Individuals need to know that you are collecting their data, why you are processing it and who you are sharing it with.
You should publish this privacy information in a Privacy Notice displayed in your practice, on your website and within any forms or letters you send to individuals.
The information must be:
- concise, transparent, intelligible and easily accessible
- written in clear and plain language, particularly if addressed to a child; and
- free of charge.
You can download a description of individuals’ rights under GDPR here
