Practices will soon be invited to share their patient databases with Clinical Practice Research Datalink (CPRD). Practices can expect CPRD to be contacting them in the future and it is up to practices to decide whether they wish to participate. The GPC IT policy team has been working with CPRD and is satisfied with its systems. No free text is extracted, nor documents nor associated files, just the coded components. Opt-outs, as recorded in the practice’s database are respected. If practices choose to participate they will need to carry out a Data Protection Impact Assessment (DPIA) and add an entry in their Article 30 processing register (CPRD will provide pre-prepared sample documents for practices to use, which the BMA has seen and reviewed). You will need to ensure your privacy notices are up to date and cover the use of patient data for research. All participating practices are also advised to seek the guidance of their DPO.