GDPR consent

Contents

    Chiral Cloud records whether each patient has given their GDPR consent, in a built-in check list on their record. Mail shots automatically leave out anyone without consent, and patients can give or withhold consent on your online forms. This arrived in Chiral Cloud 2.0.67.

    These three short videos show how it works.

    1. The GDPR check list (1:33) – Every patient now has a built-in GDPR check list with GDPR consent given ticked to start with. See where it lives, and how to untick it for a patient who says no.
    2. Mail shots leave out patients without consent (2:08) – Email, text and patient form mail shots automatically leave out anyone whose GDPR consent is unticked. Recalls and appointment reminders still go.
    3. Asking for GDPR consent on a form (2:33) – Add a GDPR consent tick box to any online form in the Form Designer. The patient's answer updates their GDPR consent, including when you link a form from your general link to the right patient.

    Good to know

    • The GDPR check list and its item are built in: they can't be deleted, renamed or switched off. You can change the description and the colour.
    • Every existing patient started with consent ticked. Untick it for anyone who doesn't want to hear from you; it saves straight away.
    • A mail shot never includes a patient whose consent is unticked, and you can't add them back by hand. If Chiral Cloud can't confirm consent, it leaves the patient out to be safe.
    • Recalls, appointment reminders and confirmations aren't affected, because they're about the patient's care.
    • On a form, the GDPR box always starts unticked: under UK GDPR, a box that's already ticked doesn't count as consent. Leave Required off so patients can say no. Only one GDPR box per form.
    • A form answered through your general link updates consent once you right-click the response and choose Link to patient. A form sent to a specific patient updates it as soon as they send it.
    • The latest answer wins: if a patient's consent was changed more recently than an old form, linking the old form leaves it as it is.
    • When a patient signs the GDPR form in the patient portal, their consent is updated too.
    Updated on 23rd October 2026