Bupa UK

Finance & Payments United Kingdom Website Reviewed Sept. 22, 2026

International healthcare group offering UK private medical insurance, hospitals, clinics, dental practices and care homes.

Report an issue with this profile

Compliance Frameworks

GDPR 2016/679
Partial
Privacy notice published with a Privacy Team postal contact; DPO not named and no ICO registration number published.

Regulatory status and three attribution traps

**FCA-regulated:** Bupa Insurance Limited (company 3956433) is authorised by the PRA and regulated by the FCA and PRA, **FRN 203332**. Bupa Insurance Services Limited (company 3829851) is FCA-authorised, **FRN 312526**.

**CQC registration exists at subsidiary level**, e.g. Bupa Care Homes (BNH) Limited, (CFHCare) Limited and (ANS) Limited — not as a group registration.

**NHS DSPT is per dental practice, not group-wide.** A verified example is Bupa Dental Care Coventry (ODS V07071, "Standards met" 2024-25). A group-level DSPT search returns nothing.

⚠️ **Two things that are not Bupa UK:** the SGS ISO 27001 and ISO 20000 certifications belong to **Bupa Arabia**, a separately listed Saudi company. The Bugcrowd vulnerability disclosure programme is scoped to **Bupa Australia Pty Limited**. Neither applies here.

No ISO 27001 or Cyber Essentials claim appears anywhere on bupa.co.uk.

Assess Bupa UK in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register