All personal information is protected in the UK by the Data Protection Act (1998). This means that researchers have to put in all the necessary safeguards to protect the confidentiality of the information they collect about research participants. They should explain in the patient information sheet:
• how the participants’ data will be collected
• how it will be stored securely
• what it will be used for
• who will have access to the data that identifies participants
• how long it will be kept
• how it will be disposed of securely.
