The purpose of this policy is to set out the HCPC approach to handling personal data and our obligations as set out in the UK GDPR and DPA.
This policy applies to:
- all HCPC employees, temporary staff (such as agency and interim workers), Council Members, Partners, contractors and other authorised users of HCPC information systems.
- personal data as defined by Article 4 of the UK GDPR; that is any information relating to an identified or identifiable natural person.
- special categories of personal data as defined by Article 9(1) of the UK GDPR (which includes information about physical and mental health and racial and ethnic origin) and data relating to criminal convictions and offences as defined by Article 10 of the UK GDPR. Special category personal data and criminal convictions data is data that is particularly sensitive and therefore attracts specific protection.
- Published:
- 22/01/2026
- Resources
- Policy
Page updated on: 22/01/2026