Free resource

Health data consent readiness checklist

30 practical checks across six areas, written for governance, data protection and research teams preparing health data for secondary use, federated access or AI training.

• Foundations: lawful basis and governance

  Applies to any organisation processing patient data under UK GDPR or EU GDPR.

• Consent and patient choice

  Where consent or patient choice is relied upon, it must be specific, informed and capable of withdrawal.

• NHS Federated Data Platform and UK secondary use

  For NHS organisations and partners working with federated data or research access.

• EU AI Act Article 10: data and data governance

  For providers of high-risk AI systems trained, validated or tested on health data.

• GCC health data sovereignty

  For organisations operating in, or sharing data with, Gulf Cooperation Council states.

• Evidence and audit

  What a regulator, ethics committee or data buyer is likely to ask for.

General guidance only, not legal advice.