This course explains the duty of confidentiality, the legal framework for handling patient information in the UK, and the situations in which disclosure is lawful. It covers the most common breaches seen by employers and regulators, including accessing records without a clinical reason and sharing information on messaging apps, and guides you through a reflection and remediation plan.
What you will learn
- Explain the common law duty of confidentiality and the main requirements of UK GDPR and the Data Protection Act 2018 as they apply to health professionals.
- Identify the lawful bases for disclosing confidential information, including consent, the public interest and legal requirements.
- Recognise common breaches, including inappropriate record access, misdirected communications and insecure messaging, and explain why they occur.
- Take the correct immediate steps after a confidentiality or data breach, including reporting and containment.
- Write a reflection and remediation plan that shows insight and is supported by verifiable evidence.
Course content
- Why confidentiality matters (2 min)
- The legal and professional framework (3 min)
- When disclosure is lawful (3 min)
- Common breaches and why they happen (3 min)
- Immediate actions after a breach (2 min)
- What regulators expect: insight and remediation (1 min)
- Case study: a weak and a strong reflection (3 min)
- Building your remediation plan (1 min)
- Knowledge check (10 questions, 10 min)
- Guided reflection (15 min)
Standards and guidance covered
- GMC: Confidentiality: good practice in handling patient information (2017) and Good Medical Practice (2024)
- NMC: The Code (2015, updated 2018), including the section on respecting people's right to privacy and confidentiality
- HCPC: Standards of conduct, performance and ethics (2024), including the standard on respecting confidentiality
- GPhC: Standards for pharmacy professionals (2017) and guidance on patient confidentiality
- UK General Data Protection Regulation and the Data Protection Act 2018
- The Caldicott Principles (National Data Guardian, 2020)
Certificate
Courses are free to study. When you pass the knowledge check (80%) and complete your reflection, you can buy a verified certificate showing your CPD time, with a unique ID and QR code that anyone can check on our verification page.
Study free at your own pace on any device.
Related guides
Social Media and Professional Conduct: What UK Nurses and Doctors Need to Know
Social media rules for UK nurses, doctors and HCPC professionals: what NMC, GMC and HCPC guidance says on confidentiality, boundaries and posting about work.
What Happens If You Breach Patient Confidentiality? A Guide for Healthcare Staff
What happens if you breach patient confidentiality: disciplinary action, regulator referral, possible prosecution, what to do straight away and how to reflect.
Practitioner Insight is an independent education provider. It is not affiliated with or endorsed by the GMC, MPTS, NMC, HCPC, GPhC or any NHS organisation, and this information is not legal advice. If you have been referred to a regulator, speak to your defence organisation, trade union or legal representative.