Overview

Confidentiality begins at intake and continues through the lifecycle of a complaint. This lesson covers designing documentation to protect privacy, obtaining informed consent for sharing information, and restricting access to those who need it within legal and organizational limits.

• Limit access to records to authorized personnel based on role.
• Use de-identified data for analytics and reporting where feasible.
• Store information securely with encryption in transit and at rest.
• Provide language access and disability accommodations while protecting data.
• Document consent and disclosures clearly and transparently.

When disclosures involve third parties or external partners, confirm permissible sharing and maintain approvals. Never disclose more than necessary to fulfill the purpose of the investigation.

Privacy-by-design principles should guide intake data collection, focusing on minimal data while ensuring safety and due process.

Regular privacy risk assessments and staff training reinforce confidentiality. Keep policies accessible and up to date, and provide channels for reporting concerns about privacy.