This website is being retired.
Content is no longer being updated from 31 March 2026. Find out more.
This website is being retired.
Content is no longer being updated from 31 March 2026. Find out more.
Transformation Directorate
This guidance has been reviewed by the Health and Care Information Governance Working Group, including the Information Commissioner's Office (ICO) and National Data Guardian (NDG).
Have we done a good job? Let us know.
This guidance helps patients and service users understand how their information may be used for reflective practice and why this practice is essential for ensuring safe, high-quality care.
It also supports health and care professionals (HCPs) and information governance (IG) professionals to understand how to manage access to people’s information for reflective practice in a lawful and appropriate way.
Reflective practice involves HCPs taking time to think about an episode of care they provided and the effect this had on the patient or service user. This helps them to learn from their experiences so that they can continue to do a good job, or do a better one if needed to provide better care.
Those caring for you can usually reflect on the care they provided without looking at your confidential information. But there may be times when they do need to look at it, as in the following example:
Ambulance clinicians were called to help a patient with dizziness and a headache. Because the patient was in good health the ambulance team thought they may have vertigo, which is not urgent and doesn’t normally need emergency care. The team tested for stroke and other conditions, but found nothing unusual. But the patient had high blood pressure and trouble balancing so the team took them to the local general hospital emergency department.
Afterwards, the team started to wonder if they had done the right thing. Had they missed something? Did the patient have something more serious than vertigo?
They decided to look into this as part of their reflective practice. After checking, they discovered that the patient never had vertigo. It turned out that they had suffered a posterior stroke, which doesn’t always show up in regular stroke tests. The patient needed to be transferred to a specialist acute stroke unit.
By reflecting on the case, the crew learned that some strokes don’t show up in the usual way. Now, they are better at recognising the signs of a posterior stroke which might not be identified in a normal stroke test. This means they can respond in the right way by taking the patient urgently to a specialist acute stroke unit for urgent treatment to give the patient the best chance of recovery.
While a HCP is still caring for you, they are allowed to look at the relevant parts of your record to reflect on the care they are providing. This helps them check that they are providing you with safe, high-quality care.
After you have left their care, if the HCP needs to see your information to reflect on the care they provided to you, they:
All health and care services need to explain in their privacy notices what reflective practice is and how your information may be used for it. If you do not want your information to be used for reflective practice, you have the right to ask those caring for you not to use it. They will note this on your health and care record so it is not used for reflective practice.
If you are a regulated HCP, you are required to engage in reflective practice as part of your professional regulation. This guidance supports you and your supervisors to understand whether access to confidential patient information is justified in each case.
This guidance does not:
For detailed information on the reflective practice process, refer to guidance issued by your regulator using the links at the bottom of this page.
While you are still caring for an individual, you may access relevant information about them for your reflective practice. This may be done on the basis of implied consent for individual care.
There may be times when, to maintain safe, high-quality care, you need to reflect on the treatment you gave someone who has since left your care.
Whilst reflection can often be done without accessing confidential patient information, it may at times be essential. At these times, you may access confidential patient information to engage in reflective practice if you:
The timeframe for accessing confidential patient information should allow you to work with your existing work commitments, such as clinical supervision cycles or planned team reflections. Note that while access to confidential patient information for the purposes of reflection should be time limited, the reflective process itself does not need to be time limited.
If you need to document information for the purposes of your own reflective practice you should ensure that any direct patient identifiers are removed. If you are using your organisation’s systems to document, you should follow all relevant organisational policies. If you use a personal electronic device to document your reflective process that includes information about a patient, you will need to follow the NHS England Bring your own device (BYOD) guidance.
Only regulated HCPs who have a legitimate care relationship, past or present, with the person whose care they wish to reflect upon, should be allowed to access confidential patient information for reflective practice once a care episode has ended.
Some teams may include non-regulated staff - see Non-regulated health care workers in the IG professionals section of this guidance. These staff can participate in team reflective practice which requires access to confidential patient information, if:
At times you may need support from your clinical supervisor to effectively reflect on your practice. Where your supervisor has access to confidential patient information through your reflective practice, they should be a regulated professional and will usually be part of the care team involved in the episode you are reflecting on. If your supervisor is based in a different clinical team, you must follow your organisation’s formal process when sharing information with them for reflective practice. If you are not sure about this process, you should check with your IG team.
You should respect any objection an individual has made to the use of their information for reflective practice. Also consider other reasons that could make the individual likely to object to you having access to confidential patient information to reflect on the care you provided. These could include the sensitivity of the records or the presence of unrelated information in the relevant section.
Reflective practice is about individual and team learning by those directly involved in an episode of care. As such, this guidance does not apply to broader organisational or system-wide learning.
Regulated HCPs have a regulatory responsibility to undertake reflective practice to improve the safety and quality of their care. Reflective practice can usually be undertaken without access to confidential patient information.
But there may be times when HCPs need access to confidential patient information about an episode of care they provided to fully understand how their assessments, decisions and care affected an individual. They may access confidential patient information if they can justify that it is necessary for their reflection to support safe, high-quality care. Any access must follow local processes and comply with the safeguards outlined in this guidance.
While caring for a person, HCPs may access relevant parts of their confidential patient information for the purpose of reflective practice. This may be done on the basis of implied consent for individual care. See section on Common law duty of confidentiality.
Sometimes, an HCP may no longer have access to the information needed to reflect on the care they provided because the patient or service user has moved on from their care. At these times the HCP may require time-limited access to information related to that episode of care to assess its impact.
Regulated HCPs can access this information on the basis of implied consent for individual care, when:
See the section Governing access and mitigating risk for more details.
If the HCP has moved to a different organisation, they will need to demonstrate the continuing relevance of their need to reflect on the episode of care, to their role in the new organisation. Their reflection on the episode of care must remain necessary for the provision of safe and high-quality direct care. If the HCP has moved to a role or organisation that does not provide care, they should no longer be able to access confidential patient information for reflection.
Individual objections about use of their information for reflective practice should be recorded on the person’s health and care record.
Health and care records should be checked for objections before sharing for reflective practice and any individual objections to information sharing for their own care should be respected.
Before access to confidential patient information for reflective practice is allowed, any professional needs to be:
Access to confidential patient information for reflective practice should be restricted to regulated HCPs who are required by their professional standards bodies to engage in reflective practice.
Additionally, they must have a legitimate care relationship, past or present, with the person to whom they provided the episode of care they wish to reflect upon.
In a team-based approach to reflective practice, some team members may include non-registered nursing staff not regulated by the Nursing and Midwifery Council, or emergency medical technicians not regulated by the Health and Care Professions Council. These non-regulated staff can still participate in team reflective practice, provided:
At times HCPs may need support from their supervisor or mentor to effectively reflect on their practice. That supervisor should also be a regulated professional. When the clinical supervisor is based in a different team in the organisation, confidential patient information to support reflective practice should only be shared within the context of this supervisory arrangement. This process should be formalised in line with the clinical supervision model relevant to the particular professional’s reflective practice.
For any agreed episode of reflective practice, access should be limited to the information necessary for each specific role. HCPs must justify why access to confidential patient information is necessary for their reflective practice and explain how it will enable understanding that is integral to their provision of safe, high-quality care.
Clear local processes must be in place to govern access to confidential patient information for reflective practice, to ensure that access is appropriate, limited only to the necessary information and mitigates associated risks.
This will include ensuring that:
The appropriate timeframe for access to confidential patient information will be dictated by the reflective practice processes relevant to the particular HCP and their clinical supervision cycles. In most cases, a time limit of up to six months on access to confidential patient information will be sufficient to allow for reflective practice. This also reflects the need to influence the safety of future care provision.
It is important to note that the reflective process itself does not need to be completed within this time frame. See relevant regulators’ guidance on reflective practice.
Organisations that support reflective practice should clearly state in plain English in their privacy notices that HCPs may access confidential patient information related to the episode of care they provided. The privacy notice must state that:
Organisations may wish to include the following sample text in their privacy notices:
Health and care professionals may look at confidential patient information about the care they gave you to understand and learn from their work. This is called ‘reflective practice’ and is done to help staff to provide better and safer care. Only regulated health or social care professionals who cared for you are allowed to access your information for this reason.
To satisfy the common law duty of confidentiality, HCPs may rely on implied consent for individual care as the legal basis for accessing confidential patient information for reflective practice. This is justified where reflective practice is needed to improve understanding which in turn supports the delivery of safe, high-quality individual care. With many aspects of individual care, it will be clear to patients and service users that their information will be used to support their care. However, when certain aspects of individual care – such as reflective practice – are less well understood, additional transparency measures should be considered to inform patients and service users.
Reflective practice is about individual and team learning by those directly involved in an episode of care. As such, this guidance does not apply to broader organisational or system-wide learning.
The most likely lawful bases under UK GDPR to apply for use of personal data for reflective practice are:
British Medical Association - Reflecting on your practice
General Medical Council - Reflective practice learning materials
Royal College of Nursing - Revalidation requirements: Reflection and reflective discussion
The Health and Care Professions Council (HCPC) - Reflective practice