Assessment (DPIA), focusing on defensible risk reasoning and mitigation discipline.
It uses a structured case study to embed the requirements of Articles 35–36 into GP governance practice.
A 2.5-hour DPIA workshop covering:

DPIA trigger test (high-risk processing)
Processing description and data flow mapping
Necessity and proportionality analysis
Risk identification and structured scoring
Mitigation design and documentation
DPO consultation recording
Residual risk acceptance
Governance sign-off model

Mapped to NHS DSPT Standards 1–3.

Course Content

Determining when a DPIA is legally required
Risk identification and structured scoring model
Designing specific mitigation strategies
Recording DPO advice and residual risk
Embedding DPIA into project lifecycle governance

Expected Outcome

Conduct a legally defensible DPIA
Apply necessity and proportionality rigorously
Integrate DPIA governance into operational decision-making
