GDPR guidance for therapists
Plain-English articles on data protection, compliance legislation, and what it all means for therapists in private practice.
How to write a clinical will: a step-by-step guide for therapists
A practical, step-by-step guide to creating a clinical will — choosing your executor, documenting how records are accessed, and keeping it up to date.
BACP's 2026 Ethical Framework: the new clinical will requirement
From 3 November 2026, BACP's updated Ethical Framework makes having a clinical will an explicit requirement. Here's what's changing and how to be ready.
What is a clinical will? A guide for UK therapists
A clinical will sets out who contacts your clients, and how your records are handled, if you die or can no longer practise. Here's what one is, who needs it, and what to put in it.
Clinical Will Survey — Winner Announced
Thank you to everyone who shared their thoughts on clinical wills. The winner of our £50 Amazon voucher draw is...
The DUAA mistake therapists are making right now
With a few weeks until DUAA 2025 takes effect, therapists are scrambling to update their policies. Three patterns are coming up over and over — and most of them are easy to fix. Here is what to look for in your own setup.
The data breach you didn't know was a data breach
Sending an email to the wrong address. Forgetting to BCC a group. A laptop in a cab. Many therapists assume only hacks count as a breach. The ICO disagrees — and the 72-hour clock starts the moment you find out.
Counsellors who use Zoom: what your client doesn't realise about online sessions
When a session moves to Zoom, your data protection responsibilities don't disappear — they multiply. Recording, transcripts, AI features, and what your platform does with the audio. Here is what therapists need to check.
What to do if a client asks to see their records
Subject access requests are one of the most common data protection issues therapists face. The DUAA 2025 has changed the rules. Here is a practical guide.
The £2-a-month question: what does GDPR compliance actually cost a therapist?
There are several ways to get compliant. They vary enormously in cost, time, and how long the compliance lasts. Here is an honest breakdown.
Reflexologists and GDPR: why the AoR approach is different
Reflexologists who are members of the Association of Reflexologists have different data protection obligations to counsellors and psychotherapists. Here is what you need to know.
What your BACP membership actually requires from you on data protection
BACP's Ethical Framework sets clear expectations about how members handle client data. Here is a plain-English guide to what those expectations are — and how to meet them.
Your clients are quietly judging your privacy policy
Before a new client books with you, many of them look for your privacy policy. What they find — or don't find — shapes their decision. Here is what therapists need to know.
How UK therapists really handle GDPR compliance
There are roughly five ways therapists in private practice deal with data protection. Some work. Some don't. Here is an honest look at each.
UK therapists have 10 weeks to comply with new data law
The Data (Use and Access) Act 2025 comes into force on 19 June 2026. It introduces a mandatory complaints procedure for therapists who hold client data. Here is what you need to do.
The document your therapy practice almost certainly doesn't have
Most UK therapists have a privacy policy. Far fewer have the document the Data Protection Act 2018 requires the moment they share information to safeguard someone. Here's what it is — and why it matters.