In a research context, this information may often be included within a patient information sheet or similar document which is provided to support informed consent, though it can be provided separately ...

If you are using Fleet, most of the work to be UK GDPR compliant has already been done for you ... ensure that the Fair Processing Notice and appropriate consent wording are included in the ...