Reading List

A curated Reading List to support and extend learning from Caldicott Principles and Patient Information in General Practice.

Sources below cover the Caldicott Principles, confidentiality, information governance, data protection and GP records practice.

1. Caldicott and confidentiality

• National Data Guardian - The Caldicott Principles
  Official guidance setting out the eight Caldicott Principles for using confidential information appropriately.
  https://www.gov.uk/government/publications/the-caldicott-principles

• National Data Guardian - Caldicott Guardian guidance
  Guidance on appointing Caldicott Guardians and on their role and responsibilities.
  https://www.gov.uk/government/publications/national-data-guardian-guidance-on-the-appointment-of-caldicott-guardians-their-role-and-responsibilities

• NHS England - Confidentiality policy
  NHS England policy and procedures on maintaining confidentiality, including duties for staff and contractors who handle confidential information.
  https://www.england.nhs.uk/long-read/confidentiality-policy/

2. Data protection and transparency

• ICO - Data protection principles
  UK regulator guidance on the principles of data protection under UK GDPR.
  https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/

• ICO - Transparency in health and social care
  Guidance on transparency expectations for organisations delivering health and social care. The ICO notes this guidance is under review following the Data (Use and Access) Act 2025, so follow current local information-governance advice where practice changes are needed.
  https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/transparency-in-health-and-social-care/

• NHS - Your NHS data matters
  Patient-facing information about choices for sharing confidential patient information for research and planning in England.
  https://www.nhs.uk/your-nhs-data-matters/

3. GP records and information governance

• NHS England - Information governance and data protection
  Guidance within good practice guidelines for GP electronic patient records.
  https://www.england.nhs.uk/long-read/information-governance-and-data-protection/

• NHS England - Online access to new GP health record information
  Guidance on patient online access to new entries in GP health records and the safeguards to consider.
  https://www.england.nhs.uk/long-read/online-access-to-new-gp-health-record-information/

• NHS Digital - Safeguarding patients from harm or distress
  Guidance on safeguarding where online access to health records may cause harm or distress.
  https://digital.nhs.uk/services/nhs-app/clinical-safety-and-safeguarding/safeguarding-patients-from-harm-or-distress