4.4 Redact sensitive information based on what is being shared
Current Chapter
Current chapter – 4.4 Redact sensitive information based on what is being shared
Clinical professionals must review the patient's record for any sensitive information that might need to be redacted from the proxy's view to protect the patient's right to confidentiality and keep them safe.
Practically, clinical professionals only need to redact information that is being shared. For example, if a proxy is being given access to order a patient's repeat prescriptions, they do not need to redact wider entries like consultations in the patient's medical record before granting access.
Clinical systems must provide decision support to help clinical professionals identify sensitive information at the point of sharing, for example child protection case conference minutes and consultations with coded safeguarding information. This is particularly relevant if access to historic records is being provided.
Last edited: 6 May 2026 4:24 pm
Chapters
- DAPB3051 Identity Verification and Authentication Standard for Health and Care, Authorisation Use Case: Proxy
- Glossary
- Use of the terms "must" and "should" in this guidance
- 1.0 Overview
- 1.1 Purpose of this standard
- 1.2 Who this standard applies to
- 1.3 What this standard does not cover
- 1.4 Compatibility with other standards and guidelines
- 2.1 Types of proxy access: formal and informal proxy access
- 2.2 Types of proxy access: Records access by a clinical professional
- 3.0 Roles and responsibilities
- 4.0 Grant proxy access
- 4.1 Assess if access is appropriate
- 4.1.1 Establish whether access is necessary
- 4.1.2 Establish whether access is relevant
- 4.1.3 Establish whether access is safe
- 4.2 Establish a basis for access
- 4.3 Check evidence relevant to the basis for access
- 4.3.1 Verify the proxy and patient’s identity
- 4.3.2 Understand if the patient has the ability to consent
- 4.3.3 Obtain the patient’s informed consent to proxy access, if appropriate
- 4.3.4 Verify evidence of a basis for access if the patient cannot consent
- 4.4 Redact sensitive information based on what is being shared
- 4.5 Audit decisions about proxy access
- 4.6 Communicate the outcome of a decision to grant or deny proxy access
- 5.0 The scope of proxy access
- 6.0 System audit of proxy access
- 7.0 Managing proxy access
- 7.1 Ongoing reviews of proxy access
- 7.2 Age and development based reviews of access
- 7.3 Time-bound reviews of access
- 7.4 Wider events that materially affect proxy access
- Appendix A: Ways to evidence a basis for access if the patient is not capable of providing informed consent
- Appendix B: Driver diagram articulating the strategic aims of this information standard