What are my privacy obligations as a health business?

If you're running a health business, you're likely to be collecting and managing customers' health information. Under UK privacy laws, health information is considered much more sensitive than standard data. As such, there are additional requirements that apply.

For instance, if your health business is collecting health information, you are legally required to have a Privacy Policy in place in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) regardless of your business size.

The sensitive nature of health information means that your business needs to have well-drafted Privacy Policies, Cookie Policies, NDAs, and Terms and Conditions in compliance with privacy laws.

If you're conducting business in the EU, your Privacy Policy will need to comply with the EU GDPR.