Confidentiality in Sport

Every doctor owes a duty to keep patient information confidential, and the General Medical Council (GMC) sets out the principles that govern it. Information is confidential if it could identify the patient, and this covers not just diagnoses but the fact of an assessment, an injury or a scan result. The starting point is that identifiable information is shared only with the patient's consent, unless there is another lawful basis, and UK law reinforces this through the common law duty of confidence and data protection law. Confidentiality is not absolute. It can be set aside where the patient consents, where disclosure is required by law, or where it is justified in the public interest, for example to protect someone from a risk of serious harm. In each case the doctor should share only what is necessary and be able to justify the decision. Within the team providing the athlete's care, relevant information may be shared on the basis of implied consent, where the athlete would reasonably expect it and has not objected; sharing with coaches, management, agents or insurers is different and usually needs the athlete's explicit consent or another clear legal basis. The GMC frames this around a set of principles for handling information, and the duty continues even after a patient has died. In UK law the relevant framework includes the Data Protection Act 2018 and the UK General Data Protection Regulation alongside the common law duty of confidence.

The sporting setting complicates confidentiality because the people around the athlete have a legitimate interest in information the athlete may not wish to share. A coach needs to know whether a player is available, but not necessarily the intimate detail of why. Good practice therefore separates the athlete's detailed medical information from the operational information a club needs, such as fitness to train or an expected timescale, and shares the latter only with the athlete's agreement. Much of this can be handled by agreeing at the outset, ideally in writing, what will be shared, with whom and in what form, so the athlete gives informed consent to a defined flow of information rather than being asked repeatedly under pressure. The doctor should resist demands for clinical detail from management, media or agents that go beyond what the athlete has agreed to release, and should be especially careful with informal conversations, group chats and social media, where confidential information leaks easily. Where information is shared with the athlete's agreement, it is worth recording what was agreed, so the scope of that consent is clear later. Performance and coaching staff may legitimately need some information to do their jobs, but the default is the minimum necessary, released with the athlete's knowledge rather than assumed.

When someone asks the doctor to share an athlete's information, the same framework applies as in any other setting. If the athlete has given valid consent to the specific disclosure, it can go ahead, limited to what was agreed. If there is a legal requirement, such as a court order or a statutory duty, the doctor must comply, disclosing only what the law requires. In the absence of consent, disclosure may still be justified in the public interest where it is needed to protect the athlete or others from a risk of serious harm, but this is a considered judgement rather than a default, and the doctor should be prepared to justify it. If a manager demands the full diagnosis of an injured player, the doctor can confirm only what the athlete has agreed to share, such as availability and timescale, and should withhold the clinical detail. A request being persistent, senior or commercially important does not create a basis for disclosure. Where the athlete's own doctor writes an employment or insurance report about them, the athlete is normally entitled to see it before it is sent, subject to limited exceptions, and it should be confined to relevant, factual, substantiated information; this does not automatically extend to every governing-body or third-party report. A public-interest disclosure might arise, for example, where an athlete poses a clear risk to others and will not act on advice; even then the doctor tells the athlete first where practicable, discloses to the appropriate person, and shares only what is needed.

The commonest pitfall is treating the club as the doctor's client and sharing clinical detail with management as a matter of course. Another is assuming that a general agreement to work with the team covers every future disclosure, when consent should be specific and revisited. Casual breaches are frequent and easily overlooked: discussing an athlete within earshot of others, naming a diagnosis in a team meeting, or posting about an injury online. Doctors also sometimes over-disclose when writing reports, sending the whole record rather than the relevant facts. Finally, disclosing in the public interest without pausing to weigh the decision, or without recording it, leaves the doctor exposed even when the instinct was right. Assuming that information already rumoured in the media is no longer confidential is a further trap, since prior gossip does not entitle the doctor to confirm it.

• •Identifiable information is confidential, including the fact of an injury or assessment.
• •Share it only with consent, a legal requirement, or a public-interest justification.
• •Agree at the outset what will be shared with the club, with whom and in what form.
• •Give the club operational information, such as availability, not clinical detail, without consent.
• •Seniority, persistence or commercial pressure is not a basis for disclosure.
• •Share only what is necessary, keep reports factual and relevant, and record decisions.