It's important that you explain to people how you will be using their personal data, and what their rights are under the law.
NHS organisations are expected to link from their webpages about research and about general use of patient information to this patient data and research leaflet on the HRA website. In addition NHS organisations are expected to publish information about the research projects they are involved in. Such records should include details of the sponsor, allowing participants to access further transparency information provided by sponsors.
Separate guidance is provided by the HRA about information to be published in relation to the role of the NHS organisation as sponsor and data controller for research projects, or data controller for research databases or tissue banks holding personal data.