Hizmedia logoHIZMEDIA

Laws & regulations

The rules for private gp clinics.

Private GPs answer to the CQC and the GMC, and handle some of the most sensitive data there is. Each of those shows up in how your website and booking need to work.

5 specific rules · plus 9 for every clinic · Last reviewed 10 November 2026

How we build for private gp clinics
01RegulationCQC

CQC registration and Regulation 20A

Read the source (opens in a new tab): CQC, Regulation 20A

What it says

Treating disease, disorder, or injury is a regulated activity in England. Once rated, your latest CQC rating and a link to it must appear on your website.

Your website
Your CQC rating on every page, updated when it changes.
Your systems
No direct impact.
How we work
No direct impact.
02GuidanceGMC

GMC Good medical practice

What it says

Information doctors publish about their services must be factual and verifiable, and patients should be able to check who they are seeing.

Your website
Doctor profiles with qualifications and GMC numbers, and service pages with plain, checkable claims.
Your systems
No direct impact.
How we work
No direct impact.
03GuidanceGMC

GMC guidance on prescribing and remote consultations

What it says

Doctors are expected to seek consent to share information with the patient's NHS GP, and to take extra care when prescribing remotely.

Your website
Booking pages that explain how information is shared with the NHS GP.
Your systems
Consent to share asked at booking, and ID checks before remote consultations.
How we work
No direct impact.
04CodeASA · CAP Code

Marketing medical services

Read the source (opens in a new tab): ASA | CAP, The Non-broadcast Code

What it says

Marketing must not discourage people from seeking essential treatment, and health claims need evidence.

Your website
Service pages that point patients to the right care, including the NHS when that is the better route.
Your systems
No direct impact.
How we work
No direct impact.
05LawICO · UK GDPR

Consultations, results, and letters as health data

Read the source (opens in a new tab): ICO, What is special category data?

What it says

Consultation notes, results, and even the reason for booking are special category health data.

Your website
No tracking pixels on booking pages.
Your systems
Results and letters published to a secure patient account instead of email attachments.
How we work
No direct impact.

Built in, not bolted on

A site that follows the rules.

We build every rule on this page into the websites and systems we make for private gp clinics. This is a plain English summary, not legal advice, so check each source and take advice from your regulator, indemnity provider, or clinical lead.