1. Why care data is different
Care information is special category data
If you work in health or care, you handle some of the most sensitive information there is. A diagnosis, a medication list, a mental health history, a note about someone's continence needs or their behaviour on a bad day. This is not ordinary paperwork. It describes the private lives of patients and people we support, often in detail they have shared with no one else.
Under UK GDPR, information about a person's physical or mental health is special category data. That is the legal term for the kinds of data where misuse could cause serious harm, and it sits alongside things like ethnicity, religion, and sexual orientation. Special category data gets extra legal protection: you need both a lawful basis for using it and a separate special category condition, and organisations are expected to apply stronger safeguards around it.
What this means day to day
You do not need to memorise the legal articles. You do need to hold on to the practical consequence: care records deserve more caution than almost any other information you will ever handle at work.
- A care plan, a daily note, a medication administration record, a hospital discharge summary and a safeguarding referral are all special category data.
- So are less obvious things: a photo of someone receiving care, a rota note saying who visits a named person, or an overheard comment written into a handover sheet.
- Even confirming that a named person uses your service can reveal health information. If someone attends a mental health service or lives in a specialist care home, the fact of being there says something sensitive about them.
More than one law applies
Data protection law is only part of the picture. Health and care information is also protected by the common law duty of confidentiality, which the next lesson covers, and by professional standards such as those set by the NMC, GMC, HCPC, and the codes of conduct for care workers. In care, the question is never just "is this legal" but "is this right for the person, and would they expect it".
› Course contents
Why care data is different
The rules of sharing
Everyday practice
The DSPT and incidents
Putting it into practice