Being transparent and providing accessible information to individuals about how we may use personal data is a key element of the UK Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR). The Department of Health is committed to building trust and confidence in our ability to process your personal information and protect your privacy.