Safe Use of SMS, Email and Online Messaging for GP Receptionists and Care Navigators

Safe digital communication through approved patient messaging routes

  • Reputation

    No token earned yet.

    Reach 50 points to earn the Peridot (Trainee Level).

  • CPD Certificates

    Certificates

    You have CPD Certificates for 0 courses.

  • Exam Cup

    No cup earned yet.

    Average at least 80% in exams to earn the Bronze Cup.

Launch offer: Certificates are currently free when you create a free account and log in. Log in for free access

Writing safe SMS and email content

Two reception staff working at desks

Good message wording is clear, limited to what is needed and avoids adding unnecessary confidential detail. It helps the patient recognise the sender, understand the next step and prevents confusion.

Keep the content necessary

Include only the information required for the task. For example, a reminder may not need the clinic type; a request to contact the practice does not need to state a result or diagnosis; a booking link should avoid sensitive detail.

Even short messages can be harmful if they reveal sensitive information. Consider what might appear on a locked screen, in a shared inbox or to someone helping the patient with their phone.

Write for clarity and trust

  • Identify the practice or service clearly so the patient can recognise the message.
  • Use plain language and avoid jargon, abbreviations and unexplained acronyms.
  • Give one clear action where possible, such as book, call, attend or wait for contact.
  • Avoid clinical interpretation unless the message has been approved for that purpose.
  • Be careful with links because patients may worry about phishing or scams.

A safe message should be understandable to the patient and unhelpful to anyone who has no right to know their health information.

Social engineering: Keep I.T. Confidential cyber security campaign | NHS England

Video: 1m 58s · Creator: NHS England Digital. YouTube Standard Licence.

This NHS England Digital video describes social engineering - tricks or deception used to obtain access to data, systems, information or places. It warns that giving unauthorised or suspicious people access can put patient data at risk.

Examples include someone calling and pretending to be an employee, asking a person to hold a door open, posing as a friend on social media, or researching the organisation to appear legitimate. The video gives five practical tips to reduce the risk.

Be cautious if a browser warns that a site is untrusted; it may be a fake phishing site. Treat warnings about insecure connections as a sign to stop. Never share login details or passwords - ICT teams will not ask for them. Avoid sharing work information on personal social media and contact the local ICT team for advice when unsure. Confidentiality must be protected both offline and online.

Was this video a good fit for this page?

Scenario

A proposed SMS says, "Your abnormal blood result may mean diabetes. Book urgently via this link." The message was written by a receptionist from a task note.

What is unsafe about this wording?

 

Ask Dr. Aiden


Rate this page


Course tools & details Study tools, course details, quality and recommendations
Funding & COI Media Credits