Breaking Confidentiality
There are specific circumstances in which a doctor may or must disclose confidential patient information without consent, including statutory obligations, safeguarding, prevention of serious harm, and public interest, requiring careful balancing of competing duties.
Key Facts
Disclosure is REQUIRED by law: notifiable diseases, court orders, Terrorism Act (Section 19), certain Road Traffic Act requests, FGM mandatory reporting Disclosure is PERMITTED in the public interest: to prevent serious harm to the patient or others, including serious crime and safeguarding concerns GMC guidance: disclose without consent only when failure to do so may expose others to risk of death or serious harm DVLA reporting: if a patient with a notifiable condition refuses to stop driving, doctor should inform the patient and then may disclose to DVLA Child safeguarding: confidentiality should NOT prevent disclosure to protect a child at risk — Children Act 2004 overrides duty of confidence Serious communicable disease: if patient refuses to inform sexual partners (e.g. HIV), doctor may disclose to identified at-risk individuals after exhausting other options Proportionality: disclose only the minimum necessary information to the appropriate person/authority Always document the decision to disclose, the justification, and the information shared
Overview
Key Facts
Breaking confidentiality is one of the most challenging ethical decisions in clinical practice. It requires careful weighing of the duty of confidence against the duty to protect third parties or comply with the law. The decision should be proportionate, justified, and documented.
Mandatory Disclosures (Required by Law)
- Notifiable diseases: Health Protection (Notification) Regulations 2010
- Court orders: compliance is legally required
- Terrorism Act 2000 (Section 19): duty to report suspicion of terrorist financing or offences
- Road Traffic Act 1988 (Section 172): police can require identity of drivers involved in accidents
- FGM Act 2003: mandatory reporting of FGM in girls under 18
- Drug Trafficking Act 1994/Proceeds of Crime Act 2002: reporting of money laundering
- Births and Deaths Registration Acts: reporting of births and deaths
Discretionary Disclosures (May Disclose)
- Safeguarding: child protection, adult safeguarding
- Serious crime prevention: disclosure justified if necessary to prevent or detect serious crime
- Serious communicable disease: risk to identifiable third parties
- DVLA: patient refuses to inform or stop driving despite medical unfitness
- GMC/regulatory investigation: cooperate with fitness to practise investigations
- Public health: disease surveillance, outbreak investigation
Clinical Presentation
Common Clinical Scenarios
Patient refuses to inform DVLA of medical unfitness to drive:
- Explain legal obligation to notify DVLA
- Advise patient to stop driving
- If patient refuses: inform them you will disclose to DVLA
- Write to the medical adviser at DVLA
- Inform the patient you have done so
Patient with HIV refuses to tell sexual partner:
- Discuss importance of disclosure with patient
- Offer support with disclosure (partner notification services)
- If patient still refuses and partner is at identifiable serious risk:
- Consider disclosing to partner (GMC guidance permits)
- Disclose minimum necessary information
- Inform the patient of your decision
Suspected child abuse:
- Share information with safeguarding team/social services
- Consent from parent NOT required if seeking consent would increase risk to child
- Document concerns and actions
Police request for information about a patient:
- Ask for written request specifying information needed and legal authority
- If no court order: consider whether disclosure is justified (serious crime)
- If not justified: decline and explain patient can consent
- If court order: comply
Differential Diagnosis
| Disclosure Type | Consent Needed | Legal Basis | Example |
|---|---|---|---|
| Mandatory (statute) | No | Specific legislation | Notifiable diseases, court order, terrorism |
| Safeguarding | No (if risk to child/adult) | Children Act, Care Act | Suspected child abuse |
| Public interest (serious harm) | No | Common law, GMC guidance | Patient threatening to harm others |
| DVLA | No (if patient refuses) | GMC guidance, Road Traffic Act | Epilepsy, impaired vision |
| Insurance/employer | Yes (explicit) | Access to Medical Reports Act | Fitness for work report |
| Research | Usually yes (or Section 251 approval) | UK GDPR, NHS Act Section 251 | Database studies |
Diagnosis / Investigation
Decision-Making Framework for Breaking Confidentiality
- Is there a legal requirement to disclose? → If yes, disclose
- Is there consent (or can consent be obtained)? → If yes, disclose with consent
- Is there a risk of serious harm to others? → If yes, consider public interest disclosure
- Is disclosure proportionate? → Minimum necessary information to appropriate recipient
- Document the decision-making process, regardless of outcome
- Inform the patient (unless doing so would increase risk)
Management
Best Practice
- Always try to obtain consent first
- If consent refused, explain your obligations and potential need to disclose
- Disclose minimum necessary information
- Disclose to the appropriate person/authority only
- Document the decision, reasons, and information shared
- Inform the patient (if safe to do so)
- Seek advice if uncertain: Caldicott Guardian, GMC helpline, defence organisation
When NOT to Disclose
- Patient's employer asking about diagnosis without consent
- Family member asking about adult patient's condition without consent
- Media inquiry about patient
- Curious colleagues without clinical involvement
- Social media (never discuss identifiable patients)
Referral/Advice
- GMC ethical advice line
- Medical defence organisation (MDU, MPS, MDDUS)
- Caldicott Guardian
- Hospital legal team
- Clinical ethics committee for complex cases
Prognosis
- Appropriate disclosure protects patients and public while maintaining trust
- Unjustified disclosure leads to complaints, GMC investigations, and potential legal action
- Failure to disclose when required (e.g. safeguarding) can also lead to regulatory action
- Clear documentation protects the healthcare professional
- Training in confidentiality and information governance reduces inadvertent breaches
Other Relevant Information
GMC Framework for Disclosure Without Consent
| Step | Action |
|---|---|
| 1 | Consider whether disclosure can be justified |
| 2 | Assess the potential harm of disclosure vs non-disclosure |
| 3 | Consider whether the purpose can be achieved without identifying the patient |
| 4 | Disclose the minimum necessary information |
| 5 | Disclose to the appropriate person/authority |
| 6 | Inform the patient (unless unsafe) |
| 7 | Document the decision and reasons |
Serious Crime — What Counts?
| Likely Serious Crime | Unlikely to Justify Disclosure |
|---|---|
| Murder, manslaughter | Shoplifting |
| Sexual offences | Minor traffic offences |
| Terrorism | Drug possession (personal use) |
| Kidnapping, GBH | Criminal damage (minor) |
| Drug trafficking | Fraud (minor) |