Skip to main content

General Data Protection Regulation (GDPR) - information and the Directory of data uses

How we've ensured compliance with data protection law, to make sure health and care data is always collected, stored, analysed and shared securely and legally.

The GDPR came into effect in the UK on 25 May 2018. We are the guardians of health and care data in England, and have made sure we comply with GDPR. This means that your health and care data will carry on being handled securely and in line with the regulations.


Find out more about GDPR and the information we collect

The Directory of data uses explains which of the rights under GDPR apply to each collection, and what, in terms of the law, allows us to collect the information.

Last edited: 20 April 2026 9:24 am