Rules and ethics
Part of UK rules for fitness creators, from health claims to working status, with release gates
Which UK rules reach fitness creators, and who should review each one
Map the UK rules that reach fitness creators, from HCPC titles and CQC scope to CMA and ASA ad rules, UK GDPR health data and Acas status, with a reviewer for each.
There is no single fitness-creator licence for England. The applicable rules depend on the act: publishing general information, advertising a product, coaching business models, processing health data, using a professional title or hiring people. Classify the act before asking whether it is permitted.
This is general information, not medical, legal or tax advice. Each planned service needs review against its own facts and intended territory.
What to take away
- No single fitness-creator licence exists for England; rules depend on the specific act.
- Classify the act first, then ask which regulator and which rule reaches it.
- Health information should define its adult audience, exclusions and referral route.
- A payment, gift, discount or commission can change how a post must be presented.
- Health data needs an Article 6 lawful basis and a separate Article 9 condition.
Draw the health boundary first
General exercise information should define its adult audience, exclusions and referral route. Adults who have not exercised for some time, or who have medical conditions or concerns, are told to speak to their GP first. A creator cannot assess an individual in that position.
Some professional titles are protected by law. To use one, a person must be registered with the Health and Care Professions Council (HCPC), which keeps a public register. Physiotherapist and dietitian are among the protected titles. Check the register and the proposed task: a verified title does not extend to every clinical service or fitness claim.
Regulated activities are defined in the Care Quality Commission (CQC) scope of registration. The treatment activity covers a wide range of treatments given by or under the supervision of a defined list of healthcare professionals.
Escalate to the regulatory owner before accepting payment or publishing treatment language. Trigger the escalation if the service may be treatment of a disease, disorder or injury, or if the CQC scope test is unresolved. The owner instructs a UK health lawyer if the trigger stays open.
See the compliance guide for release gates.
Identify the commercial practice
All commercial content must be correctly labelled and clearly identifiable as an ad. A payment, gift, discount, commission or post about your own business can all trigger the label, as the CMA guidance for content creators explains. The record should name the giver, benefit, affected content and disclosure location.
Some practices are unfair in all circumstances under the Digital Markets, Competition and Consumers Act 2024. They include using editorial content to promote a product where a trader has paid for the promotion without making that clear. CMA guidance CMA207 covers the unfair trading ban under the Act.
Industry advertising rules are enforced by the Advertising Standards Authority (ASA), which can name non-compliant creators. An advertising label does not make a misleading offer fair. Check factual claims, omitted limitations, price presentation, urgency and the purchasing route. The disclosure policy shows how to trigger labels on benefit, not on format.
Split data collection from marketing
For ordinary personal information, choose and document a lawful basis before collection. Health information is special category data. Article 9 of the UK GDPR prohibits processing it, with 10 conditions as exceptions. You must identify both a lawful basis under Article 6 and a condition under Article 9.
Do not reuse screening answers, injury notes or inferred conditions for audience targeting without a separate analysis. The Information Commissioner's Office (ICO) guidance on these rules is marked as under review following the Data (Use and Access) Act, so capture the live page used for each decision. The data protection article covers sign-up to marketing.
Check work and income separately
The label in a creator agreement is not decisive. Employment status is defined by law in the Employment Rights Act 1996. The three main types are employee, worker and self-employed, and the status turns on the contract, what was agreed and how the parties actually work together.
Status for tax is assessed separately, using HMRC's Check Employment Status for Tax tool. Being self-employed for tax does not necessarily mean the employment status is self-employed. Put these points into the commercial contracts before work starts.
Before launch, name an owner for each regulatory question on the entry checklist. Hold the service where clinical scope, commercial identity, data purpose, status or territorial reach is unresolved.
| Rule area | Authority or source | Reviewer or owner |
|---|---|---|
| Health boundary | NHS physical activity guidelines for adults | Clinical lead, such as a registered physiotherapist or dietitian |
| Protected professional titles | HCPC register | Registration owner, checking before use |
| Regulated activity in England | CQC scope guidance | Regulatory owner, confirming scope and exclusions |
| Ad labels and endorsements | CMA guidance, DMCC Act 2024, ASA | Compliance owner for consumer and advertising law |
| Health data | ICO, UK GDPR Articles 6 and 9 | Data protection lead, with both records |
| Employment status | Acas, Employment Rights Act 1996, HMRC for tax | Employment status owner |
Before you act
- Classify the act before asking whether it is permitted.
- Define the adult audience, exclusions and referral route.
- Check the HCPC register and the proposed task.
- Identify the giver, benefit, affected content and disclosure location.
- Document an Article 6 basis and an Article 9 condition for health data.
- Name an owner for each regulatory question and its evidence.
Common questions
What should general exercise information include?
Set the adult audience, exclusions and referral route before publishing. Tell adults with medical conditions or concerns to speak to their GP first.
How do commercial connections affect social media posts?
Paid or gifted items, discounts, commissions and posts about your own business can all require a clear ad label. The label must be easy to understand and visible before people engage.
What data protection applies to health information?
Health information is special category data. It needs two legal layers: an Article 6 lawful basis and an Article 9 condition for processing.
