UK GDPR

UK GDPR is the UK's data protection law governing how organisations collect, store, process and share personal data, including the more sensitive category of health data.

For clinical software, UK GDPR compliance means patient data should be hosted and processed within the UK (or an approved jurisdiction), with clear lawful bases for processing and the technical and organisational measures to keep it secure.