UK GDPR and Data Protection Act 2018: Core data protection legislation governing the processing of personal data, including special category health data, setting out principles for data handling, individual rights, and organizational obligations
Health and Social Care Act 2012: Primary legislation governing the structure and function of the NHS and healthcare delivery, including provisions for information governance and confidentiality
Professional Standards Regulations: Including GMC Guidelines, NMC Code, and Professional Standards Authority requirements that set out professional obligations for healthcare workers regarding confidentiality
Employment Rights Act 1996: Fundamental employment legislation that establishes basic rights of employees and obligations of employers, including aspects of confidentiality in employment relationships
Equality Act 2010: Legislation protecting against discrimination and promoting equality, which must be considered in confidentiality obligations and information handling
Public Interest Disclosure Act 1998: Whistleblowing legislation that protects employees who disclose certain types of information in the public interest, which must be balanced against confidentiality obligations
Common Law Duty of Confidentiality: Long-established legal principle requiring healthcare professionals to keep patient information confidential, derived from case law and professional practice
Caldicott Principles: NHS-specific guidelines for handling patient-identifiable information, establishing key principles for information sharing in healthcare settings
Human Rights Act 1998: Legislation incorporating the European Convention on Human Rights into UK law, particularly Article 8 regarding right to privacy, which must be considered in confidentiality obligations
Access to Health Records Act 1990: Legislation governing access to health records of deceased patients and complementing data protection legislation for living individuals
