Confidentiality is a cornerstone of the doctor-patient relationship — without it, patients won't disclose sensitive information, and healthcare collapses. But confidentiality is not absolute. The central tension of this lecture is: when does the public interest outweigh the individual patient's right to privacy? ^[1]

This lecture systematically covers:

1. Why confidentiality matters (ethical, legal, practical foundations)
2. When it can be legitimately broken (the exceptions)
3. Common pitfalls that breach confidentiality in everyday practice
4. How to minimise breaches
5. Case studies applying these principles

1. Appraise the importance of confidentiality in research and medical practice 2. Identify the situations when confidentiality might be correctly broken 3. Give example of some common pitfalls in preserving confidentiality in everyday practice 4. Explain how to minimise the potential for breaches of confidentiality 5. Discuss case studies – interactive session ^[1]

This is a medico-legal and ethics lecture — the type of content that appears in MCQs, SAQs, and minicases as "which ethical principle" or "what should the doctor do next" questions. It integrates with:

• GC 173 (Ethics in psychiatry, consent, confidentiality in psychiatric settings) ^[2]
• Sexual health / STI disclosure scenarios ^[3]
• End-of-life ethics and advance directives
• Hong Kong-specific legislation: PDPO, eHRSSO, MCHK Code of Professional Conduct

Confidentiality: Ensuring that information is accessible only to those authorized to have access — ISO definition ^[1]

This is not just a rule to memorise. Think about why from first principles:

Utilitarian reasoning: If patients fear their information will be shared, they will withhold information or not seek help at all. This makes diagnosis harder and population health worse. The whole system depends on trust ^[2].

Deontological reasoning: Respect for autonomy and privacy — the patient has a right to control their personal information. There is an implied promise when a patient consults a doctor that their information will be kept confidential ^[2].

Virtue ethics: Being a trustworthy professional is core to what it means to be a good doctor.

Every person has the right to:

• Respect for his/her privacy
• Be respected as a human being
• Self-determination, and moral, cultural and religious values
• Physical and mental integrity and security
• Health protection, disease prevention and health care ^[1]

These aren't just aspirational — they inform legal frameworks worldwide.

Key points:

• All information must be kept confidential, even after death
• Information can only be disclosed if the patient gives explicit consent or if the law specifically provides
• Consent may be presumed where disclosure is to other health care providers involved in that patient's treatment
• All identifiable patient data must be protected
• Patients have the right of access to their medical files and the right to require correction, deletion and clarification of inaccurate, incomplete or irrelevant personal data ^[1]

Consent may be presumed where disclosure is to other health care providers involved in that patient's treatment ^[1]. This is crucial in modern medicine — healthcare is a team process. You need to seek advice, refer patients, and administrative staff handle records ^[1]. So there is an accepted "need-to-know" basis within the treating team. But this is not a blank cheque — you don't share information with every doctor in the hospital, only those directly involved in the patient's care.

1. The International Code of Medical Ethics: "A doctor shall preserve absolute confidentiality except where others are endangered on all he knows about his patient even after the patient has died." ^[1]

2. Professional Misconduct: "If a medical professional has done something which will be reasonably regarded as disgraceful, unethical or dishonourable by his professional colleagues of good repute, then it is open to the Medical Council of Hong Kong to say that he has been guilty of professional misconduct." ^[1]

3. Patient's Privacy, Medical Records and Confidentiality:

• Keep good records; Keep records secure
• Understand Personal Data (Privacy) Ordinance
• Make sure to have informed consent before disclosing information to a third party
• Obey guidelines for handling records
• In exceptional circumstances, you may disclose information to a third party without consent if failure to do so may result in risk of death or serious harm, or when required by law to do so ^[1]

The PDPO is the primary Hong Kong statute governing personal data protection. For doctors, the main implications are:

Legal framework:

• Ordinances: eHRSSO (Cap 625) and PDPO (Cap 486)
• Code of Practice for Health Care Professionals using eHRSS
• Code of Professional Conduct
• Privacy Commissioner has wide power to investigate complaints concerning use of personal data
• Dual scrutiny: Privacy Commissioner AND eHR Commissioner both have power to refer complaints to police for criminal investigation ^[1]

Why does eHRSS matter? Because Hong Kong's electronic health record system shares data across public and private sectors. Misuse can lead to criminal investigation — not just a slap on the wrist. A breach of eHRSSO or PDPO can be both negligence and professional misconduct, and a criminal offence ^[1].

From supporting psychiatry notes ^[4]:

Both categories are protected under PDPO + common law duty of confidentiality ^[4].

The Hippocratic Oath itself contains a qualifier: "Whatsoever things I see or hear concerning the life of men and women... which ought not to be noised abroad, I will keep silence thereon..." — The phrase "which ought not to be noised abroad" implies there ARE things that should be disclosed ^[1].

In exceptional circumstances, medical information may be disclosed to a third party without the patient's consent: (i) Where disclosure is necessary to prevent serious harm to the patient or other person

• Example: Infectious diseases (ii) When disclosure is required by law ^[1]

Statutory measures can: 1. Impose a duty at law to disclose certain confidential information 2. Confirm the strict nature of the duty of confidentiality 3. Empower modifications to the duty of confidentiality in given circumstances ^[1]

Examples:

• Abortion regulation
• Notifiable disease
• Venereal disease
• Tackling crime — criminal investigation ^[1]

Key principles when considering disclosure in the public interest:

• Maintaining confidentiality is the key (default position)
• There is a list of exceptions to the obligation of confidence
• Disclosure should be limited to those regarded as vitally in need of the information
• The risk must be real rather than fanciful
• This real threat needs to be rather of physical harm, as opposed to some other form of harm ^[1]

Can the doctor who decides NOT to inform a third party of the risk be found liable as a matter of law or professional discipline?

Dilemmas:

• Legal duty — action of negligence?
• Danger of death or serious injury is foreseeable?
• Deter the patient from seeking help
• The loss of some patients' privilege (driving licence, insurance) ^[1]

This is the Tarasoff-type dilemma (though the lecture doesn't name it explicitly). The question is: if a patient tells you they intend to harm someone, and you don't warn the intended victim, could you be liable? The answer in Hong Kong is nuanced — there is no explicit Tarasoff duty, but the MCHK Code allows disclosure to prevent serious harm.

The counter-argument is important too: if patients know doctors will break confidentiality, they may not seek help in the first place, which paradoxically increases danger.

From psychiatry senior notes ^[4]:

Information can only be disclosed without patient's consent if: (1) A search warrant has been issued, OR (2) Disclosure is in the public interest (e.g. cases involving commission of a serious crime, where there is a genuine risk to the public) ^[2][4]

From senior medicine notes on partner counselling ^[3]:

• Contract referral is used for resistant clients who continue to put others at risk
• Involuntary partner counselling and referral is a confrontation option of last resort
• Implications of involuntary disclosure:
  • Breakdown of communication with the client
  • Evaporation of trust of other clients
  • Deterrence of clients from seeking medical care

This illustrates the tension perfectly — you want to protect the partner, but forcible disclosure could destroy the therapeutic relationship and deter future patients from seeking care.

From GC 173 (Ethics in Psychiatry) ^[2]:

"The interests to be served by the duty of confidence... is the private interest of W and not any broader public interest. If I set the private interest of W in the balance against the public interest served by the disclosure of the report... I find the weight of the public interest prevails." ^[2]

This judicial quote demonstrates the balancing test: courts weigh the private interest of the patient against the public interest in disclosure, and sometimes the public interest wins.

Common pitfalls:

• Careless chat
• Careless telephone manner / careless telephone introduction
• Failure to ensure a secure environment for discussing confidential matters
• Failure to appreciate lack of privacy in an open reception area
• Disclosure of sensitive information while talking loudly on a mobile phone
• Mentioning names
• Failure to ensure confidentiality while discussing a patient with a colleague
• Indirectly divulging the nature of the patient's condition
• Wrongly assuming information may be shared with patient's family members
• Openly criticising a colleague ^[1]

Additional pitfalls:

• Agreeing to dispense a prescription to a third party without consent
• Disclosing sensitive information to a third party
• Disclosing sensitive information to other patients in reading out dosage instructions
• Leaving information unattended where it can be seen by members of the public
• Not logging off (computers)
• Leaving a patient with access to information (e.g. other patients' records on screen)
• Careless disposal of confidential material ^[1]

Confidentiality was compromised on 11% of lift journeys. Most comments disguised patient identity, but names were used on 3% of journeys. Doctors made the most comments. — Vigod S et al BMJ 2003;327:1024-5 ^[1]

Keep your friendships and patients separate ^[1]

If you encounter a friend as a patient, you must maintain the same professional boundaries. Don't discuss their case socially.

It's impossible to care effectively for patients and preserve absolute confidentiality. Healthcare is a team process — you need to seek advice, need to refer patients, admin staff handle records ^[1]

This is an important framing for exams: the question is never "can we achieve 100% confidentiality?" (the answer is no), but rather "how do we minimise breaches?"

Any disclosures of information should be:

• With the consent of patients whenever possible
• Kept to a minimum
• Kept anonymous where this will suffice
• Record any decisions made to disclose information, together with the reasons for disclosure
• Witness ^[1]

IF IN DOUBT, ASK YOUR SUPERVISOR OR SEEK ADVICE FROM YOUR MEDICAL DEFENCE ORGANISATION!!! ^[1]

1. Definition of confidentiality — ISO definition
2. Even after death — Declaration of Geneva
3. Two exceptions to confidentiality — (i) prevent serious harm, (ii) required by law
4. Real vs fanciful risk — the threshold for public interest disclosure
5. Physical harm threshold — not just any form of harm
6. PDPO and eHRSSO — know the Hong Kong legislation
7. Common pitfalls — especially lift conversations, not logging off, sharing with family
8. Minimisation strategies — consent, minimum, anonymous, document, witness, seek advice
9. Research confidentiality — informed consent is ongoing, Nuremberg Code, Declaration of Helsinki
10. Implied consent for healthcare team members involved in care

The 2024 MCQ Q95 tested public health ethics principles ^[5]. Know these:

Stem: "The Zika virus is linked to severe birth defects in babies born to infected mothers. Health authorities issued travel restrictions for pregnant women to avoid areas with active Zika transmission. Which of the following principles was used to justify this public health intervention?"

Options: A. Harm principle / B. Least restrictive principle / C. Reciprocity principle / D. Transparency principle

Correct Answer: A. Harm principle

Rationale: The harm principle justifies restricting individual liberty (travel) to prevent harm to others (the fetus/baby). This is directly analogous to the lecture's teaching that confidentiality/liberty can be overridden when there is a real risk of serious physical harm. Trap: "Least restrictive principle" might seem tempting because travel advice (not mandatory quarantine) was used, but the question asks what justified the intervention — that is the harm principle. The least restrictive principle would justify choosing travel advisory over mandatory quarantine but doesn't justify the intervention itself.

Stem: "With the increasing number of lung cancer patients, the hospital would like to develop artificial intelligence for precision medicine in lung cancer management. Name key issues in the system development to gain the public confidence and trust." (10 marks)

Relevance: This question directly tests data confidentiality, privacy, and trust in the context of AI/electronic health records — topics covered in the eHRSSO and PDPO discussion in this lecture. Expected answers would include: data privacy and confidentiality, informed consent for data use, transparency of algorithms, data security, governance framework, compliance with PDPO/eHRSSO, accountability for breaches, anonymisation of data, patient right to opt out, and oversight by ethics committees.

No other directly relevant past paper questions were identified from the indexed past paper content for this specific lecture topic.

The psychiatric context is where confidentiality dilemmas are most acute:

• A patient with violent ideation toward a named individual — do you warn the target?
• A patient with psychosis who is a danger to the public — do you breach confidentiality to arrange involuntary admission?
• The judicial quote from GC 173 provides the legal balancing test: private interest vs public interest, with the court finding public interest may prevail ^[2]

Partner notification in HIV is a classic confidentiality dilemma:

• Contract referral (patient agrees to notify partners themselves) is preferred
• Involuntary PCRS is a last resort — associated with breakdown of trust and deterrence from seeking care
• This mirrors the lecture's teaching about the dilemma of deterring patients from seeking help ^[1]

The MCHK Code is the governing document for medical practice in Hong Kong. Key points:

• Professional misconduct = behaviour "reasonably regarded as disgraceful, unethical or dishonourable by professional colleagues of good repute"
• This is a peer standard — what would a reasonable doctor think?
• Breaching confidentiality without justification → professional misconduct
• Failing to breach when legally required → also potentially professional misconduct