Risk & Compliance
Compliant last year isn’t the same as compliant now.
Two changes landed in 2026, one on complaints, one from the BACP on AI and client data. This two-minute check shows you where your practice stands against both, before anyone else asks.
Psychologists, counsellors and therapists running their own practice are covered by the same data protection rules as any other business, and two changes in 2026 have made the gaps easier to spot. I wrote about both in my last article: a new data complaints requirement that took effect on 19 June, and the BACP’s Ethical Framework, which becomes mandatory on 3 November and sets out explicit rules on using AI with client data.
This short check walks through five areas: your complaints process, special category data, AI use, retention, and clients based outside the UK. It takes about two minutes, and there’s no pass mark, so answer honestly and you’ll see where you stand straight away.
A note before you start: this is an awareness exercise, not a formal assessment, and nothing in it is legal advice. It’s here to help you spot where a closer look might be worth your time, not to confirm your compliance status one way or the other. If anything below leaves you unsure, a full assessment of your specific situation is the right next step, and that’s exactly what a discovery call is for.
Lets Talk
Ready to talk through where your practice stands?
A discovery call is a 30-minute conversation, no pitch, no pressure. We’ll talk about where you are, what the check turned up, and whether working together makes sense.
No obligation. No hard sell. Most people leave with at least one useful idea — whatever they decide.