Section 22 of the Gender Recognition Act institutes robust privacy safeguards. It criminalises any individual privy to your trans status through official channels from divulging you have a Gender Recognition Certificate without explicit consent. "Official capacity" encompasses all service providers, government bodies, local councils, membership groups and associations, employers, and the police barring exceptional circumstances.

You ought to stipulate in writing any constraints on further disclosure to any individual aware of your medical background. This grants you authority over who can share sensitive information regarding your gender transition journey.