The Caldicott Report

The Caldicott Report (December 1997) was a review commissioned by the Chief Medical Officer to make recommendations to improve the way the National Health Service handles and protects patient information.

The Caldicott Committee was set up to review the confidentiality and flows of data throughout the NHS for purposes other than direct care, medical research or where there is a statutory requirement for information. Its recommendations are now being put into practice throughout the NHS and in the Health Protection Agency.

The Caldicott report identified 6 principles, similar in many respects to the principles outlined in the Data Protection Act.

1. Justify the purpose(s) for using patient data
2. Don't use patient-identifiable information unless it is absolutely necessary
3. Use the minimum necessary patient-identifiable information
4. Access to patient-identifiable information should be on a strict need to know basis
5. Everyone should be aware of their responsibilities to maintain confidentiality
6. Understand and comply with the law, in particular the Data Protection Act

Last reviewed: 9 September 2008