Standard 14: Handling information

Amara Handling information. I suspect most people think this means do not gossip.

Nadia That is about a third of it. The rest is the law and the record. UK GDPR and the Data Protection Act 2018 govern personal data, and health and care data is special category data, which means extra protection.

Amara What matters day to day?

Nadia Data minimisation, accuracy, and confidentiality. Plus the Caldicott Principles, which apply specifically in health and care.

Amara I have heard of Caldicott but never actually read them.

Nadia Two are worth knowing by heart. The eighth says inform people how their data is used, which is the most ignored. And the seventh is the one that surprises people. The duty to share information for individual care is as important as the duty to protect confidentiality.

Amara That is the opposite of what most training implies.

Nadia It is, and it is the correction that inquiry after inquiry has demanded. Failing to share has killed people. Confidentiality is not a reason to keep a district nurse in the dark.

Amara Let us do recording. What is the standard I should write to?

Nadia Assume everything you write will be read by the person it is about, by their family, by an inspector, and possibly by a court. That is not paranoia, it is just what happens.

Amara That would change how I write.

Nadia It should. The core rule is facts and observations, not conclusions and opinions. Aggressive is a conclusion. Shouted, pushed the door, and said get out, is an observation. Refused personal care is a conclusion. Said not now, I am cold, and turned away, is what actually happened.

Amara Why does the difference matter so much?

Nadia Because the conclusion travels. Aggressive goes into a handover, then into an assessment, then into a placement decision, and six months later somebody is refused a service by a person who never met them. The observation lets the next reader draw their own conclusion, and it also happens to be true.

Amara Practical rules?

Nadia Same shift, not the end of the week, because memory fades and late entries look defensive. Sign and date. No gaps. Never overwrite. If you make an error, one line through it, initialled and dated, with the original still readable. Never falsify, never backdate, and never write up care that did not happen.

Amara When can I share without consent?

Nadia Where there is a risk of serious harm to the person or to others. Where a child is at risk. Where there is a legal obligation or a court order. And in defined public interest circumstances such as preventing or detecting serious crime.

Amara How much do I share?

Nadia The minimum necessary, with the people who need it, for the specific purpose. And record what you shared, with whom, and why. That last part protects you.

Amara Breaches. What actually counts?

Nadia Far more than people think. A handover sheet left on a bus. A photograph of a wound sent over a personal messaging app. A rota emailed to the wrong address. A care record left open on a screen. A conversation in a lift.

Amara And if I realise I have caused one?

Nadia Report it immediately. Not tomorrow. Serious personal data breaches have to reach the Information Commissioner's Office within seventy two hours of the organisation becoming aware, so every hour you sit on it is eating somebody else's deadline.

Amara Social media. Where is the line?

Nadia Well before where most people think it is. Never photograph a person, a wound or a record on a personal phone. Never post about a person even with the name removed, because jigsaw identification from small details is one of the commonest routes to a regulatory referral. A shift, a town, a condition and a birthday is a name.