If you’re a hypnotherapist, counsellor, or other UK therapist in private practice, you need to understand how GDPR and UK data protection law apply to your client records, privacy policy, website, emails and everyday working practices.
What Is the Data (Use and Access) Act 2025?
The Data (Use and Access) Act 2025 has updated several areas of UK GDPR, including Data Protection Complaints, Subject Access Requests, cookie rules, and legitimate interests. This short, practical guide explains what has changed and what you need to know and do, without wading through pages of legislation.
15-minute video presentation and cookie notice guide: £7.50
[Last updated August 2026]
What Should a Therapist’s Privacy Policy Include?
This 15-minute video presentation looks specifically at GDPR and data protection from the perspective of a therapist in private practice.
What’s in the Course?
- whether therapists need to register with the ICO
- are therapists Data Controllers?
- keeping therapy client records under the GDPR
- the 13 things your Privacy Policy needs to include
- choosing lawful bases for processing client data
- the data protection changes introduced in 2026
- the new requirements for handling data protection complaints
- Subject Access Requests for therapists
- Do you need a Legitimate Interests Assessment (LIAs)?
- direct marketing and email consent
- cookie rules for therapists
- subcontractors and Data Processing Agreements
- using AI without compromising client confidentiality
- data breaches and secure disposal of records.
The emphasis throughout is on what these requirements mean in everyday therapy practice, rather than simply explaining the legislation.
What you receive
When you purchase the GDPR & Privacy Guide for Therapists: 2026 Update, you will receive:
- access to the approximately 15-minute video presentation
- a practical guide to website cookies and cookie notices
- a concise overview you can return to when reviewing your own GDPR arrangements.
The presentation is deliberately short and practical. It is intended to help you identify what applies to your practice, what may need updating and where you may need to seek further information.
Who This Guide Is For
This guide is written for UK therapists in private practice, including:
- Hypnotherapists
- Counsellors
- Psychotherapists
- Psychotherapeutic counsellors
- Other talking therapy professionals
It’s particularly relevant if you handle client records electronically, have a website, send newsletters or marketing emails, or use any AI tools in your practice.
About Yorkshire Hypnotherapy Training
Yorkshire Hypnotherapy Training is an ICBCH-approved education provider. We provide multi-accredited, internationally recognised CPD training for therapists and hypnotherapy practitioner courses.
This guide to the GDPR was created by Debbie Waller, based on research into UK data protection law as it applies to therapy practice in 2026.
An important note
This guide is based on my own research, knowledge and experience. I am not a legal professional, and the information provided does not constitute legal advice. If you have questions about your individual circumstances, you should consult the ICO or an appropriately qualified legal professional.
Purchase
GDPR & Privacy Guide for Therapists: 2026 Update
15-minute video presentation + cookie notice guide
£7.50
Buy YHT Guide to Privacy Policy Presentation Now