Data protection
Background
As a hearing care provider, it is essential that you keep adequate patient records and comply with data protection legislation.
Data protection
In the United Kingdom (UK), data protection is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA, 2018). We have created guidance to help you understand and comply with data protection law in the UK.
- Part one covers what you need to know, providing a basic overview of the data protection rules.
- Part two covers what steps you need to take to comply with the regulations.
- Annexes include an example of record keeping and lawful bases in a typical primary care practice and a summary of an individual’s rights.
Read the full data protection guidance
You will also need to register with the Information Commissioner’s Office before you process personal data.
More support?
Contact [email protected] if you have any questions about DPA or UK GDPR. We can support you in the context of primary and secondary hearing care provision in the UK.
Updates
Originally published: July 2018
Reviewed: July 2026
Next review date: July 2029
Reference and notes
This guidance was last reviewed in July 2026. The next review date is July 2029.
Join the NCHA
Become a member as an individual or a practice owner and benefit from:
Insurance I Legal defence I Guidance I Support I Influence