Explain How and When to Seek Advice About Confidentiality

Confidentiality sounds simple: someone tells you something privately, and you keep it to yourself. In real-life situations, though, things can become much less straightforward. To explain how and when to seek advice about confidentiality, it helps to understand that protecting private information is important, but there are circumstances where information may need to be shared.

This is especially relevant in workplaces, health and social care, education, and safeguarding. The key is knowing when you can make a decision yourself and when you should stop and ask a manager, safeguarding lead, information-governance professional, or other appropriate adviser.

Note: Confidentiality rules can vary depending on your role, organisation, and country. The examples below use UK principles, particularly those relevant to health, social care, safeguarding, and workplace settings.

What Does Confidentiality Mean?

Confidentiality means protecting information that a person has a reasonable expectation will be kept private. This could include personal details, health information, family circumstances, financial information, workplace records, or something someone has shared with you in confidence.

A duty of confidentiality can arise when information is provided in circumstances where the person reasonably expects it to remain confidential. In health and social care, for example, confidential information is generally protected by professional, ethical, and legal obligations.

Confidentiality does not necessarily mean that information can never be shared. Sometimes sharing information is necessary to provide safe care, protect someone from harm, comply with the law, or address a serious safeguarding concern.

Why Is Confidentiality Important?

People are more likely to speak honestly when they believe their personal information will be handled respectfully.

For example, a patient may need to tell a healthcare professional about a sensitive health problem. An employee may need to report something concerning to a manager. A child or vulnerable adult may disclose something that makes them feel frightened or unsafe.

If people cannot trust professionals to handle information appropriately, they may stop asking for help or leave important information undisclosed.

Confidentiality therefore helps to:

• Protect people’s privacy and dignity.
• Build trust between individuals and professionals.
• Encourage honest communication.
• Protect sensitive personal information.
• Support safe and effective care.
• Reduce the risk of inappropriate disclosure.
• Meet legal and professional responsibilities.

The Caldicott Principles, used across health and social care in the UK, emphasize that confidential information should have a justified purpose, be necessary, be limited to the minimum required, and be accessed on a need-to-know basis.

When Should You Seek Advice About Confidentiality?

You do not need to handle every difficult confidentiality question alone. In fact, seeking advice is often the safest and most responsible thing to do when you are uncertain.

Consider getting advice when:

1. You Are Unsure Whether Information Is Confidential

Not every piece of information is necessarily confidential, but it is dangerous to assume that information is public simply because it seems harmless.

If you are uncertain about whether someone’s information should be protected, ask your manager or the person responsible for confidentiality or information governance before sharing it.

2. Someone Asks You to Share Private Information

You might receive a request from:

• A colleague
• A family member
• Another organisation
• A manager
• A professional from another service
• A member of the public
• A government or regulatory body

Before handing over confidential information, establish who is requesting it, why they need it, what information they need, and what authority they have to receive it.

NHS England guidance, for example, states that sharing confidential information requires appropriate legal and professional justification and should be limited to what is necessary.

3. You Are Unsure Whether Consent Is Required

Consent can be an important part of information sharing, but the rules are not always identical in every situation.

For example, NHS guidance explains that relevant information can generally be shared among professionals directly involved in an individual’s care on the basis of implied consent, provided the person has not objected. Other purposes may require explicit consent or another lawful basis.

If you are unsure, don’t guess. Ask an appropriate professional for guidance.

4. There Is a Safeguarding Concern

This is one of the most important situations in which confidentiality may need careful consideration.

Suppose someone tells you that they are being abused, neglected, exploited, or threatened. Or perhaps you become concerned that a child or vulnerable adult could be at risk.

You should not automatically promise to keep such information secret. Safeguarding guidance emphasizes that information may need to be shared when necessary to protect someone from harm.

If you encounter a safeguarding concern, follow your organisation’s safeguarding procedure and seek advice from the appropriate safeguarding lead or manager.

When Confidentiality Conflicts With Safety

This is where confidentiality can become difficult.

Imagine someone says:

“I’m going to tell you something, but you have to promise never to tell anyone.”

It may be tempting to agree immediately. However, if the information later reveals a serious risk of harm, that promise could make the situation much harder to manage.

A better approach is to explain the limits of confidentiality before sensitive information is disclosed. For example, you might say that you will respect their privacy but may need to share information with the appropriate person if someone is at serious risk.

Safeguarding guidance specifically advises professionals not to promise absolute confidentiality when a disclosure could indicate that a child is being harmed or is at risk.

---

How to Seek Advice About Confidentiality

When you are unsure, use a simple step-by-step approach.

Step 1: Stop Before Sharing

If there is no immediate emergency, don’t send the information simply because someone has asked for it.

Take a moment to consider whether disclosure is actually necessary.

Step 2: Identify the Information

Ask yourself:

• What information am I being asked to share?
• Who does it relate to?
• Is the person identifiable?
• Is the information genuinely confidential?
• Can the information be anonymised?

The less identifiable information you can use while still achieving the legitimate purpose, the better.

Step 3: Establish the Purpose

Find out why the information is needed.

A vague explanation such as “we just need it for our records” may not be enough. You should understand the specific purpose for which the information will be used.

Step 4: Check Your Organisation’s Policy

Your workplace should have procedures explaining how confidential information should be handled.

Depending on your setting, you may need to consult:

• Your line manager
• Safeguarding lead
• Data protection officer
• Information governance team
• Caldicott Guardian
• Designated professional
• Legal adviser

The appropriate person will depend on the circumstances.

Step 5: Share Only What Is Necessary

If sharing is justified, avoid sending unrelated personal information.

The Caldicott framework emphasizes using the minimum necessary confidential information and limiting access to people who genuinely need it.

Step 6: Record the Decision

Where appropriate, document:

• What information was considered.
• Why sharing was or was not necessary.
• Who was consulted.
• What decision was reached.
• What information was shared.
• Who received it.
• Why the disclosure was justified.

Good records help demonstrate that the decision was considered rather than made casually.

Who Can You Ask for Confidentiality Advice?

The right source of advice depends on your situation.

The important point is that you should use the appropriate channel rather than asking someone who may not have the authority or expertise to make the decision.

What If Someone Asks You to Break Confidentiality?

Sometimes another person may pressure you to reveal information.

For example, a colleague might say, “Just tell me what happened. I won’t tell anyone else.”

That does not automatically give you permission to disclose it.

Instead, consider:

1. Does this person have a legitimate need to know?
2. Is there a lawful and appropriate reason to share the information?
3. Has the individual consented where consent is required?
4. Could sharing create harm or risk?
5. Does organisational policy allow the disclosure?
6. Should I seek advice first?

When in doubt, pause and ask for guidance.

What If the Law Requires Information to Be Shared?

Confidentiality is important, but it does not override every other legal obligation.

There can be circumstances where information must be disclosed because of a legal requirement, such as certain court orders or statutory requirements. There can also be circumstances where disclosure without consent is justified because of an overriding public interest or safeguarding need.

These situations can be complicated, which is exactly why seeking specialist advice is important.

Never assume that “confidential” automatically means “never share,” but equally, never assume that a request automatically gives you permission to disclose information.

Confidentiality and Data Protection Are Not Exactly the Same

These terms are closely connected, but they are not interchangeable.

Confidentiality is concerned with the obligation to protect information that should be kept private.

Data protection governs how personal data is collected, used, stored, shared, and otherwise processed.

The NHS, for example, distinguishes the common-law duty of confidentiality from UK GDPR requirements. Meeting one does not automatically mean that every requirement under the other has been satisfied.

This is another reason to seek advice when a situation involves sensitive personal information.

Practical Examples of When to Ask for Help

Example 1: A Family Member Requests Information

A family member calls asking for details about another person’s appointment.

Best response: Don’t automatically disclose the information. Check whether the person has consented and whether the requester has an appropriate reason and authority to receive it.

Example 2: A Child Discloses Possible Abuse

A child tells you something suggesting they may be at risk.

Best response: Do not promise absolute secrecy. Follow safeguarding procedures and report the concern to the appropriate person.

Example 3: A Colleague Wants a Client’s Details

A colleague asks for personal information but you are unsure whether they need it for their role.

Best response: Check whether they have a legitimate need to know and seek advice if necessary.

Example 4: You Accidentally Send Information to the Wrong Person

You realize that confidential information has been sent to an unintended recipient.

Best response: Treat it as a potential information-security incident and follow your organisation’s reporting procedure immediately. Don’t simply ignore the mistake.

Common Mistakes to Avoid

Confidentiality problems often arise from seemingly small decisions.

Avoid:

• Discussing private information where others can overhear.
• Leaving confidential documents unattended.
• Sharing information through an unauthorised communication channel.
• Assuming colleagues automatically have a right to know.
• Giving information to relatives without checking authority.
• Promising absolute secrecy.
• Sharing more information than necessary.
• Posting identifiable information on social media.
• Ignoring an accidental disclosure.
• Making difficult disclosure decisions without seeking advice.

NHS England’s current confidentiality policy also stresses secure communication, appropriate access controls, careful handling of confidential information, and avoiding unauthorised publication or disclosure.

A Simple Rule to Remember

When you’re unsure about confidentiality, ask yourself five questions:

Who? — Who does the information belong to?

What? — What information am I considering sharing?

Why? — Why does it need to be shared?

Who needs to know? — Is the recipient genuinely authorised or involved?

What next? — Do I need advice before making the decision?

If you cannot confidently answer these questions, seek advice before sharing, unless there is an urgent safeguarding or safety situation requiring immediate action under your organisation’s procedures.

FAQs About Seeking Advice on Confidentiality

What does it mean to seek advice about confidentiality?

It means asking an appropriate person or specialist for guidance when you are uncertain about whether confidential information can be accessed, used, or shared. This could involve a manager, safeguarding lead, data protection officer, information-governance professional, or other authorised adviser.

When should I seek advice about confidentiality?

Seek advice when you are unsure whether information is confidential, whether consent is required, who can receive information, whether a legal requirement applies, or whether safeguarding concerns justify sharing information.

Can confidential information ever be shared without consent?

Yes. Depending on the circumstances and applicable law, information may sometimes be shared without consent when there is a legal requirement, an overriding public-interest justification, or a safeguarding reason. Such decisions should be carefully considered and, where appropriate, discussed with a specialist.

Should you promise to keep someone’s disclosure completely confidential?

Not if there is a possibility that the information could reveal a serious safeguarding or safety concern. Instead, explain that you will respect their privacy but may need to involve an appropriate person if someone is at risk.

Who should I ask about a confidentiality concern?

Start with your line manager or supervisor if appropriate. For specialist situations, you may need to contact a safeguarding lead, data protection officer, information-governance team, Caldicott Guardian, or legal adviser.

Why is it important to share only necessary information?

Limiting disclosure reduces unnecessary exposure of someone’s personal information and supports privacy. The Caldicott Principles specifically emphasize using confidential information only when necessary and sharing the minimum information required for the purpose.

Conclusion

To explain how and when to seek advice about confidentiality, the main idea is simple: protect people’s private information, but don’t let uncertainty prevent necessary and appropriate action. Confidentiality is not an absolute rule that information can never be shared; decisions depend on the purpose, consent, safeguarding considerations, legal requirements, and professional responsibilities.

When you are unsure, pause, check the relevant policy, and seek advice from the right person. And when information does need to be shared, use a clear justification, disclose only what is necessary, use a secure method, and record the decision where required.

That balanced approach helps protect privacy while also ensuring that confidentiality does not become a barrier to someone’s safety, care, or wellbeing.