Recording, incidents and learning

Good confidentiality depends on accurate records and prompt reporting when errors occur or almost occur. A wrong text, an overheard conversation, a misdirected letter or an inappropriate disclosure must be recorded and reported, not hidden.

Incident reports help the practice identify risks, support staff and, where appropriate, inform patients. Reports of near misses are useful because they show weaknesses in processes before serious harm happens.

Record the contact

• What was requested or disclosed, recorded in factual language.
• Who was involved, including any third-party callers.
• What checks were made, for example identity, consent or safe contact arrangements.
• What action was taken, including escalation, advice given or refusal to disclose.

Report possible breaches

If information may have gone to the wrong person, been overheard, been accessed without a work reason, or been sent by the wrong route, follow the practice incident process promptly. Do not try to fix it informally or alter records to make the event seem less serious.

Repeated problems - such as printer mix-ups, loud desk conversations or unclear voicemail wording - indicate a need to review systems and procedures.

Report confidentiality concerns early; delay can increase harm and make learning harder.

Data incidents