Exam Pass Notes

Core Identity Principles
- Identity checks protect patient confidentiality, record accuracy and safety, and help maintain trust.
- Familiarity with a patient does not replace your practice's verification process.
- Checks should be proportionate to the sensitivity and risk of the request.
- Do not disclose details from the record while performing an identity check.
Phone, Desk and Digital Contacts
- Verify identity and authority before disclosing information on telephone calls.
- Front-desk checks must avoid revealing confidential details aloud in public areas.
- Digital messages, emails and SMS may require additional verification before you act on them.
- Check safe-contact notes before arranging call-backs, leaving voicemail or sending messages.
Third Parties and Proxy Access
- Helping a patient does not automatically give a third party the right to receive information.
- Proxy access or consent can be limited to specific tasks or records.
- You may accept safety-related information from a third party without disclosing patient information in return.
- Escalate concerns if a caller appears controlling, coercive or poses a safety risk.
Failed Checks and Records
- If a check fails, do not disclose information; this does not prevent urgent safety escalation when needed.
- Record failed checks, unusual requests, safe-contact concerns and any escalations.
- Report wrong-record risks and accidental disclosures according to local policy.
- Use factual, proportionate wording in records and make clear who made each entry.

