Privacy Policy

Home 9 Privacy Policy

Policy Title:

Policy Number:

Date Implemented or Date of Last Review:

Date of Next Review:

Confidentiality Policy




    • At WIH Recruitment the need for the strict confidentiality of personal information about clients is taken very seriously. This document sets out our policy for maintaining confidentiality and all members of WIH Recruitment must comply with these safeguards as part of their contract of employment or contract for services with WIH Recruitment.
    • The relationship between WIH Recruitment and clients is based on the understanding that any information revealed by the clients to WIH Recruitment will not be divulged without the client’s consent.
    • Clients have the right to privacy, and it is vital that they give WIH Recruitment full information on their state of health to ensure that they receive quality care and that the care provided is safe.
    • The intensely personal nature of health information means that many clients would be reluctant to provide WIH Recruitment with information if they were not sure that it would not be passed on.
    • If confidentiality is breached, WIH Recruitment and their representative may face investigation by investigations and, possible prosecution for breach of the Data Protection Act-GDPR.
    • All WIH Recruitment workers must follow the Nursing and Midwifery’s rules for maintaining client’s confidentiality contained in the Standards of Conduct for performance and ethics for nurses and midwives.
  • If confidentiality is breached, each agent involved is responsible to the Council for their individual conduct.
    • Personal information held by WIH Recruitment about a client includes:
      • Client’s name, current and previous addresses, bank account/credit card details, telephone number/email address and other means of personal identification such as physical description.
      • Information that is held in the individual’s health care plan
      • Information concerning client’s physical, mental or oral health or condition
      • Information about the treatment that is planned, is being or has been provided
      • Information about family members and personal circumstances supplied by client to others
      • Any relevant information that may be deemed to be confidential
    • WIH Recruitment has adopted the following principles of confidentiality. Personal information about a client:
      • Is confidential in respect of that client and to those providing clients with healthcare;
      • Should only be disclosed to those who would be unable to provide effective care and treatment without that information (the need-to-know concept), and
      • Such information should not be disclosed to third parties without the consent of the client except in certain specific circumstances described in this policy.
    • There are certain restricted circumstances in which WIH Recruitment workers may decide to disclose information to a third party or may be required to disclose by law. Responsibility for disclosure rests with client’s main care provider and under no circumstances can any other worker decide to disclose.
    • When disclosure is in the public interest;
      • There are certain circumstances where the wider public interest outweighs the rights of the patient to confidentiality. This might include cases where disclosure would prevent a serious future risk to the public or assist in the prevention or prosecution of serious crime.
    • There are circumstances when personal information can be disclosed:
      • Where client has expressly given consent to the disclosure
      • Where disclosure is necessary for enabling someone else to provide health care to the client and the client has consented to this sharing of information
      • Where disclosure is required by statute or is ordered by a court of law
      • Where disclosure is necessary for other professionals to pursue a bona-fide legal claim against a patient, when disclosure to a solicitor, court or debt collecting agency may be necessary.
      • Disclosure of information necessary to provide care and making referrals to other medical professionals.
    • The Mental Capacity Act 2005 applies to adults without capacity, and further details about the disclosure of confidential information about a patient lacking capacity can be found in the Mental Capacity Act Code of Practice.
    • Under the Act, patients are assumed to have capacity, unless they have an impairment affecting their mind (e.g., dementia), which means they are unable to make a specific decision at a specific time.
    • There is also a requirement to ensure all practical steps have been taken to help the individual decide. The overriding principle is that the disclosure of confidential information is made in the best interests of the person lacking capacity. This may involve releasing information about their condition, for example, to their carer, to ensure they receive the best treatment.
    • Information may need to be disclosed to third party organisations to ensure the provision of care.
    • In practical terms, this type of disclosure means:
      • Transmission of claims/information to payment authorities such as the Business Services Authority for England and Wales Referring clients to relevant authorities for medical or social needs.
    • Clients have the right of access to their health records held on paper or on computer.
    • A request from a client to see records or for a copy must be referred to client’s relevant medical professional.
    • Clients should be given the opportunity of coming into the practice to discuss the records and will then be given a photocopy or print-out.
    • Care should be taken to ensure that the individual seeking access is the client in question and where necessary the practice will seek information from the client to confirm identity. The copy of the record must be supplied within forty days of payment of the fee and receipt of identifying information if this is requested.
    • The fact that clients have the right of access to their records makes it essential that information is properly recorded. Records must be:
      • Contemporaneous and dated
      • Accurate and comprehensive
      • Duly signed where required
      • Neat, legible and written in ink
      • Strictly necessary for the purpose
      • Not derogatory
      • Such that disclosure to client would be unproblematic.
    • The principles of confidentiality give rise to several practice rules that everyone in the practice must observe:
      • Records must be kept secure and, in a location, where it is not possible for other clients or individuals to read them.
      • Clients should not be able to see information contained in appointment books, day sheets or computer screens.
      • Discussions about clients should not take place in public areas of the practice.
      • When talking to a client on the telephone or in person in a public area care should be taken that sensitive information is not overheard by other clients.
      • Messages about a client’s care should not be left with third parties or left on answering machines. A message to call the practice is all that can be left.
      • Recall cards and other personal information must be sent in an envelope.
      • Identifiable information about clients must not be discussed with anyone outside of the practice including relatives or friends.
      • Demonstrations of the practice’s administrative/computer systems should not involve Actual client’s information.
    • Clients appointments should not be communicated to third parties without consent.
    • Do not provide information about a client’s appointment record to a client’s employer, unless client’s consent is obtained. Such queries must be referred to the Registered Manager.
    • Disclosure of appointment books, record cards or other information should not be made to police officers or HM Revenue and Customs officials unless upon the instructions of the Registered Manager.
    • If, after investigation, a worker is found to have breached a client’s confidentiality or this policy, he or she shall be liable to summary dismissal in accordance with WIH Recruitment Disciplinary Policy.
    • Temporary workers are reminded that all personal data processed must by law remain confidential after your employment has terminated. It is an offence under the Data Protection Act 1998, knowingly or recklessly, without the consent of WIH Recruitment’s Data Controller to obtain or disclose personal data.
    • If WIH Recruitment suspects that you have committed such an offence, it will contact the Office of the Information Commissioner and you may be prosecuted by the Commissioner or by the Director of Public Prosecutions.