Core principles
- The user remains central.
- Sharing is consent-based.
- Only the minimum necessary data should be used.
- People should be able to understand who can see what.
- Any future sharing should be clear, chosen and limited.
- There should be no hidden Advisor or Organisation access.
- Research use requires separate consent.
- Junior-specific areas require additional safeguards before use.