3.3 Confidentiality and Access to Information
You should have an effective policy on confidentiality. This should describe the circumstances in which information may be passed on. It should also explain how breaches of this confidentiality will be dealt with. The policy should include the required forms of authority which will allow your service to act on behalf of service users. All service users must be kept informed of any information that has been passed to others.
You must also have a clear policy on access