Registering under the Data Protection Act.

Under the Data Protection Act individuals and organisations that process personal information need to register with the Information Commissioner’s Office (ICO), unless they are exempt.
Almost all organisations holding patient information (sensitive personal data) will need to register.

Check with the ICO if you need to register