Best Practice for Protecting Patient Information

🔐 Protecting Patient Confidentiality: What You Must Never and Always Do

In health and social care, safeguarding patient confidentiality isn’t optional – it’s a legal and professional obligation. To comply with data protection laws such as the Data Protection Act and GDPR, staff must know exactly what actions to avoid and what standards to follow at all times.

🚫 What You Must NEVER Do

• Never retain medical or confidential paperwork once a task is complete.
• Never leave paperwork with patient data where it could be seen, taken, or lost.
• Never disclose or discuss patient information with individuals not directly involved in their care.
• Never share identifiable patient details on social media under any circumstances.
• Never take photos of patients or any documentation containing personal information.
• Never store or transfer patient data onto a personal mobile phone.

Any of these actions may breach confidentiality and result in disciplinary action or legal penalties.

✅ What You Must ALWAYS Do

• Always use your PDA to manage transport or journey details, and lock the screen when finished.
• Always delete patient data from your PDA once the task is complete.
• Always return paperwork to the designated area for confidential disposal at the end of each task.
• Always ensure that sensitive information is not left in public or unsecured areas.
• Always support colleagues by promoting proper data handling practices.
• Always report any suspected or confirmed data breach immediately to your line manager.
• Always stay vigilant to the potential risks and impacts of data breaches.
• Always ensure any paperwork accompanying a patient stays with them at all times.

By consistently following these rules, we help to protect patient rights, maintain trust in our service, and meet our legal obligations with confidence and professionalism.