Confidentiality and data protection in pharmacy: the law and professional duties
Pharmacy professionals routinely handle information that patients expect to remain private: prescriptions, medication histories, consultation notes and information about their personal circumstances. Confidentiality affects everyday decisions, from answering a relative’s question at the counter to sharing information with a GP or responding to a police request.
The legal framework has several layers. Complying with data protection law does not, by itself, satisfy the duty of confidentiality. Pharmacy professionals must consider both, alongside their professional obligations.
The UK GDPR and Data Protection Act 2018 must be read as amended, including by the Data (Use and Access) Act 2025. The 2025 Act amends the existing framework rather than replacing it with a new confidentiality regime.
