Confidentiality is a cornerstone of the doctor-patient relationship — without it, patients won't disclose sensitive information, and healthcare collapses. But confidentiality is not absolute. The central tension of this lecture is: when does the public interest outweigh the individual patient's right to privacy? ^[1]

This lecture systematically covers:

1. Why confidentiality matters (ethical, legal, practical foundations)
2. When it can be legitimately broken (the exceptions)
3. Common pitfalls that breach confidentiality in everyday practice
4. How to minimise breaches
5. Case studies applying these principles

1. Appraise the importance of confidentiality in research and medical practice 2. Identify the situations when confidentiality might be correctly broken 3. Give example of some common pitfalls in preserving confidentiality in everyday practice 4. Explain how to minimise the potential for breaches of confidentiality 5. Discuss case studies – interactive session ^[1]

Confidentiality: Ensuring that information is accessible only to those authorized to have access — ISO definition ^[1]

This is not just a rule to memorise. Think about why from first principles:

Utilitarian reasoning: If patients fear their information will be shared, they will withhold information or not seek help at all. This makes diagnosis harder and population health worse. The whole system depends on trust ^[2].

Deontological reasoning: Respect for autonomy and privacy — the patient has a right to control their personal information. There is an implied promise when a patient consults a doctor that their information will be kept confidential ^[2].

Virtue ethics: Being a trustworthy professional is core to what it means to be a good doctor.

Every person has the right to:

• Respect for his/her privacy
• Be respected as a human being
• Self-determination, and moral, cultural and religious values
• Physical and mental integrity and security
• Health protection, disease prevention and health care ^[1]

These ideas explain the visual emphasis on dignity, trust and privacy in the opening slides. However, the deck's attribution needs care: these are broad patient-rights principles, not the text of the Declaration of Geneva.

The slide title "WHO Declaration of Geneva, Sydney 1968" conflates several sources. The Declaration of Geneva is a World Medical Association (WMA) physician's pledge, adopted in Geneva in 1948 and amended in Sydney in 1968. Its confidentiality promise is to respect secrets confided by the patient even after the patient has died ^[11].

The slide's additional propositions about disclosure, treatment-team sharing, file access, correction and deletion are not all clauses of the Declaration of Geneva. In Hong Kong:

• access and correction of a living person's personal data are governed principally by the PDPO;
• there is no general patient right to erase clinically necessary records simply on request; accuracy, retention, medico-legal and statutory duties must all be considered;
• disclosure to another healthcare professional is limited by purpose, direct-care need, reasonable expectation, consent and the minimum-necessary principle ^[7][8][9].

Healthcare is a team process, but "implied consent" is an easy phrase to overextend. For direct care, sharing may be consistent with what the patient reasonably expects when the recipient is involved in care and receives only what is needed. In eHealth, the operational test is more concrete: an authorised professional, a patient under care, a clinical need to know, and the applicable sharing consent ^[9]. Secondary uses—research, teaching, insurance, employment, marketing or product development—require their own lawful basis and usually more explicit information or consent.

1. The International Code of Medical Ethics: "A doctor shall preserve absolute confidentiality except where others are endangered on all he knows about his patient even after the patient has died." ^[1]

2. Professional Misconduct: "If a medical professional has done something which will be reasonably regarded as disgraceful, unethical or dishonourable by his professional colleagues of good repute, then it is open to the Medical Council of Hong Kong to say that he has been guilty of professional misconduct." ^[1]

3. Patient's Privacy, Medical Records and Confidentiality:

• Keep good records; Keep records secure
• Understand Personal Data (Privacy) Ordinance
• Make sure to have informed consent before disclosing information to a third party
• Obey guidelines for handling records
• In exceptional circumstances, you may disclose information to a third party without consent if failure to do so may result in risk of death or serious harm, or when required by law to do so ^[1]

These are the deck's summaries of the 2006-era international wording and the MCHK framework. For a current Hong Kong answer, anchor the analysis in MCHK Code sections 1.1 and 1.4, the PDPO and any specific statute rather than treating "absolute" or "others are endangered" as self-executing tests ^[7].

The PDPO is the primary Hong Kong statute governing personal data protection. For doctors, the main implications are:

The deck uses the historical name Electronic Health Record Sharing System Ordinance (eHRSSO). Following the 2025 amendment, its short title became the Electronic Health System Ordinance on 1 December 2025. The PDPO, the eHealth Code of Practice and professional duties continue to apply alongside it ^[9].

The practical access model is authorised role + patient under care + clinical need to know + applicable sharing consent. Access is logged; administrative users should not browse clinical records. The Ordinance contains specific offences such as unauthorised access or system impairment, but not every privacy incident or Code-of-Practice lapse is automatically a crime. The current Code expressly states that mere non-compliance with the Code does not itself create criminal liability unless the conduct also constitutes an offence. Depending on the facts, consequences may instead be regulatory, disciplinary, civil, employment-related, or criminal ^[9].

From supporting psychiatry notes ^[4]:

Both categories are confidential. Where the data identify a living individual, the PDPO also applies; the professional/common-law duty has a broader reach, including after death ^[4][8][11].

The Hippocratic Oath itself contains a qualifier: "Whatsoever things I see or hear concerning the life of men and women... which ought not to be noised abroad, I will keep silence thereon..." — The phrase "which ought not to be noised abroad" implies there ARE things that should be disclosed ^[1].

Treat that as the lecturer's ethical prompt, not a legal interpretation of the oath. The actual authority for disclosure comes from valid consent, direct-care sharing within proper limits, a specific legal requirement, or the exceptional serious-harm/public-interest analysis below.

In exceptional circumstances, medical information may be disclosed to a third party without the patient's consent: (i) Where disclosure is necessary to prevent serious harm to the patient or other person

• Example: Infectious diseases (ii) When disclosure is required by law ^[1]

Statutory measures can: 1. Impose a duty at law to disclose certain confidential information 2. Confirm the strict nature of the duty of confidentiality 3. Empower modifications to the duty of confidentiality in given circumstances ^[1]

Examples:

• Abortion regulation
• Notifiable disease
• Venereal disease
• Tackling crime — criminal investigation ^[1]

Those are lecture-era category labels, not a list of automatic permissions. First identify the exact current statutory provision, recipient, trigger and information required.

The following is the deck's balancing language; use the correction immediately below when applying current Hong Kong guidance:

Key principles when considering disclosure in the public interest:

• Maintaining confidentiality is the key (default position)
• There is a list of exceptions to the obligation of confidence
• Disclosure should be limited to those regarded as vitally in need of the information
• The risk must be real rather than fanciful
• This real threat needs to be rather of physical harm, as opposed to some other form of harm ^[1]

Can the doctor who decides NOT to inform a third party of the risk be found liable as a matter of law or professional discipline?

Dilemmas:

• Legal duty — action of negligence?
• Danger of death or serious injury is foreseeable?
• Deter the patient from seeking help
• The loss of some patients' privilege (driving licence, insurance) ^[1]

This resembles the US Tarasoff problem, but do not import a foreign rule as the Hong Kong answer. The local professional question is whether disclosure is necessary to prevent serious harm, to whom it must go, and what minimum information will reduce the risk. Assess imminence, seriousness, identifiability of the target, available alternatives and the reliability of the information; involve senior, psychiatric, safeguarding, legal or defence advice where practicable. In an immediate emergency, advice-seeking must not delay urgent protective action ^[7].

The counter-argument is important too: if patients know doctors will break confidentiality, they may not seek help in the first place, which paradoxically increases danger.

The older supporting notes are useful prompts, but their blanket statements (for example, that every "serious crime" or under-13 pregnancy must simply be reported to police) should not be used as a current legal algorithm.

Hong Kong guidance describes client, dual, contract and provider referral. The clinician should work with the patient, seek informed consent whenever possible, avoid naming the index patient during provider referral, document the process and obtain specialist/authority advice in difficult cases ^[12].

HIV is not statutorily notifiable; the Department of Health instead encourages anonymous, confidential reporting. Exceptional disclosure to a partner may be considered only after a case-specific serious-harm analysis and attempts to secure the patient's cooperation—not merely because HIV or an STI is present. The harms of poorly handled disclosure include violence, relationship breakdown, loss of trust and deterrence from testing or care ^[12].

From GC 173 (Ethics in Psychiatry) ^[2]:

"The interests to be served by the duty of confidence... is the private interest of W and not any broader public interest. If I set the private interest of W in the balance against the public interest served by the disclosure of the report... I find the weight of the public interest prevails." ^[2]

This judicial quote demonstrates the balancing test: courts weigh the private interest of the patient against the public interest in disclosure, and sometimes the public interest wins.

Common pitfalls:

• Careless chat
• Careless telephone manner / careless telephone introduction
• Failure to ensure a secure environment for discussing confidential matters
• Failure to appreciate lack of privacy in an open reception area
• Disclosure of sensitive information while talking loudly on a mobile phone
• Mentioning names
• Failure to ensure confidentiality while discussing a patient with a colleague
• Indirectly divulging the nature of the patient's condition
• Wrongly assuming information may be shared with patient's family members
• Openly criticising a colleague ^[1]

Additional pitfalls:

• Agreeing to dispense a prescription to a third party without consent
• Disclosing sensitive information to a third party
• Disclosing sensitive information to other patients in reading out dosage instructions
• Leaving information unattended where it can be seen by members of the public
• Not logging off (computers)
• Leaving a patient with access to information (e.g. other patients' records on screen)
• Careless disposal of confidential material ^[1]

Confidentiality was compromised on 11% of lift journeys. Most comments disguised patient identity, but names were used on 3% of journeys. Doctors made the most comments. — Vigod S et al BMJ 2003;327:1024-5 ^[1]

These are historical findings from a 2003 observational report, included to make the environmental risk memorable; they are not a current Hong Kong prevalence estimate.

Keep your friendships and patients separate ^[1]

If you encounter a friend as a patient, you must maintain the same professional boundaries. Don't discuss their case socially.

The montage slides are a visual threat model, not decoration:

• Lost USB drives + an open clinical-system login: portable media, shared passwords and unattended sessions can expose many patients at once. Use approved encrypted devices, role-based accounts, multifactor authentication where available, automatic screen lock and prompt incident reporting.
• Pharmacy counter + dosage instructions: medication names can reveal diagnoses. Verify who is collecting a prescription, obtain the patient's authority where needed, lower your voice and avoid exposing labels or screens to the queue.
• Telephone silhouette + open reception: confirm the caller and a safe channel before giving results; do not announce a sensitive clinic, test or diagnosis within earshot.
• Filing cabinet + discarded records: secure paper as carefully as electronic data; use controlled printing, locked storage and confidential destruction.
• "Keep friendships and patients separate" warning sign: a social relationship never creates permission to browse or disclose. Avoid curiosity access and manage dual-role boundaries explicitly.

It's impossible to care effectively for patients and preserve absolute confidentiality. Healthcare is a team process — you need to seek advice, need to refer patients, admin staff handle records ^[1]

This is an important framing for exams: the question is never "can we achieve 100% confidentiality?" (the answer is no), but rather "how do we minimise breaches?"

Any disclosures of information should be:

• With the consent of patients whenever possible
• Kept to a minimum
• Kept anonymous where this will suffice
• Record any decisions made to disclose information, together with the reasons for disclosure
• Witness ^[1]

IF IN DOUBT, ASK YOUR SUPERVISOR OR SEEK ADVICE FROM YOUR MEDICAL DEFENCE ORGANISATION!!! ^[1]

The slide's standalone word "Witness" should not be turned into a universal legal requirement. A chaperone, witness or second senior opinion may be helpful in a particular examination or difficult decision, but every disclosure does not require a witness. The durable requirements are lawful purpose, necessity, minimum disclosure, correct recipient, security and a contemporaneous record.

1. Definition of confidentiality — ISO definition
2. Even after death — WMA Declaration of Geneva; do not attribute the deck's entire data-rights list to it
3. Two exceptions to confidentiality — (i) prevent serious harm, (ii) required by law
4. Lecture wording vs current MCHK Code — the slides say "real rather than fanciful" and "physical harm"; the current Code says disclosure necessary to prevent serious harm
5. PDPO access/correction — formal DAR, not an automatic right to every document or deletion
6. PDPO and eHealth System Ordinance — know the 2025 change of name and need-to-know access model
7. Common pitfalls — especially lift conversations, not logging off, sharing with family
8. Minimisation strategies — purpose, consent where possible, minimum information, secure recipient/channel, documentation and proportionate advice; the slide's "witness" is not universal
9. Research confidentiality — informed consent is ongoing, Nuremberg Code, Declaration of Helsinki
10. Implied consent for healthcare team members involved in care

The 2024 MCQ Q95 tested public health ethics principles ^[5]. Know these:

The psychiatric context is where confidentiality dilemmas are most acute:

• A patient with violent ideation toward a named individual — do you warn the target?
• A patient with psychosis who is a danger to the public — do you breach confidentiality to arrange involuntary admission?
• The judicial quote from GC 173 provides the legal balancing test: private interest vs public interest, with the court finding public interest may prevail ^[2]

Partner notification in HIV is a classic confidentiality dilemma:

• Use client, dual, contract or provider referral in a structured service.
• Seek the patient's cooperation and consent whenever possible, and do not identify the index patient during provider referral.
• Remember that HIV reporting is voluntary, anonymous and confidential in Hong Kong, not a statutory notification.
• Obtain expert/authority advice for difficult exceptional-risk cases.
• This mirrors the lecture's teaching about the dilemma of deterring patients from seeking help ^[1].

The MCHK Code is the governing document for medical practice in Hong Kong. Key points:

• Professional misconduct = behaviour "reasonably regarded as disgraceful, unethical or dishonourable by professional colleagues of good repute"
• This is a peer standard — what would a reasonable doctor think?
• Breaching confidentiality without justification → professional misconduct
• Failing to breach when legally required → also potentially professional misconduct