One of the biggest changes to UK data privacy law comes into effect on 25 May 2018. The General Data Protection Regulation (GDPR) EU2016/679 will replace the Data Protection Act 1998.
Health and care research should serve the public interest, which means that we have to demonstrate that our research serves the interests of society as a whole. We do this by following the UK Policy Framework for Health and Social Care Research.
Additional information about research and general use of patient information is available on the NHS Health Research Authority website https://www.hra.nhs.uk/information-about-patients/