The Seven Golden Rules of Sharing Information

“Information sharing in a safeguarding context means the appropriate and secure exchange of personal information, between practitioners and other individuals with a responsibility for children, in order to keep them safe from harm.”

(Information Sharing, Advice for practitioners providing safeguarding services for children, young people, parents and carers)

Setting the Scene

The guidance is very clear in setting out the basic foundation of information sharing, relating to safeguarding children and young people. ‘The first and most important consideration is always whether sharing information is likely to support the safeguarding of a child’.

Naturally, you want to be absolutely certain that you meet your professional obligations in getting this right, but it isn’t always straightforward. Right at the very beginning of the document, the Information Sharing Guidance provides a key tool for practitioners; ‘The Seven Golden Rules’, to help you make sound choices about what you can share.

What is its relevance to me?

You may already be familiar with Seven Golden Rules previously available to practitioners. But take a look at the changes included in the updated guidance document; particularly notice the much greater focus on how these rules specifically relate to safeguarding children and young people, and guide practitioners towards safe, evidence-based practice:

Rule Number One:

All children have a right to be protected from abuse and neglect. Protecting a child from such harm takes priority over protecting their privacy, or the privacy rights of the person(s) failing to protect them. The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) provide a framework to support information sharing where practitioners have reason to believe failure to share information may result in the child being at risk of harm.

Rule Number Two:

When you have a safeguarding concern, wherever it is practicable and safe to do so, engage with the child and/or their carer(s), and explain who you intend to share information with, what information you will be sharing and why. You are not required to inform them, if you have reason to believe that doing so may put the child at increased risk of harm (e.g., because their carer(s) may harm the child, or react violently to anyone seeking to intervene, or because the child might withhold information or withdraw from services). 

Rule Number Three:

You do not need consent to share personal information about a child and/or members of their family if a child is at risk or there is a perceived risk of harm. You need a lawful basis (see below) to share information under data protection law, but when you intend to share information as part of action to safeguard a child at possible risk of harm, consent may not be an appropriate basis for sharing. It is good practice to ensure transparency about your decisions and seek to work cooperatively with a child and their carer(s) wherever possible. This means you should consider any objection the child or their carers may have to proposed information sharing, but you should consider overriding their objections if you believe sharing the information is necessary to protect the child from harm. 

Rule Number 4:

Seek advice promptly whenever you are uncertain or do not fully understand how the legal framework supports information sharing in a particular case. Do not leave a child at risk of harm because you have concerns you might be criticised for sharing information. Instead, find out who in your organisation/agency can provide advice about what information to share and with whom. This may be your manager/supervisor, the designated safeguarding children professional, the data protection/information governance lead (e.g., Data Protection Officer), Caldicott Guardian, or relevant policy or legal team. If you work for a small charity or voluntary organisation, follow the NSPCC's safeguarding guidance. 

Rule Number Five:

When sharing information, ensure you and the person or agency/organisation that receives the information take steps to protect the identities of any individuals (e.g., the child, a carer, a neighbour, or a colleague) who might suffer harm if their details became known to an abuser or one of their associates. 

Rule Number Six:

Only share relevant and accurate information with individuals or agencies/organisations that have a role in safeguarding the child and/or providing their family with support, and only share the information they need to support the provision of their services. Sharing information with a third party rarely requires you to share an entire record or case-file – you must only share information that is necessary, proportionate for the intended purpose, relevant, adequate and accurate. 

Rule Number Seven:

Record the reasons for your information sharing decision, irrespective of whether or not you decide to share information. When another practitioner or organisation requests information from you, and you decide not to share it, be prepared to explain why you chose not to do so. Be willing to reconsider your decision if the requestor shares new information that might cause you to regard information you hold in a new light. When recording any decision, clearly set out the rationale and be prepared to explain your reasons if you are asked.

What more can I learn, and how will that help me to share information safely?

30 Minute Learning Activity:

Scenario
You are working with a group of young people (16-18), looking at safe relationships and consent. At the end of the session, one of the young people approaches you, to disclose that they’re at the beginning of a new relationship, but wary of telling their parents because they’re scared, asking what you think they should do. They ask you not to tell anyone else. Later the same afternoon, the father of this young person comes to your office. He tells you that he’s found a leaflet in his child’s bag about contraception and asks you to explain why it was there.

How would the Seven Golden Rules help you to decide what information could and should be shared, and what should not?
 

Quick leave