Confidentiality Policy

What's inside

This policy is fully drafted and structured, ready to brand and complete for your service. It covers:

• 1. Purpose
• 2. Scope
• 3. Policy statement
• 4. Definitions
• 5. Legal and professional framework
• 6. Principles of confidentiality
• 7. What information is confidential
• 8. Obtaining and recording consent to share
• 9. Sharing information with consent
• 10. Disclosing information without consent
• 11. Confidentiality in remote and telehealth consultations
• 12. Staff responsibilities and confidentiality in employment
• 13. Confidentiality breaches
• 14. Training
• 15. Monitoring, audit and compliance
• 16. Related documents
• 17. Document control and review

Legislation & standards it maps to

• Common Law Duty of Confidentiality
• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Data (Use and Access) Act 2025
• Human Rights Act 1998 (Article 8)
• Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, Regulation 17 (Good governance)
• National Health Service Act 2006 (section 251)
• Caldicott Principles (UK Caldicott Guardian Council)
• General Medical Council – Confidentiality: good practice in handling patient information (2017)
• Access to Health Records Act 1990
• Children Act 1989 and 2004
• Road Traffic Act 1988 and DVLA fitness-to-drive guidance

Who it applies to

All clinicians, prescribers, assessors, administrative and reception staff, locums, students, volunteers, contractors and data processors acting on behalf of [Organisation Name].

How it works

1. Buy securely with Stripe - instant, no VAT, no account needed.
2. Download your editable Word file from the link we email you straight away.
3. Complete the placeholders for your service, then have it approved before use.
4. Add the optional updates subscription and we keep it current as guidance changes.