CuraFlow DC-G01CQCSection G · Information Governance and Records
Data Protection policy
For CQC-registered domiciliary care services · version 1.0 · last reviewed 1 June 2026
Health information about the people you support is special category data, and this policy is built around handling it lawfully. It covers the data protection principles, lawful bases, what the Data (Use and Access) Act 2025 changed, the Caldicott principles, when consent applies and when it does not, and individual rights.
What this policy covers
- Why data protection matters in domiciliary care
- The framework — law and recent changes
- The data protection principles
- Lawful bases and special category (health) data
- The data (use and access) act 2025 — what’s changed for us
- Confidentiality and the caldicott principles
- Consent — when it applies and when it does not
- The rights of people we support
- Subject access requests
- Sharing information
- Keeping data secure — including in the home
- Personal data breaches
Regulations and guidance it supports
Supports the fundamental standards at Regulations 17 and 20 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.
- Data Protection Act 2018
- Data (Use and Access) Act 2025
- Human Rights Act 1998 (Article 8)
Common questions
- Is the data protection policy CQC-aligned?
- Yes. It is written and reviewed by practising UK compliance consultants against current CQC expectations, and supports the fundamental standards at Regulations 17 and 20. It is a controlled starting-point document that you adapt to your own service — you remain the accountable provider.
- Can I download and edit this policy?
- Yes. It downloads as Word (.docx) or PDF with your company name, registered manager, CQC ID and address already filled in on the cover page and throughout the document. The Word version is fully editable.
- Can I buy this policy on its own?
- Policies are sold as a complete library rather than individually, because CQC expects a coherent set that cross-references properly — a single policy in isolation creates gaps. The domiciliary care library contains 141 policies and can be bought outright as a one-off purchase and kept permanently.
- How often is it reviewed?
- The library is re-reviewed every six months and after any material regulatory change. This policy was last reviewed 1 June 2026, and is at version 1.0. Updates reach you automatically, so downloads always reflect the current version.