Health data policy can be complex, with legislation and policies from numerous sources interacting with each other. On this page we outline some key documents and what they mean for you and your data. 

Cross-sector

Health data in the UK is governed by both cross-sector policy and health-specific policy. Cross-sector policy, legislation and guidelines apply to all forms and uses of data, not just health data. An example is data protection law, which applies across all sectors.

Health sector specific

Health data in the UK is governed by both cross-sector policy and health-specific policy. Health and care policies and legislation set out how overarching principles and rules are applied to patient data specifically. 

European Union specific

Health data in the EU is shaped by a range of legislation. Some laws focus specifically on health data and healthcare, while others establish wider rules for data sharing, governance and the use of artificial intelligence across all sectors, including health.