67. The Health Board must—
(a)take all reasonable steps to confirm the accuracy of patient records provided to or accessed by it;
(b)provide to the contractor, guidance, templates, and privacy notices, relating to the contractor’s processing of personal data and the contractor’s maintenance of a record in accordance with sub-paragraph 66(d);
(c)notify the contractor timeously of its current policies regarding data security, personal data security and IT security processes;
(d)maintain a record of its processing activities carried out in relation to a contractor’s patient records;
(e)ensure that any of its employees who have access to the contractor’s patient records and practice data has undergone adequate data protection training; and
(f)make available appropriate data protection training to the contractor and its employees.