Summary
You owe a duty of confidentiality to all your patients, past or present, even if they are adults who lack capacity. You may be asked to provide information from the medical records of patients who are incapable of giving consent, are aged under 18, or have died. This factsheet gives you further information about dealing with these circumstances.
Children and young people with capacity
Many young people have the capacity to consent to the disclosure of their medical records. If the child or young person (under 18 years of age) is able to understand the purposes and consequences of disclosure, and are Gillick competent, they can consent or refuse consent to the disclosure. You should discuss disclosing the information with them and release it only with the child or young person’s consent.
If a child or young person under 18 refuses consent, you should nevertheless disclose the information if this is necessary to protect the child, young person or someone else from serious harm.
Examples include situations where you consider that the child or young person is at risk of neglect or abuse, the information would assist in the prevention, detection or prosecution of a serious crime, or where the child or young person may be involved in behaviour that might put themselves or others at risk of serious harm.
It would also include a situation where a child or young person has refused to allow a carer to be told of a condition or treatment, from which there is a risk of a serious complication arising.
You should give careful consideration to the child’s reasons for refusal of disclosure, and explain to them your reasons for disclosing the information and what you intend to disclose – unless doing so would undermine the purpose of the disclosure.
You should involve the child or young person in the decision and ensure this is documented – including notes on how the decision was reached.
Children and young people without capacity
The overriding principle, when dealing with the disclosure of the medical records of children or young people who do not have the maturity or understanding to make a decision, is ensuring that you act in their best interests.
If the child or young person lacks the capacity to consent to the disclosure of information, those with parental responsibility can consent on their behalf. The consent of only one person with parental responsibility is needed for consent to be valid.
If you do not believe that the decision made by those with parental responsibility is in the best interests of the child or young person, and the disagreement cannot be resolved with discussion and mutual agreement, it may be necessary to seek the view of the courts. You should contact MPS for further advice if such a situation arises.
In young people aged 16-17 who lack capacity, both the Mental Health (Northern Ireland) Order 1986 and the Children (Northern Ireland) Order 1995 can apply, depending on the circumstances, but it would be very rare that either piece of legislation is likely to be expressly relevant to a question of disclosure of medical notes, as opposed to actual treatment.
In relation to disclosure of information, the most important principle is to ensure that you are acting in the patient’s best interests.
Adults lacking capacity
Adults are assumed to have capacity, unless they have an impairment affecting their mind (eg, dementia), which means they are unable to make a specific decision at a specific time.
There is also a requirement to ensure all practical steps have been taken to help the individual make a decision, and that valid consent has been obtained. Where patients lack capacity, information may be shared with those close to or representing them unless there is evidence that this would be contrary to the patient’s wishes.
The disclosure of confidential information should be made in the best interests of the person lacking capacity. This may involve releasing information about their condition – for example, to their carer, to ensure they receive the best treatment.
Disclosure after a patient’s death
Your duty of confidentiality extends beyond the patient’s death. However, there may be circumstances when disclosure may be justified. For example, you are under a professional duty to respond to complaints, and this includes complaints made by bereaved relatives. Any disclosure must be justifiable and the reasons for doing so must be fully documented.
Whom can you disclose information to?
The Access to Health Records (Northern Ireland) Order 1993 applies to records of deceased patients, and to information recorded on or after death. Under the Act, upon request, relevant information should be disclosed to the personal representative of the deceased (the executor of the deceased’s will or the administrator of the estate if your patient died without leaving a will) or anyone who may have a claim arising from the patient’s death.
Access under this legislation should, however, be refused if the record includes a note, made at the patient’s request, that he or she did not wish access to be given on such an application.
If the request for disclosure is made by someone other than the personal representative or a person with a potential claim arising from the patient’s death, then, where possible, you should advise them to seek the consent of the personal representative.
If this is not possible you should consider whether disclosure would be justified in all the circumstances of the case – for full details see the factsheet on Confidentiality – Disclosure Without Consent.
What information can be disclosed?
If the patient has asked that specific information remains confidential, their views should be documented, and respected, subject to disclosures that are required by law or justified in the public interest. However, even in circumstances where you are not aware of any specific requests from the patient, there are factors you should take into account before disclosing any information:
- Is it information which, by its nature, the patient might not have wanted disclosed?
- Could the disclosure of the information cause serious harm or distress to others?
- Would the disclosure inadvertently reveal information about a third party?
- Is the information already in the public domain?
- Is the disclosure necessary?
If you are uncertain, contact MPS for further advice.
A decision not to disclose information covered by the Act can be reviewed by the High Court in the event of a disagreement.
Further information