Notwithstanding specific legislation and the expectation of an individual who provides information in confidence, the University and its colleges must bear in mind that in certain circumstances they may owe a duty of care to individuals that cannot be discharged unless the institution takes action on information provided in confidence. It is not possible to provide an exact delineation of the extent of such a duty of care. However, where information concerns potential harm to an individual or to others, the institution must weigh the duty of confidentiality against that potential harm.