Dental website legal requirements UK: what your site must include

Running a dental practice website in the UK involves more regulatory requirements than most practice owners realise. Beyond general business website obligations, dental practices must comply with specific requirements from the General Dental Council (GDC), the Care Quality Commission (CQC), the Advertising Standards Authority (ASA), UK GDPR, and accessibility legislation. Failing to meet these requirements can result in regulatory action, fines, and damage to patient trust.

Many dental practice websites in the UK are non-compliant in at least one area, often not through deliberate oversight but because the requirements are spread across multiple regulatory bodies and are not always clearly communicated. This guide consolidates everything your dental website must include to meet your legal obligations in 2026.

What are the GDC requirements for dental websites?

The General Dental Council is the regulatory body for dental professionals in the UK. The GDC sets standards that directly affect what information must appear on your practice website.

GDC registration display

Every dental professional listed on your website must have their GDC registration number displayed. This is a fundamental requirement that allows patients to verify the registration status of the professionals treating them.

For each dentist, dental hygienist, dental therapist, dental nurse, dental technician, clinical dental technician, and orthodontic therapist featured on your website:

• Display their full name as it appears on the GDC register.
• Display their GDC registration number.
• Ideally, link to their GDC registration profile for verification.

This information should be accessible from team pages, practitioner profiles, and any page where individual professionals are named in connection with clinical services.

Scope of practice clarity

The GDC requires that dental professionals only work within their scope of practice. Your website should accurately reflect which professionals provide which services. For example:

• Do not list a dental hygienist as providing services outside their registered scope.
• Ensure that specialist treatments (orthodontics, oral surgery, periodontics) are attributed to appropriately qualified practitioners.
• If a practitioner holds specialist registration, this can be mentioned, but general dentists should not be described in ways that imply specialist qualifications they do not hold.

GDC standards and patient information

The GDC's "Standards for the Dental Team" emphasise patient communication. Your website should support these standards by providing:

• Clear information about the treatments you offer.
• Honest descriptions of treatment outcomes, risks, and alternatives.
• Information about the qualifications and experience of your team.
• Contact details for the practice.
• Details of how patients can raise concerns or make complaints.

What are the CQC requirements for dental practice websites?

The Care Quality Commission regulates dental practices in England (the equivalent bodies are Healthcare Inspectorate Wales, Healthcare Improvement Scotland, and the Regulation and Quality Improvement Authority in Northern Ireland).

CQC registration display

Your website must clearly display:

• Your CQC registration status (registered provider).
• Your CQC provider ID or a link to your CQC inspection page.
• Your most recent CQC inspection rating.

CQC rating display rules

Since April 2015, all CQC-registered providers have been required to display their CQC rating. The specific requirements are:

• Display the CQC rating prominently on your website. It should be easily visible, not buried in a footer or subpage.
• Use the official CQC rating widget or badge format.
• Link the rating display to your full CQC inspection report.
• Update the display promptly when a new rating is published.
• Display all five key question ratings (Safe, Effective, Caring, Responsive, Well-Led), not just the overall rating.

The CQC provides embeddable widgets that automatically update when new ratings are published. Using these widgets ensures your display remains current.

What happens if your rating is poor?

You must display your CQC rating regardless of the outcome. Removing or hiding a poor rating is a regulatory breach. If your practice has received a "Requires Improvement" or "Inadequate" rating, display it as required and consider adding context about the improvement actions you are taking.

Statement of purpose

CQC-registered practices must have a statement of purpose that describes:

• The services you provide.
• The address of each location where services are provided.
• The name of the registered manager.
• The legal status of your organisation.

While this is not required to be published on your website specifically, making it accessible online demonstrates transparency and supports your regulatory compliance.

What complaints procedure must your dental website include?

All dental practices must have a complaints procedure, and information about how to complain must be accessible to patients, including on your website.

Required complaints information

Your website should include:

Internal complaints procedure:

• How to raise a complaint (phone, email, letter, in person).
• Who to address complaints to (practice manager or designated complaints handler).
• The timeframe for acknowledgement (typically 3 working days).
• The timeframe for investigation and response (typically 10-20 working days).
• What happens if the complaint cannot be resolved informally.

External escalation routes:

• The Dental Complaints Service (for private dental treatment): Contact details and website.
• The Parliamentary and Health Service Ombudsman (for NHS dental treatment): Contact details and website.
• The GDC (for concerns about a dental professional's fitness to practise): Contact details and website.
• The CQC (for concerns about the safety and quality of care): Contact details and website.

Best practice for complaints pages

• Make the complaints procedure accessible from the main navigation or footer, not hidden.
• Use plain language that patients can understand.
• Reassure patients that making a complaint will not affect their care.
• Provide downloadable complaint forms if applicable.
• Include details of any patient advocacy services available.

What privacy policy requirements apply to dental websites?

UK GDPR and the Data Protection Act 2018 require every dental practice website to display a comprehensive privacy policy.

Dental-specific privacy requirements

Beyond standard privacy policy elements, dental websites must address:

Health data processing: Dental treatment records, medical histories, and clinical photographs are special category data under UK GDPR. Your privacy policy must explain:

• What health data you collect through the website (booking forms, consultation questionnaires, online triage).
• The lawful basis for processing health data (typically explicit consent or provision of healthcare).
• How health data is stored and protected.
• Who has access to health data.
• Retention periods for clinical records (dental records must be retained for a minimum of 10 years from the date of last treatment, or until the patient reaches 25 years of age, whichever is longer, as per NHS guidelines).

Third-party data sharing: Identify all third parties who may access patient data through your website:

• Booking and appointment systems.
• Payment processors.
• Email and communication platforms.
• Analytics tools.
• Cloud storage providers.
• IT support providers.

Patient rights: Clearly explain how patients can exercise their data protection rights:

• Right of access (Subject Access Request).
• Right to rectification.
• Right to erasure (noting clinical record retention requirements).
• Right to restrict processing.
• Right to data portability.
• Right to object.

Data Protection Officer

Dental practices that process health data on a large scale may need to appoint a Data Protection Officer (DPO). Even if not legally required, it is good practice to designate a team member as the privacy contact and publish their details on the website.

What cookie consent does your dental website need?

Cookie consent requirements for dental websites follow the same PECR and UK GDPR regulations that apply to all UK websites, with additional considerations for healthcare contexts.

Implementation requirements

• Implement an opt-in cookie consent banner before any non-essential cookies are set.
• Provide granular choices (analytics, marketing, functional).
• Offer equal prominence to "Accept All" and "Reject All" options.
• Block analytics and marketing scripts until consent is given.
• Allow users to change preferences at any time through a footer link.
• Maintain consent records for audit purposes.

Healthcare-specific considerations

• Be cautious about remarketing cookies on dental websites. Showing targeted ads for dental treatments to users who browsed specific treatment pages raises ethical concerns about patient privacy.
• If your website includes a patient portal or online booking, ensure that strictly necessary cookies for these functions are correctly classified and do not require consent.
• Document all cookies in a clear, accessible cookie policy linked from the consent banner.

What pricing information must dental websites display?

Pricing transparency on dental websites is governed by consumer protection legislation and professional standards.

Regulatory requirements

The Consumer Rights Act 2015 and consumer protection regulations require that pricing information provided to consumers must not be misleading. The GDC's standards also emphasise providing patients with clear information about the cost of treatment.

What to include

Fee guide or price list: Publish a clear fee guide covering your most common treatments. This should include:

• Examination and consultation fees.
• Standard treatment prices (fillings, crowns, root canals, extractions).
• Hygiene appointment fees.
• Common cosmetic treatment prices (whitening, veneers, Invisalign).
• Emergency appointment fees.

NHS charge bands: If you provide NHS treatment, display the current NHS dental charge bands with clear explanations of what each band covers.

Finance options: If you offer payment plans or finance, provide clear information about:

• The finance provider.
• Representative APR (if applicable).
• Example payment plans.
• Whether the practice charges interest or offers 0% finance.

Pricing clarity:

• Use "from" pricing if costs vary based on clinical assessment, but ensure the starting price is genuinely representative.
• Clearly distinguish between NHS and private fees.
• State whether consultation fees are deducted from treatment costs.
• Include VAT status where relevant (most dental treatment is VAT exempt, but some products and services may attract VAT).

What advertising standards apply to dental websites?

Dental website content is subject to ASA and CAP Code regulations for advertising, as well as GDC professional standards.

ASA and CAP Code requirements

The Advertising Standards Authority applies the CAP Code to marketing communications, including website content that promotes dental services. Key requirements include:

No misleading claims: All claims about treatment outcomes, success rates, or patient results must be truthful and substantiated. Avoid:

• Guaranteeing specific outcomes ("guaranteed straight teeth in 6 weeks").
• Implying universal results from treatments that vary by individual.
• Using superlatives without evidence ("the best dentist in London").

Before and after photographs: If you use before and after images:

• They must be genuine patient photographs with informed written consent.
• They must not be digitally enhanced or manipulated in a misleading way.
• They should include appropriate context (treatment type, timeframe, cost range).
• Consider adding a disclaimer that results vary by individual.

Testimonials and reviews: Patient testimonials used on your website:

• Must be genuine.
• Must not make claims about clinical outcomes that could mislead.
• Should be representative of typical patient experiences.
• Must have the patient's consent for publication.

Special offer advertising: Promotional pricing and offers:

• Must clearly state all terms and conditions.
• Must specify the duration of the offer.
• Must not create undue pressure to book ("only 3 appointments left this month" when this is not genuinely the case).

Invisalign and orthodontic advertising

Orthodontic treatments, particularly clear aligner brands, attract heightened regulatory attention. Specific guidance includes:

• Do not guarantee specific treatment timelines or outcomes.
• Clearly state that orthodontic treatment carries risks and may not be suitable for everyone.
• If advertising on behalf of a specific brand (Invisalign, SmileDirectClub alternatives), ensure claims align with the manufacturer's approved marketing materials.
• Include that treatment is provided by a GDC-registered dental professional.

Cosmetic dentistry advertising

Cosmetic dental services require particular care in advertising:

• Avoid pressure tactics or exploitation of insecurities.
• Provide balanced information about risks and alternatives.
• Do not target vulnerable audiences or use before/after imagery in a way that creates unrealistic expectations.
• Comply with the CAP Code guidance on cosmetic interventions advertising.

What accessibility requirements apply to dental websites?

Legal framework

The Equality Act 2010 requires service providers to make "reasonable adjustments" to ensure disabled people can access their services. This extends to digital services, including websites.

While the UK does not have a specific law mandating a particular web accessibility standard for private dental practices, the Equality Act's reasonable adjustment duty effectively requires dental websites to be accessible.

Practical accessibility standards

The internationally recognised standard for web accessibility is WCAG 2.2, with Level AA being the recommended target. Key areas to address:

Perceivable content:

• All images have descriptive alt text.
• Video content has captions or transcripts.
• Text has sufficient colour contrast against backgrounds (4.5:1 ratio for normal text).
• Content is readable when zoomed to 200%.

Operable interface:

• All interactive elements are keyboard accessible.
• Navigation is consistent and predictable.
• Users have enough time to complete forms.
• Animations can be paused or disabled.
• Touch targets are at least 24x24 pixels (44x44 recommended).

Understandable content:

• Language is clear and appropriate for a general audience.
• Form labels and error messages are clear.
• Navigation is consistent across the website.
• Error recovery is supported (users can review and correct form submissions).

Robust code:

• Semantic HTML is used correctly (headings, lists, landmarks).
• ARIA attributes are used appropriately where needed.
• The website works with assistive technologies (screen readers, voice control).
• The website functions across different browsers and devices.

Accessibility statement

Consider publishing an accessibility statement on your website that:

• States your commitment to accessibility.
• Identifies the WCAG standard you are working towards.
• Acknowledges any known accessibility limitations.
• Provides contact details for users who need assistance or want to report accessibility issues.
• States the date the statement was last reviewed.

Comprehensive compliance checklist for dental websites

Use this checklist to audit your dental practice website against all legal requirements.

GDC compliance

• GDC registration number displayed for every dental professional.
• Practitioner scope of practice accurately represented.
• Team qualifications and experience clearly stated.
• Treatment descriptions are honest and accurate.

CQC compliance (England)

• CQC registration details displayed.
• CQC rating badge prominently visible.
• Link to full CQC inspection report provided.
• All five key question ratings displayed.
• Rating updated promptly after new inspections.

Complaints procedure

• Internal complaints process clearly described.
• Complaints contact details (name, email, phone, address) provided.
• Timeframes for acknowledgement and response stated.
• External escalation routes listed (Dental Complaints Service, PHSO, GDC, CQC).
• Complaints page accessible from main navigation or footer.

Privacy and data protection

• Comprehensive privacy policy published.
• Health data processing specifically addressed.
• Third-party data processors listed.
• Retention periods stated (minimum 10 years for dental records).
• Patient data rights clearly explained.
• Data protection contact details provided.

Cookie consent

• Cookie consent banner implemented with opt-in model.
• Non-essential cookies blocked until consent given.
• Granular cookie category choices available.
• "Reject All" equally prominent as "Accept All".
• Consent withdrawal mechanism available.
• Cookie policy published with cookie table.

Pricing and transparency

• Fee guide or price list published.
• NHS charge bands displayed (if NHS provider).
• Finance options clearly explained.
• Pricing is not misleading (genuine "from" prices).

Advertising standards

• No guaranteed outcome claims.
• Before/after photos are genuine with consent.
• Testimonials are genuine and not misleading.
• Special offers have clear terms and conditions.
• Cosmetic and orthodontic advertising complies with CAP Code.

Accessibility

• Images have alt text.
• Colour contrast meets minimum ratios.
• Keyboard navigation works throughout.
• Forms have clear labels and error messages.
• Accessibility statement published.

Next steps

Dental website compliance is not a one-time task. Regulations evolve, team members change, and new services are added. Establish a quarterly review cycle to ensure your website remains compliant across all regulatory areas.

If you are building or redesigning a dental practice website and need to ensure full regulatory compliance from the outset, we specialise in dental website design that meets all GDC, CQC, GDPR, and accessibility requirements.

About the Author

Pankaj Karad

Founder & CEO

Pankaj Karad is the founder of Karad Infotech, a London-based agency specialising in web design, SEO, and software development for healthcare businesses across the UK.

Connect on LinkedIn