NHS Website Compliance Checklist 2026

Why Compliance Matters for GP Practice Websites

Running a GP practice website in 2026 means meeting a growing set of NHS digital standards. Non-compliant websites risk being flagged by NHS England, confusing patients, and even losing funding tied to digital access targets.

This checklist covers everything your practice website needs to meet current requirements — so you can focus on patient care, not web admin.

The Essential Compliance Checklist

1. Accessibility (WCAG 2.2 AA)

All NHS-funded websites must meet WCAG 2.2 Level AA. This means:

Sufficient colour contrast (at least 4.5:1 for body text)
All images have descriptive alt text
Keyboard navigation works throughout the site
Forms have visible labels and error messages
No content relies solely on colour to convey meaning

If you are unsure whether your site passes, we offer a free accessibility audit as part of our onboarding.

2. Privacy and GDPR

Your website must include:

A clear, up-to-date privacy notice explaining what data you collect
A cookie consent banner that allows users to opt out of non-essential cookies
No third-party tracking scripts (e.g. Google Analytics) loading before consent is given

3. NHS Identity Guidelines

If your practice uses the NHS logo or branding, you must follow the NHS Identity Guidelines. Key rules:

The NHS logo must appear in NHS Blue (#005EB8) on a white background
Do not stretch, recolour, or crop the logo
Use the Frutiger font family (or a close web-safe alternative) for headings

4. Core Content Requirements

NHS England expects every GP practice website to include:

Practice name, address, and contact details
Opening hours (including extended access if applicable)
How to register as a patient
How to book appointments (online and by phone)
Complaints procedure
Named GPs and clinical staff
CQC rating and link to your inspection report
Patient participation group (PPG) information
Friends and Family Test results

5. Online Services Integration

Practices are expected to offer:

Online appointment booking
Online repeat prescription ordering
Access to medical records via the NHS App or a linked system

Your website should clearly signpost patients to these services with working links.

6. Mobile Responsiveness

Over 65% of NHS website traffic comes from mobile devices. Your site must:

Render correctly on all screen sizes
Have tap-friendly buttons (minimum 44x44px)
Load in under 3 seconds on a 4G connection

7. SSL Certificate (HTTPS)

All NHS websites must use HTTPS. If your site still loads over HTTP, it will show a "Not Secure" warning in browsers — undermining patient trust.

How Simpliy Helps

At Simpliy Primary Care, we build every website to exceed these standards from day one. Our sites are:

WCAG 2.2 AA compliant — tested with automated and manual audits
NHS Identity compliant — correct logo usage, colours, and typography
Fully managed — we handle hosting, SSL, updates, and content changes

Need a compliance review of your current site? Get in touch for a free assessment.

Summary

Keeping your GP practice website compliant is not optional — it protects your patients, your reputation, and your funding. Use this checklist as a quarterly review tool, or let us handle it for you.

View our pricing | Contact us