The DH (2003) sets out a confidentiality model with responsibility to protect information and the patient, to inform patients about what you would like to do with their information, and to provide them with choice, because patients should have a deciding say in what is disclosed.Security of patient records and consultation with patients on what may be disclosed areinterrelated. Healthcare organisations are charged with reviewing both aspects as part of quality assurance.