GDPR Guidance

General Data Protection Regulation


The General Data Protection Regulation (GDPR) is an EU Regulation which will be directly applicable in the UK on 25 May 2018.

It should be read alongside the forthcoming UK Data Protection Act 2018 (DPA 2018). The GDPR and the DPA 2018 will replace the existing Data Protection Act 1998. The UK DPA 2018 has not yet been finalised; however, a  hub page  for GDPR information has now been launched on the BMA website. This provides information on the regulation and hosts a suite of resources and blogs. This page will be updated regularly as new guidance is published and more GP focussed information and resources will be added.

We would also like to share a collection of GDPR documents, blogs, and templates created by Dr Paul Cundy – Dr Cundy is GPC England Policy Lead for Information Management, Technology and Information Governance.

These resources are hosted via Dropbox and can be accessed  here ; they are intended to provide support and ideas to GPs and practices as well as LMCs and CCGs as they prepare for the 25th May and beyond.

We hope you find the resources useful! 


You can also find a short summary of GDPR guidance and LMC Law's presentation delivered on behalf of Calderdale LMC here .

In addition to the above practices may also find the following links of interest:

NHS Digital

Information Commissioner’s Office

Please be aware that guidance is subject to change when the DPA 2018 comes into force and may be updated.


Published 17th May 2018