Free guide

UK GDPR and AI in private psychological practice

A working guide for HCPC-registered clinicians, written as the document I wish had existed when I first started thinking carefully about AI use in my own practice.

02What is inside

Nine sections of working text plus five appendices of templates.

About thirty pages in PDF, with the appendices carrying the working templates (a DPIA, a vendor sub-processor questionnaire, and sample privacy notice language) that are usually the parts clinicians ask me about first.

  1. 01

    Lawful basis, worked through

    Why most of us land on Article 6(1)(f) legitimate interests plus Article 9(2)(h) health and social care, with two worked examples: a specialist clinical tool, and a general-purpose AI used to draft letters.

  2. 02

    Sub-processors and the data chain

    How to sketch the chain behind any AI tool you use, with the questions to put to every vendor in writing before they touch a client's data, and the answers that should give you pause when they arrive.

  3. 03

    A DPIA template you can actually fill in

    Structured to the ICO's recommended approach, written as a starting point rather than a finished document, so that your own clinical judgement still has to be applied for it to fit your practice.

  4. 04

    Sample privacy notice language

    Adaptable wording covering AI use, sub-processors, residency, retention, training opt-out, and your clients' rights, ready to drop into your existing notice and edit to fit your circumstances.

  5. 05

    A vendor questionnaire and an evaluation framework

    A one-page sub-processor questionnaire to send vendors before contract, plus a one-page framework for evaluating any AI tool before you deploy it in your practice.

03Get the guide

Enter your email below and the guide arrives in your inbox.

The download appears below as soon as you submit, and the same link is emailed to you so it lives in your inbox for later, with no further use of your email address unless you tick the consent box.