These guidelines seek to step through the basis on which research and clinical audit in the health area can be carried out in a manner consistent with the framework of data protection legislation