The practice complies with the principles regarding privacy and disclosure required under the UK's Data Protection Act and is registered with the Information Commissioner's register of data controllers.