Confidentiality, duty to warn and reportable conditions

Confidentiality is the ethical and legal obligation of a clinician to keep patient information private, except where a lawful or ethical exception applies. The duty to warn, derived from the Tarasoff case, obliges clinicians to protect third parties from foreseeable harm when a patient poses a credible threat. Reportable conditions are diseases or injuries that, by law, must be reported to public health authorities to enable surveillance and control measures. These concepts intersect: a clinician must balance patient privacy with the public’s right to health information and the safety of others.

Confidentiality is not absolute. The Health Insurance Portability and Accountability Act (HIPAA) and equivalent UK legislation allow disclosure without consent when it is necessary for treatment, payment, or health care operations, or when a public health authority requires it. The duty to warn is a narrower exception that applies only when a patient threatens a specific individual or group. Reportable conditions are identified by national or local health departments; failure to report can lead to legal penalties and public health risks.

In practice, clinicians routinely encounter situations where these duties overlap. For example, a patient with a communicable disease may also pose a danger to a partner. The clinician must decide whether to disclose the disease status to the partner (duty to warn) while also reporting the case to public health (reportable condition). Understanding the hierarchy of duties—patient confidentiality first, followed by duty to warn, and finally mandatory reporting—helps clinicians navigate complex ethical terrain.

When a patient expresses intent to harm a specific person or group, clinicians must act to prevent that harm. The duty to warn requires disclosure of the threat to the potential victim and, if necessary, to law enforcement. This exception is limited to credible, imminent threats and does not extend to general public safety concerns.

Public health authorities mandate the reporting of certain diseases. In the United States, the Centers for Disease Control and Prevention (CDC) reports that health departments receive up to 67 % of their total laboratory‑based reports for notifiable diseases as electronic laboratory reports (ELR). Provider‑based case reporting remains largely paper‑based via fax machines. In Indiana, a study of the Indiana Health Information Exchange (HIE) showed that ELRs delivered through the HIE network pre‑p ^[4]

Clinicians must report suspected child, elder, or domestic abuse. The legal threshold is a reasonable suspicion that abuse has occurred, not proof. Reporting is mandatory in most jurisdictions, and failure to report can result in criminal liability. The clinician’s duty to protect the vulnerable victim overrides confidentiality.

A court may issue an order compelling disclosure of patient information. Clinicians must comply with such orders, even if it conflicts with confidentiality. The court order supersedes other ethical duties, but clinicians should seek to minimise the amount of information disclosed to the extent possible.

A 28‑year‑old woman with hepatitis B presents for routine care. She discloses a recent sexual encounter with a partner who is a known HIV‑positive individual. The clinician must report the hepatitis B case to the state health department (notifiable disease) and, if the partner is at risk, may disclose the partner’s status to the partner’s healthcare provider (duty to warn). The clinician must also consider whether the patient’s partner is a minor or vulnerable; if so, abuse reporting may be triggered.

1. Identify the exception: Determine whether the situation involves a danger to others, a notifiable disease, abuse, or a court order.
2. Document: Keep detailed records of the patient’s statements, clinical findings, and the rationale for disclosure.
3. Consult: When in doubt, seek guidance from the institution’s ethics committee or legal counsel.
4. Notify: Disclose only the minimum necessary information to satisfy the exception.
5. Follow up: Ensure that the reporting is completed accurately and that any required follow‑up actions (e.g., contact tracing) are undertaken.

The Tarasoff duty, often referred to as the duty to warn or protect, represents a critical intersection between patient confidentiality and public safety. In clinical practice, the principle of confidentiality is foundational to the doctor-patient relationship, fostering the trust necessary for patients to disclose sensitive information. However, this duty is not absolute. When a patient presents a serious risk of harm to an identifiable third party, the clinician may face an ethical and legal obligation to breach confidentiality to prevent that harm.

While the primary responsibility is to the patient, the clinician must balance this against the potential for violence. This requires a careful assessment of the patient's intent, the specificity of the threat, and the feasibility of protective measures. In cases involving behavioural health, such as suicide attempts or threats of violence, clinicians must navigate the complexities of diagnostic coding and reporting. Research indicates that administrative codes for conditions like suicide attempts may suffer from low sensitivity, as clinicians may under-code these events due to a desire to avoid stigma. This under-reporting can complicate the assessment of risk, as the medical record may not always reflect the true clinical picture. ^[5]

Public health authorities mandate the reporting of certain diseases. In the United States, the Centers for Disease Control and Prevention (CDC) reports that health departments receive up to 67 % of their total laboratory‑based reports for notifiable diseases as electronic laboratory reports (ELR). Provider‑based case reporting remains largely paper‑based via fax machines. In Indiana, a study of the Indiana Health Information Exchange (HIE) showed that ELRs delivered through the HIE network pre‑p

The legal framework governing consent for minors varies significantly across jurisdictions, creating a complex landscape for clinicians providing contraceptive care. In Europe, domestic law dictates whether individuals are competent to consent to healthcare interventions. Some countries restrict autonomous decision-making to those aged 18 and older, while others permit minors to make healthcare decisions from a fixed age below legal majority, such as 12 years in the Netherlands and 15 years in Denmark. A different approach is applied in most Canadian provinces and Switzerland, which utilize a flexible system stating that anyone who is capable can give informed consent, with competence evaluated on a case-by-case basis. In the United States, it generally falls to parents or legal guardians to provide informed permission for medical decisions, while children under 18 are expected to give assent. ^[2]

To balance the legal position of the child with that of the parents, a dual consent procedure involving both the child and the parent is recommended for minors from the age of 12 until they reach the age of independent consent. This approach acknowledges that even when a child’s decision-making competence regarding a specific medical decision is established, a dual consent procedure does justice to the developmental aspects of children and the specific characteristics of the parent-child dyad. Parents are generally provided with the legal authority to raise their children, assigning them rights and responsibilities, though in some circumstances a legal representative or guardian may carry this role. ^[2]

Understanding these variations is critical for medical students, as the threshold for asking a child’s consent differs widely over nations and states. The concept of mental competence and informed consent assessment remains central to these policies. Clinicians must navigate these legal boundaries while maintaining confidentiality, ensuring that the minor’s autonomy is respected where legally permitted, while also engaging parents appropriately where required by local law. The shift from rigid age limits to flexible competence-based assessments reflects a broader recognition of individual maturity in healthcare settings.

It is important to note that while administrative codes and data systems are used for quality improvement and research, they sub-optimally represent a patient's condition, especially for sensitive issues like mental illness or substance use. Therefore, relying solely on administrative data to understand the prevalence of contraceptive use or related health outcomes in minors may be misleading, as many events may not be captured unless reported to a provider. Validation of such coding with individual chart review is desirable to ensure accuracy in understanding patient care patterns. ^[5]

Reporting child abuse, elder abuse, and domestic violence is a legal and ethical duty that overrides ordinary confidentiality. The ethical foundation rests on the principle that vulnerable individuals—children, older adults, and those experiencing intimate partner violence—may lack the capacity or safety to protect themselves. When a clinician suspects abuse, the duty to the patient's welfare and to public protection takes precedence over the duty of confidentiality owed to the individual.

For child abuse, all jurisdictions require clinicians to report suspected physical, sexual, or emotional abuse, as well as neglect. The threshold for reporting is "reasonable suspicion," not proof. Clinicians do not need to confirm the abuse before contacting child protective services. The rationale is that children are developmentally unable to protect themselves, and the parental role exists to offer extra protection by creating the context for the child's competent decision-making. However, when a parent is the source of harm, the child's vulnerability is magnified, and the state must intervene. ^[2]

In the context of adolescent decision-making, there is nuance. Children raised in a warm and understanding atmosphere may present their part in joint decision-making at an early stage. An authoritative parenting style, with direction-giving and limit-setting, is positively related to an adolescent's capacity for autonomous decision-making. In medical settings, children may be capable of autonomous decision-making within the guiding environment set by their parents. However, when abuse is suspected, the clinician's duty to report overrides any deference to parental authority. In cases of disagreement between a competent child and parent, all efforts must be made to reach agreement. In exceptional cases, Dutch law allows carrying through the decision of a competent child above age 12 when it can prevent serious harm—a principle that reflects the broader ethical stance that a child's welfare is paramount. ^[2]

For elder abuse, reporting duties apply to physical, sexual, emotional, and financial abuse, as well as neglect, occurring in domestic or institutional settings. Elder abuse is often hidden because victims may be isolated, cognitively impaired, or dependent on their abuser for care. Clinicians should maintain a high index of suspicion when an older adult presents with unexplained injuries, malnutrition, dehydration, or fear of a caregiver.

For domestic violence, reporting requirements vary by jurisdiction. Some mandate reporting of injuries caused by weapons or in circumstances involving certain crimes, while others require reporting only when the victim is a child, elder, or disabled adult. Clinicians should screen routinely, document findings carefully, and offer safety planning and referral to advocacy services. Where reporting is discretionary, the patient's autonomy and safety must be balanced; mandatory reporting may deter victims from seeking care if they fear police involvement.

Clinical research ethics rests on the fundamental principle that the interests of the individual participant must never be sacrificed for the sake of future patients or scientific progress. The ethical conduct of research involving human subjects is governed by a framework of principles, regulations, and oversight mechanisms designed to protect participants while enabling valuable knowledge to be generated. At the heart of this framework lies the concept of informed consent, the requirement for independent ethical review, and the need to justify the very conduct of a trial in the first place.

A central ethical standard for the conduct of randomized clinical trials (RCTs) is the concept of equipoise, generally defined as uncertainty about the relative effects of the treatments being compared in a trial. Equipoise exists when there is genuine uncertainty within the expert medical community—and ideally within the individual clinician—about which of two or more treatments is superior. This uncertainty is what ethically justifies randomising a patient to one treatment or another. If a physician already knew that one treatment was better, it would be unethical to withhold that treatment from a patient in the name of research. Equipoise therefore bridges the gap between the physician's duty to provide the best care to the individual patient and the researcher's goal of answering a scientific question for the benefit of future patients. ^[1]

However, equipoise is not a monolithic concept. It seems to be defined in several different ways and may be used differently by different individuals. Some researchers conceptualise equipoise at the level of the individual clinician (individual equipoise), while others argue it should exist at the level of the broader clinical community (clinical equipoise). Still others frame it in terms of the balance of evidence from existing trials and systematic reviews. This lack of a single standard concept is not merely a semantic issue; it has practical implications for how trials are designed, reviewed, and approved.

A common theme in criticism of equipoise relates to the challenge of operationalization, which is the process of turning a concept into a protocol or decision-aide that can be used by clinicians, administrators, or researchers to assess the ethical standing of a given RCT. The problem here is that it is not obvious how to establish whether equipoise (by any definition) is present around a given clinical question. For example, if a trial compares a new anticoagulant with an existing one, how much disagreement among experts constitutes sufficient uncertainty? Is a 50/50 split required, or would a 60/40 split suffice? There is no standard system to assess whether equipoise exists in relation to some clinical question. This operational challenge means that research ethics boards (REBs) must often make subjective judgments when deciding whether a trial is ethically justified. ^[1]

The empirical study of how stakeholders understand and apply equipoise has involved interviews with clinical investigators, philosophers, chairs of research ethics boards/institutional review boards, and members of government regulatory bodies. Such research aims to obtain 50 respondents, out of feasibility and convenience: 15 clinical investigators, 15 philosophers, 15 chairs of research ethics boards/institutional review boards, and 5 members of government regulatory bodies. This diversity of perspectives highlights that equipoise is not merely a theoretical construct but a practical tool used by multiple actors in the research enterprise. ^[1]

It is possible that the absence of a single standard concept of equipoise linked to an established protocol for determining whether it exists in relation to some clinical question may not be a problem for clinical research. If all of the available definitions guarantee the necessary uncertainty to justify conducting an RCT, then non-uniformity would be interesting but not problematic. It is possible to imagine a circumstance in which an individual physician is uncertain about which treatment is beneficial, and that there is also a significant split among a group of physicians regarding the same question. However, there is no guarantee that this is ever the case, nor is there a standard system to assess whether it is. This uncertainty about the uncertainty itself is a fundamental limitation of the current framework.

Further research—both descriptive and normative—should be undertaken to both better understand how equipoise is put into practice, and how it should (if at all) be put into practice. Assessing opinions from stakeholders is but one way of cataloguing how the medical community approaches RCT justification, and equipoise specifically. The ongoing debate suggests that equipoise will remain a contested but essential concept in clinical research ethics.

Medical students and junior doctors frequently encounter ethical challenges in clinical research, and several common pitfalls recur. These pitfalls often stem from a misunderstanding of the ethical principles involved, a failure to appreciate the nuances of consent, or an over-reliance on intuition rather than established frameworks.

One significant pitfall relates to the assessment of children's competence to consent to research participation. For many decades, the debate on children's competence to give informed consent in medical settings concentrated on ethical and legal aspects, with little empirical underpinnings. Recently, data from empirical research became available to advance the discussion. It was shown that children's competence to consent to clinical research could be accurately assessed by the modified MacArthur Competence Assessment Tool for Clinical Research. Age limits for children to be deemed competent to decide on research participation have been studied: generally children of 11.2 years and above were decision-making competent, while children of 9.6 years and younger were not. Age was pointed out to be the key determining factor in children's competence. ^[2]

A common pitfall is to assume that competence is an all-or-nothing attribute that switches on at a particular age. In reality, the developmental progress is expected to further improve children's decision-making competence with age, so at 11.2 years it is supposedly not as good as it can get. A child of 11.2 years may have comparable decision-making capacities to adults concerning research participation, but this does not mean their competence is fully mature. Clinicians must therefore assess competence on a case-by-case basis rather than relying solely on age thresholds. ^[2]

Another pitfall concerns the distinction between hot and cold cognition. Decisions on clinical research participation involving information provision, rehearsal of information, time to consider, and reflection with parents, generally result in cold cognition decisions. Treatment decisions are more prone to hot cognition when involving time pressure or weighty risks. In research settings, where there is usually time to deliberate, cold cognition predominates. However, in emergency research or when a child is acutely unwell, the decision-making context may shift towards hot cognition, potentially impairing the child's ability to make a reasoned choice. Failing to recognise this distinction can lead to inappropriate assumptions about a child's decision-making capacity. ^[2]

A further pitfall is the misapplication of legal age thresholds. The age limits for reaching legal majority vary between countries and states from 16 to 21 years. A student may assume that a 16-year-old who is legally able to consent to treatment is also competent to consent to research, but this is not necessarily the case. Research does not show at what age a dual consent procedure will no longer prove effective. The legal framework for research participation may differ from that for treatment, and clinicians must be aware of the specific regulations governing their jurisdiction. ^[2]

A related pitfall is the over-reliance on standardised assessment tools. While the modified MacArthur Competence Assessment Tool for Clinical Research can accurately assess children's competence, more research is needed to demonstrate the validity of a cutoff score on a standardized assessment instrument for competence and the desirability of such a cutoff must be considered. In the treatment setting, more extended research on reliability and validity of the MacCAT-T in children is recommended. Using a cutoff score without understanding its limitations can lead to both false positives and false negatives in competence assessment. ^[2]

Finally, a pitfall specific to certain research areas is the inadequate assessment of suicidality in research participants. Further work is clearly needed in developing a valid coding scheme for suicidality. Researchers studying depression, self-harm, or other mental health conditions must be particularly vigilant in identifying and responding to suicidal ideation in participants. An inadequate coding scheme can lead to missed opportunities for intervention and ethical failures in participant protection. ^[3]

The ethical principles of clinical research are applied daily in hospitals, universities, and research institutions. Understanding where and how these principles operate in practice is essential for medical students who will encounter research as participants, coordinators, or future investigators.

The most visible application is in the work of Research Ethics Boards (REBs) or Institutional Review Boards (IRBs). These committees review research protocols before they can commence, assessing whether the proposed study meets ethical standards. REB chairs are typically senior clinicians or academics with expertise in research ethics. In the empirical study of equipoise, chairs of research ethics boards/institutional review boards were among the key stakeholders interviewed. REBs evaluate whether equipoise exists for a proposed RCT, whether the consent process is adequate, and whether the risks to participants are proportionate to the potential benefits. They also consider whether the study population is appropriate and whether vulnerable groups (such as children) are adequately protected.

In paediatric research, the principles of competence assessment are applied in practice. When a research study involves children, the research team must determine whether each child is competent to consent. Based on empirical findings, children of 11.2 years and above were decision-making competent, while children of 9.6 years and younger were not. In practice, this means that a 12-year-old participating in a trial of a new asthma medication may be asked to provide their own consent, while a 9-year-old would require parental consent with the child's assent. However, as noted, age is not the sole criterion, and individual assessment using validated tools is recommended.

The concept of dual consent is another practical application. In many jurisdictions, both the child and the parents must consent to research participation. Research does not show at what age a dual consent procedure will no longer prove effective. In practice, this means that even a competent adolescent may still require parental consent in some settings, and the research team must navigate this dual consent process carefully. This is particularly relevant in studies involving sensitive topics such as sexual health or mental health, where adolescents may be reluctant to involve their parents.

In clinical trials of new medications, the principles of equipoise guide the design and conduct of the trial. For example, in a trial comparing a new hypnotic with an existing one, the investigators must demonstrate that there is genuine uncertainty about which is superior. The Z-drugs provide a useful illustration. Zopiclone was the first compound developed, binding with high affinity and functional potency the benzodiazepine receptor complex. With an absorption time of about 2 hours and an elimination half-life of 4 to 5 hours, its clinical use is in the 3.75- to 7.5-mg dosage range. Zolpidem is an imidazopyridine with an oral bioavailability of 70% and an elimination half-life of 2.5 hours. It is normally indicated at 10-mg dosages. Zaleplon is a rapidly absorbed pyrazolopyrimidine with an elimination half-life of 1 hour. Zaleplon use at a 5- to 20-mg dosage is currently indicated for use only in patients with initial insomnia. If a researcher proposed a trial comparing these agents, they would need to demonstrate that equipoise exists—that is, that there is genuine uncertainty about which drug is more effective or safer for a particular indication. Z-drug treatment should usually vary from a few days to 2 weeks with a maximum of 4 weeks, including tapering-off where appropriate. This clinical context informs the design of any comparative trial. ^[6]

In regulatory oversight, government regulatory bodies play a role in ensuring that clinical research meets ethical standards. Members of government regulatory bodies were among the stakeholders interviewed in the equipoise study. These bodies may review trial protocols, inspect research sites, and enforce compliance with ethical and legal requirements. They also have a role in approving new medications based on the results of clinical trials, and their decisions are informed by the ethical conduct of those trials.

Finally, in everyday clinical practice, the principles of research ethics inform how clinicians discuss treatment options with patients. The concept of equipoise is relevant whenever a clinician is genuinely uncertain about which of two treatments is better for a particular patient. In such situations, the clinician may discuss this uncertainty with the patient, potentially offering them the opportunity to participate in a clinical trial. This shared decision-making process reflects the ethical principles of autonomy and beneficence that underpin both clinical care and clinical research.