Data & security
UK GDPR
UK General Data Protection Regulation
Also known as: GDPR, data protection
The UK's data protection law, working alongside the Data Protection Act 2018, which governs how organisations handle personal data including sensitive health data.
UK GDPR is the United Kingdom's version of the General Data Protection Regulation, retained in domestic law after the UK left the EU and read together with the Data Protection Act 2018. It sets the principles and rights that govern how personal data is collected, stored, and used.
Health and care data is treated as a special category, so care homes must have a lawful basis to process it, keep it secure, and respect residents' rights, including the right of access. The Information Commissioner's Office (ICO) is the UK regulator.
Why it matters for care homes
Care homes process large amounts of sensitive personal data, so data protection duties are unavoidable. Registration with the ICO and clear data handling practices are baseline expectations.
Source: ICO guide to UK GDPR (ico.org.uk)
Related guides
Related terms
See how Revitaco supports UK GDPR
Care home management software designed to help you evidence CQC compliance, manage medicines, and keep person-centred records.