Patient Privacy Notice

What's inside

This policy is fully drafted and structured, ready to brand and complete for your service. It covers:

• 1. Purpose
• 2. Scope
• 3. Policy statement and principles
• 4. Definitions
• 5. Who we are and how to contact us
• 6. The personal information we collect
• 7. Our lawful bases for using patient information
• 8. How and why we share patient information
• 9. How long we keep patient information
• 10. Your rights over your information
• 11. How we keep information secure and where it is stored
• 12. Cookies and electronic communications
• 13. Making a complaint
• 14. Roles and responsibilities
• 15. Training
• 16. Monitoring, audit and review
• 17. Related documents
• 18. Glossary
• 19. References

Legislation & standards it maps to

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Health and Social Care Act 2008 (Regulated Activities) Regulations 2014
• Care Quality Commission (Registration) Regulations 2009
• Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)
• Human Rights Act 1998
• Access to Health Records Act 1990
• Common Law Duty of Confidentiality

Who it applies to

All patients and people who use the service, and all staff, contractors and data processors who handle patient information on behalf of [Organisation Name]

How it works

1. Buy securely with Stripe - instant, no VAT, no account needed.
2. Download your editable Word file from the link we email you straight away.
3. Complete the placeholders for your service, then have it approved before use.
4. Add the optional updates subscription and we keep it current as guidance changes.