<p>More stringent research governance in the NHS has led to an increased focus on the importance of patient confidentiality. But relatively low levels of knowledge of the Data Protection Act and common law duty of confidentiality among some researchers and research managers cause difficulties in getting research projects off the ground. The authors outline the main issues surrounding research, data protection and patient confidentiality, and provide guidance for researchers, clinicians and managers on how to conduct research appropriately</p>