July 31, 2026
A care home doesn't just handle ordinary personal data: it handles health data, one of the categories given special protection under GDPR. That calls for a higher level of care than a business that only deals with names and email addresses.
Where compliance tends to fail in practice
- Unrestricted access: all staff seeing all data, with no differentiated profiles.
- Data moving through uncontrolled channels, like paper notes or loose messages.
- Backups that aren't encrypted, or whose exact location nobody quite knows.
- Staff who no longer work at the centre but still have access to the system.
Minimise, don't accumulate
GDPR starts from a simple principle: only the data that's genuinely needed should be processed, and only those who need it for their work should have access to it. Applied to a care home, that means real access profiles — not one account shared by the whole team — and not keeping information that has no clear purpose.
The rights of residents and families
Families and, where relevant, residents themselves have the right to know what data is held about them and to request its correction or deletion where appropriate. A system that centralises information well makes it easier to respond to those requests; one scattered across paper and loose spreadsheets makes it harder.
At Resiges, every installation works with its own isolated, encrypted database, with access by profile and configurable backups, precisely to support this kind of compliance.