Extract from the Ethical Framework

55. We will protect the confidentiality and privacy of clients by:

a. actively protecting information about clients from unauthorised access or disclosure
b. informing clients about how the use of personal data and information that they share with us will be used and who is within the circle of confidentiality, particularly with access to personally identifiable information
c. requiring that all recipients of personally identifiable information have agreed to treat such information as confidential in accordance with any legal requirements and what has been agreed with the client at the time of disclosure
d. informing clients about any reasonably foreseeable limitations of privacy or confidentiality in advance of our work together, for example, communications to ensure or enhance the quality of work in supervision or training, to protect a client or others from serious harm including safeguarding commitments, and when legally
required or authorised to disclose
e. taking care that all contractual requirements concerning the management and communication of client information are mutually compatible
f. ensuring that disclosure of personally identifiable information about clients is authorised by client consent or that there is a legally and ethically recognised justification
g. using thoroughly anonymised information about clients where this provides a practical alternative to sharing identifiable information

Video transcripts (opens in a new window)


Is discussing clients in supervision or as part of my training compatible with the ethic of confidentiality?


Why does this section talk about contractual compatibility? Can you give some examples of problems that have arisen due to contractual incompatibility?


How do the new requirements under GDPR fit with our professional ethic of confidentiality?


Search for Good Practice in Action resources on:


Record keeping