On 20 May 2025, NHS England published national guidance on the disclosure of patient information to the police. This guidance is intended for all health and care professionals involved in information governance, clinical decision-making, and frontline care.
The document outlines when information must be shared with the police (e.g. under specific legal obligations), when it may be shared in the public interest, and how to respond to urgent or out-of-hours requests, especially in high-risk cases.
“The public interest is generally best served when health and care organisations co-operate with the police as it is necessary to investigate violent crimes, assess the risk of further attacks, and take steps to protect individuals and the public.”
NHS England, 20 May 2025
Key principles from the guidance include:
-
Case-by-case decision-making: There is no one-size-fits-all approach. Every request for information must be assessed individually.
-
Legal basis and documentation: All disclosures must have a clear legal justification, recorded appropriately and in line with professional standards.
-
Minimum necessary disclosure: Only the information essential to support the police inquiry should be shared. This might mean confirming an attendance at a clinic rather than releasing clinical details.
-
Urgent situations: In emergencies or out-of-hours situations, decisions should be escalated to a Caldicott Guardian or senior clinician. Local policies must support staff in these scenarios.
-
When consent is needed or not appropriate: While consent is important, there are situations where sharing may proceed without it. Particularly when others are at serious risk of harm.
Upcoming training opportunity:
Information Sharing & The Police: Caldicott Principles & Information sharing between the police and health services for prevention, early intervention and care purposes
The conference will offer practical advice and case studies on responding to police information requests, alongside expert interpretation of the National Guidance. Attendees will also receive guidance on their responsibilities under data protection law and making decisions in the public interest. The day will include interactive discussions exploring best practices and how to handle complex or challenging scenarios.
Date: Wednesday 26 June 2025 (Virtual)
Hosted by: Healthcare Conferences UK
Details & Registration: Click Here
