Patientfortrolighed

Patientfortrolighed refers to the obligation of healthcare professionals to protect information disclosed by a patient in the course of care. It rests on the fundamental principle of trust in the patient–provider relationship and is essential for effective treatment and patient autonomy.

In Denmark, patientfortrolighed is governed by national health legislation and data protection rules, including the Health Act and GDPR. The duty extends to medical records, communications, and any information obtained in professional activity, and applies to all staff involved in care, as well as administrators who access records for legitimate purposes.

Disclosure is generally allowed only with patient consent or when necessary to provide care with other professionals. Other permissible disclosures include public health requirements, mandatory reporting by law, use in quality improvement with de-identification, and research under approved ethics and data protection safeguards. When a patient lacks decision-making capacity, disclosures may be made to guardians or health professionals in the patient’s best interests, within legal limits.

Patients have rights to access their records, request corrections, and be informed about how their data is used. Care providers must implement technical and organizational measures to protect data, minimize data sharing, and use secure channels. Data protection rules require lawful processing, data minimization, and retention limits.

Breaches of patientfortrolighed can trigger professional sanctions, civil liability, and regulatory complaints to bodies such as the Danish Patient Safety Authority or the Data Protection Agency, depending on the nature of the breach. The overarching aim is to balance patient confidentiality with legitimate needs for care, public health, and accountability.