Are these useful?
Here's the Code of Practice for NHS organisations and staff: https://www.gov.uk/government/publications/confidentiality-n...
Here's the other code of practice for everyone working with NHS data: https://digital.nhs.uk/data-and-information/looking-after-in...
And here's the guidance about when to share if it's needed: https://digital.nhs.uk/data-and-information/looking-after-in...