Confidentiality & Its Exceptions
A Step 2 CK high-yield lesson on medical confidentiality and its legally and ethically mandated exceptions — reportable diseases, Tarasoff duty to warn, abuse reporting, HIV partner notification, and adolescent confidentiality — framed around next-best-step decisions.
The Core Principle
Confidentiality is the physician's duty to protect information a patient shares in the clinical encounter. It flows from respect for autonomy and the trust (fidelity) that lets patients disclose honestly; it is also codified legally (HIPAA). But confidentiality is not absolute. Boards frame every exception around one idea: you may — and sometimes must — breach confidentiality when doing so is required by law or is necessary to prevent serious, foreseeable harm to the patient or an identifiable third party.
When a stem invites you to "break confidentiality," the answer hinges on whether a specific mandatory-reporting law or a credible threat of harm applies; otherwise, protect the information. Key testing points: patient consent is not required to act on a legitimate exception, and disclosure is limited to the minimum necessary. Curiosity or concern from family, employers, or insurers is never an exception.
- General rule: maintain confidentiality unless a law requires disclosure OR there is a serious, identifiable threat of harm.
- Reportable communicable diseases (TB, syphilis, gonorrhea/chlamydia, HIV, measles, hepatitis, etc.) → report to the public health department; consent not needed.
- Duty to warn/protect (Tarasoff): credible threat to a reasonably identifiable victim → warn the victim and/or notify police; consider hospitalization.
- Suspected child abuse or elder/dependent-adult abuse → mandatory report to CPS/APS on reasonable suspicion (proof not required).
- Gunshot and stab wounds → report to law enforcement.
- Danger to self (acutely suicidal) → may breach to protect the patient (hospitalize, involve others).
- Impaired drivers (seizures, dementia) → reporting to the DMV is state-dependent.
- Court order compels disclosure; a subpoena alone may be contested.
- Employers, family, insurers, or a spouse asking → require patient consent.
Break vs. Maintain — Quick Reference
| Scenario | Break? | Correct action |
|---|---|---|
| Active TB / reportable STI | Yes (law) | Notify public health dept |
| Credible threat to a named person | Yes | Warn victim + police (Tarasoff) |
| Suspected child/elder abuse | Yes | Report to CPS/APS on suspicion |
| Gunshot / stab wound | Yes | Notify law enforcement |
| Acutely suicidal patient | Yes | Protect patient; hospitalize |
| HIV+ patient won't tell partner | Yes, last resort | Counsel first, then notify partner/health dept |
| Employer / insurer asks diagnosis | No | Requires patient consent |
| Spouse / family asks about visit | No | Requires patient consent |
| Subpoena (no court order) | Not yet | May contest; comply with a court order |
Vignette: A 34-year-old man is newly diagnosed with HIV. He is married and states he does not want his wife to know because he fears the marriage will end. He is otherwise well and asymptomatic.
Next best step: Counsel him and strongly encourage disclosure to his wife, and offer to help facilitate the conversation. Explain she is at ongoing risk and that partner notification is available through the health department.
If he continues to refuse: because the wife is an identifiable third party at foreseeable risk, the physician — or the public health department via partner notification/contact tracing — may inform her. HIV is also a reportable diagnosis regardless of his wishes.
Wrong answers: telling the wife immediately without first counseling the patient; doing nothing and respecting confidentiality absolutely; testing the wife without her knowledge.
Vignette: During an outpatient session, a psychiatric patient tells you he is going to kill his ex-girlfriend, names her, and describes a specific plan.
The ethical problem: a credible, serious threat to a reasonably identifiable victim → duty to warn/protect (Tarasoff).
Next best step: take steps to protect the victim — this includes warning her and/or notifying police, and considering involuntary hospitalization of the patient if he meets criteria for danger to others.
Key contrast: a vague, non-specific threat with no identifiable victim does not trigger a duty to warn — but it still warrants a psychiatric risk assessment.
Wrong answers: maintaining strict confidentiality; only documenting the threat; waiting for the patient to act before intervening.
- Emancipated minors (married, active-duty military, financially self-supporting/living independently, court-declared; in many states a parent) consent to all their own care as an adult.
- Mature minor doctrine (state-dependent) lets some adolescents consent to specific treatment.
- Most states let minors obtain confidential care for STIs/HIV, contraception, pregnancy care, and drug/alcohol treatment (mental-health rules vary) — without parental consent or notification.
- Break adolescent confidentiality for serious harm: suicidality/homicidality or suspected abuse.
- Abortion laws are state-specific (many require parental consent/notification); routine/general care still needs parental consent outside the carve-outs above — don't over-generalize confidentiality.
- Exam move: reassure the teen of confidentiality, but state its limits up front (harm to self/others, abuse).
Vignette: A 16-year-old girl asks to be tested and treated for a possible STI and requests that you not tell her parents. She is otherwise healthy and denies abuse or coercion.
Next best step: Provide confidential STI testing and treatment. In nearly all states, minors may consent to STI care, so honor her request for confidentiality.
Contrast — when you must breach: if she instead disclosed a plan to harm herself, or you suspected abuse or statutory assault (e.g., a much older adult partner), you must act — involve parents/authorities and report per state mandatory-reporting laws (CPS and/or law enforcement).
Wrong answers: refusing care without parental consent; calling her parents against her wishes when only routine STI care is at issue.
Practice Medical Ethics now
Board-style questions, spaced-repetition flashcards, and a Socratic AI tutor — free to start.