Under the Data Protection Act, your practice is required to process personal data fairly and lawfully. The methods by which these processes are governed and explained to patients are known as ‘fair processing’. The General Data Protection Regulation (GDPR) ‘right to be informed’ encompasses the obligation to provide fair processing information, typically through a privacy notice. It emphasises the need for transparency over how you use personal data and for privacy notices to be easily accessible.

Fair processing includes:

• Telling patients about what type of information you will collect, how you intend to use it and who you may share it with
• Providing assurance to patients that their data will be safe, confidential and used appropriately if they share it with you
• Enabling patients to opt out of sharing their data and making them aware of their rights

For further information, please visit our Privacy Notice page.