Patient information is generally held under legal and ethical obligations of confidentiality. Information provided in confidence should not be used or disclosed in a form that might identify a patient without his or her consent. There are a number of exceptions to this rule but it applies in most circumstances.
Patients have a right of access to health information about themselves. This is governed by the Data Protection Act 1998.
This document expands upon the principles set out with the Department of Health’s key guidance Confidentiality: NHS Code of Practice. The document is aimed at aiding staff in making difficult decisions about when disclosures of confidential information may be justified in the public interest.
Guidelines were produced on the use and protection of patient information in November 2003. Supplementary guidance on public interest disclosures was issued in November 2010.
The NHS use records about patients in ways that respect their rights and promote health and wellbeing.