- 24-hour Emergency Line: 0300 30 32 442
Written by: Demi-Leigh Mason
Reviewed by a Medico-Legal Expert
Last Reviewed:
August 2026
Written by: Demi-Leigh Mason
Reviewed by a Medico-Legal Expert
Last Reviewed:
August 2026
Doctors and healthcare professionals have a core professional, ethical, and legal responsibility regarding the disclosure of patient information. The duty of confidentiality remains even after a patient’s death or when they lack the capacity to consent. Nevertheless, specific circumstances permit the lawful and ethical sharing of this information. For safe and professional practice, it is crucial to understand who is authorised to request information, what details can be shared, and the conditions under which disclosure is permissible.
Even after death, patient information remains confidential. Ethical duties and professional guidelines from the General Medical Council (“GMC”) and Nursing and Midwifery Council (“NMC”) require that disclosure respects privacy, is proportionate and complies with relevant laws, including the Data Protection Act 2018 and Human Rights Act 1998. Ideally, disclosure should be guided by the patient’s consent, but when consent is unavailable, disclosure is only justified when legally or ethically appropriate.
Disclosure may be required by law or justified in the public interest. Legal obligations include coroners’ or medical examiners investigations, court orders, subpoenas, public health reporting requirements and police investigations related to criminal activity or the circumstances of a death. Disclosure may also be justified in the public interest when it prevents serious harm, protects vulnerable individuals or supports the administration of justice.
Requests for patient information from family members or close relatives, often to understand the circumstances of a death or to assist with personal affairs, must be handled with care. Any disclosure in these situations must be strictly limited to information that is necessary and directly relevant to the request.
Special consideration is required for sensitive details, such as a patient’s mental or sexual health history, before releasing them.
Additionally, for deceased patients, requests for information may come from authorised personal representatives or the executors of their estate.
Healthcare professionals may need to disclose information for the continuity of care when patients lack capacity. In these situations, the Mental Capacity Act 2005 requires that disclosure is limited to what is necessary to make treatment decisions in the patient’s best interests.
Requests for patient information may come from a variety of sources, each with different legal or professional authority. Next of kin or close relatives often request information to understand medical decisions or the circumstances of a death. Legal representatives, such as solicitors or executors, may request records in relation to estates or legal proceedings. Police and law enforcement agencies may require disclosure for criminal investigations, but the information provided must be proportionate to the request. Coroners and courts have statutory authority to access full medical records, while healthcare professionals caring for incapacitated patients may access relevant information to ensure ongoing treatment.
Before disclosing any information, it is crucial to verify the identity and legal authority of the requester.
Disclosure should always be limited, relevant and proportionate to the request. For deceased patients, details of the cause or circumstances of death are usually shared with families, coroners or police investigators. Medical history should be provided only insofar as it is directly relevant to the request. Information about ongoing treatment and care may be shared when necessary for the care of incapacitated patients. Sensitive information, such as mental health history, sexual health or substance use, requires careful professional judgement and disclosure should be made only when clearly justified.
When in doubt, healthcare professionals should seek legal advice, consult hospital guidance or refer to GMC or NMC guidance on confidentiality. Over-disclosure is as problematic as non-disclosure and may have legal consequences.
Disclosure should follow a considered process. It is important to confirm the legal authority or legitimate interests of the requester and to assess whether the information is necessary and relevant to the purpose of the disclosure. All disclosures must be documented thoroughly, recording who requested the information, the reason for the disclosure, the information provided and any consultations or approvals obtained. Records of disclosure should be stored securely and care must be taken to transmit information safely to prevent breaches of confidentiality. In complex or sensitive matters, professional advice from legal or information governance teams should be sought before disclosure occurs.
Disclosures regarding deceased patients require careful handling. Confidentiality continues after death, and information should only be shared when necessary for death investigations, legal proceedings or for the benefit of family members in understanding the patient’s circumstances.
When a patient lacks capacity, disclosure should follow the best interests principle outlined in the Mental Capacity Act 2005. Consulting family members or legal representatives may be appropriate, but only information essential for ongoing care should be shared. Police or criminal investigations require disclosure when legally mandated, but written authority or court orders are recommended before records are released. Sensitive cases, such as those involving abuse, mental health issues or sexual health, demand careful judgement and consultation before disclosure.
Difficult situations frequently arise in practice. Families may request the full medical history of a deceased patient, but only relevant information should be shared, avoiding unnecessary sensitive details. Police requests without formal authority should not be fulfilled without written requests or legal guidance. Patients with fluctuating capacity require repeated assessment of necessity and relevance each time information is disclosed, with careful documentation of all discussions. Conflicts between family members do not override the patient’s known wishes; the next of kin does not automatically receive unrestricted access.
Disclosing patient information after death or when patients cannot consent is a sensitive and legally governed process. The key principles are to limit disclosure to what is necessary, verify the authority and purpose of the requester and document all disclosures thoroughly. Privacy and confidentiality should be respected even after death and guidance should be sought for complex or sensitive matters. Following these principles ensures ethical, professional and legally compliant practice, protecting both patients and healthcare professionals.
If you’re not yet covered or are unsure about the level of protection you have, consider joining our medical defence membership that offers expert advice and support in medico-legal matters. Good Samaritan cover is just one of the many benefits of having robust medical defence protection.
For more information, or to get immediate access to expert advice, contact us today at:
0300 30 32 442
[email protected]
