Pass MFOM
Back to blog
15 min readDr. Pass MFOM

MFOM Ethics and Confidentiality Revision

Revise MFOM ethics and confidentiality with practical occupational health scenarios covering consent, disclosure, conflicts of interest, capacity.

MFOM Part 2MFOM Part 1Occupational medicinerevision guide

Ethics and confidentiality are central to occupational medicine because the doctor must balance the worker's interests, the employer's legitimate need for advice, public safety and professional duties. For MFOM revision, focus on consent, confidentiality, fitness-for-work reporting, conflicts of interest, capacity, safeguarding and situations where disclosure may be justified without consent.

The key principle is that the occupational physician is a doctor first, even when the employer commissions and pays for the service. You must understand who your worker is, what information the employer needs, what the worker has agreed to share and when a competing duty may justify a different course of action.

Reading this FOM Ethics Guidance for Occupational Health Practice is very important for the MFOM Part 1 and 2 exam.

What ethical principles should you know for MFOM?

A useful starting point is the four familiar principles of medical ethics: autonomy, beneficence, non-maleficence and justice. These provide a framework for considering difficult decisions, although real cases may involve tension between more than one principle.

  • Autonomy: respect the person's right to make informed decisions about their care and the use of their information.
  • Beneficence: act to promote the person's welfare.
  • Non-maleficence: avoid causing harm, including harm arising from inappropriate disclosure or unsafe occupational decisions.
  • Justice: treat people fairly and consider the fair distribution of benefits, risks and resources.

Occupational medicine adds a particular complexity: the doctor may be asked to advise an employer about a worker's health, yet the worker may be concerned about job security, career progression or stigma.

For example, an employee may disclose a mental health condition during a consultation but not want their manager to know the diagnosis. The employer may still need advice about temporary adjustments, attendance or fitness for specific duties. The ethical task is to provide useful, proportionate advice without disclosing unnecessary clinical information.

A good answer to an ethics question should identify the competing interests, establish the relevant professional duty, consider the available options and choose a proportionate response. Simply stating that confidentiality is important is rarely enough.

Who is the "patient" in occupational health?

One of the most important distinctions in occupational medicine is between the worker, the employer and the organisation commissioning the service.

In a management referral, the employer may request an opinion about fitness for work, likely absence duration or reasonable adjustments. The occupational physician assesses the worker and provides advice within the agreed purpose of the referral.

The fact that an employer pays for the consultation does not give the employer unrestricted access to the worker's medical history or consultation notes.

Before the assessment, the worker should understand:

  • Why the referral has been made.
  • The nature and purpose of the occupational health assessment.
  • What information may be included in the report.
  • Who is expected to receive the report.
  • How the information will be used.
  • The limits of confidentiality and circumstances in which disclosure may be justified.
  • Whether any additional reports or clinical information may be requested.

The exact process should reflect the service arrangement, the nature of the assessment and applicable professional guidance.

The occupational physician should also be clear about the limits of their role. They are not simply acting as the employer's representative, nor are they automatically replacing the worker's treating clinician and they are not the worker's advocate.

Their responsibility is to provide an independent, evidence-based occupational opinion while maintaining appropriate professional standards.

What does confidentiality mean in occupational medicine?

Confidentiality means protecting information obtained in the professional relationship and disclosing it only when there is a proper basis to do so.

Medical information can include diagnoses, symptoms, medication, treatment, examination findings, personal circumstances and information obtained from other healthcare professionals. Even apparently minor details may be sensitive when placed in an employment context.

The principle of confidentiality applies whether information is communicated verbally, in a written report, by email or through an occupational health information system.

A common examination scenario involves an employer asking for more detail than is needed to make an employment decision.

For example, a manager asks for the full diagnosis, medication list and consultation notes of an employee who has been referred because of repeated sickness absence. The occupational physician should consider what information is necessary to answer the referral questions and whether the worker has consented to disclosure of the requested information.

In many cases, a functional report can meet the employer's needs without disclosing the complete clinical history.

Appropriate advice might address:

  • Whether the worker is fit for their current duties.
  • Whether temporary or permanent restrictions are advisable.
  • Whether adjustments could support attendance or performance.
  • The likely duration of restrictions, where it can reasonably be estimated.
  • Whether a review is required.
  • Whether further information is needed before a reliable opinion can be given.

The report should be relevant, accurate and proportionate. Avoid disclosing clinical details simply because the employer is interested in them.

The GMC's current guidance on confidentiality and disclosure should be consulted when preparing detailed revision notes and applying these principles in practice.

When can an occupational physician disclose medical information?

Confidentiality is fundamental, but it is not absolute. There may be circumstances in which disclosure is justified or required, including where the person consents, where a legal obligation applies or where disclosure is necessary to address a sufficiently serious risk to others.

The correct approach depends on the facts, the legal framework and current professional guidance. Do not assume that every concern about workplace safety automatically permits unrestricted disclosure.

A structured approach is useful:

  1. Identify the information being considered for disclosure.
  2. Establish why the information is needed and who needs it.
  3. Consider whether the worker has given valid consent.
  4. Assess the seriousness and immediacy of any potential harm.
  5. Consider whether there is a legal obligation or another recognised basis for disclosure.
  6. Consider whether the purpose can be achieved with less information or by a less intrusive route.
  7. Where appropriate, discuss the proposed disclosure with the worker.
  8. Document the reasoning, decision and information disclosed.

Where disclosure without consent is being considered, the doctor should seek appropriate senior, Caldicott Guardian, information governance or medico-legal/indemnity advice when practicable and relevant. Urgent risks may require prompt action.

What if the worker refuses consent?

A worker may refuse consent to a report being sent to their employer. The occupational physician should not treat refusal as permission to disclose the report anyway.

First, clarify what the worker is refusing and explain the purpose of the report, what it would contain and the possible implications of withholding it. The doctor should explore whether a narrower report or a functional summary would address the concern.

If consent remains withheld, explain the limits this places on the assessment or advice. The employer may need to make decisions without the occupational opinion, but this does not mean the doctor can disclose confidential information simply to make the process easier.

If there is a separate and sufficiently serious concern about harm to others, consider whether disclosure without consent is justified under the relevant professional guidance and legal framework. Record the rationale carefully and if you will proceed with disclosure, if safe, tell the worker your intention to do so and again once it has been done.

How should consent be managed in occupational health reports?

Consent is more than asking a worker to sign a form. It involves ensuring that the person understands what they are agreeing to and has a genuine opportunity to ask questions or decline.

In occupational health, distinguish between consent to undergo an assessment and consent to disclose the resulting report. These are related but separate issues.

A worker may agree to attend a consultation but be uncertain about sharing a diagnosis with their manager. The occupational physician should explain the purpose and likely content of the report before proceeding with disclosure.

Consent should be informed, voluntary and sufficiently specific for the proposed use of information. The doctor should also consider whether the person has capacity to make the relevant decision.

The exact administrative process for obtaining consent may vary by service and assessment type, but the ethical objective remains the same: the worker should understand the decision they are making.

For example, a worker referred after a back injury may agree to a report saying they can return with temporary lifting restrictions. They may not need to agree to disclosure of unrelated previous mental health treatment, because that information is not relevant to the referral.

Can a worker withdraw consent?

A person can generally change their mind about a proposed disclosure before it occurs, subject to the circumstances and any separate legal basis for sharing information. If consent is withdrawn, clarify what has already been disclosed and what further action is proposed.

Do not promise that information already lawfully shared can always be retrieved or erased. Explain the practical limits accurately and follow the organisation's appropriate information governance process.

How should you manage conflicts of interest?

Occupational physicians may face competing pressures from workers, managers, employers, trade union reps, insurers and other professionals. An employer may want a definitive answer, while the available evidence supports only a qualified opinion.

A manager may ask the doctor to confirm that an employee is exaggerating symptoms. Alternatively, a worker may expect the doctor to recommend a particular adjustment regardless of the clinical or occupational evidence.

The physician should remain objective and explain the basis and limits of the opinion.

Important principles include:

  • Make recommendations based on the assessment, evidence and job demands.
  • Distinguish clinical findings from information reported by the worker or employer.
  • Acknowledge uncertainty where it exists.
  • Avoid allowing financial or organisational pressure to determine a clinical conclusion.
  • Explain when additional information or specialist assessment is needed.
  • Maintain appropriate boundaries and document significant disagreements.

An occupational physician may have responsibilities to the commissioning organisation, but these do not remove their professional obligations to the worker and others affected by their advice.

If a conflict cannot be managed appropriately, seek advice through the relevant professional or organisational process. In some circumstances, it may be necessary to declare the conflict or consider whether continuing the particular role is appropriate.

What should you know about capacity and confidentiality?

Capacity questions may arise when a worker is asked to consent to an occupational health report, refuses a recommended intervention or makes a decision that others consider unwise.

Do not assume that a person lacks capacity simply because they disagree with medical advice or make a decision that appears risky.

Under the Mental Capacity Act 2005, the relevant principles and assessment requirements should be applied where the Act governs the decision. Capacity is decision-specific and time-specific. A person may be able to make one decision but not another, or their ability may change over time.

When considering capacity, establish whether there is a reason to doubt the person's ability to make the particular decision. Follow the applicable legal framework and assess whether they can understand, retain, use or weigh relevant information and communicate their decision, where those statutory criteria apply.

The occupational physician should distinguish between:

  • A worker making an unwise decision.
  • A worker declining advice while retaining capacity.
  • A worker whose capacity for the specific decision is in doubt.
  • A situation involving immediate risk that requires urgent assessment or escalation.

Confidentiality remains relevant even when capacity is impaired. The doctor should consider the lawful basis for sharing information, who needs to receive it and what is necessary to protect the person's interests.

How should you approach safety-critical work and public safety?

Ethical questions can become particularly challenging when a worker performs safety-critical duties. Examples include driving professionally, operating dangerous machinery, undertaking emergency response work or performing tasks where sudden incapacity could harm others.

Suppose a worker discloses a condition that may cause unpredictable loss of consciousness but does not want their employer to know. The physician should not immediately promise absolute secrecy, nor should they automatically disclose the entire medical history.

Instead, assess the nature of the condition, the likelihood and consequences of sudden incapacity, the worker's actual duties, the effectiveness of restrictions and whether the risk can be managed.

Discuss the concern with the worker and encourage them to agree to appropriate action. Where they refuse, consider whether the risk is sufficiently serious to justify disclosure without consent under current professional guidance and applicable law.

If disclosure is justified, it should be limited to the information necessary for the recipient to take appropriate action. The report might need to identify the safety concern and relevant work restriction rather than provide an extensive clinical history.

Document the reasoning, the advice given, the worker's response and the basis for any disclosure.

This is an important examination distinction: a potential risk to public safety requires careful assessment, not automatic disclosure of every detail.

How do equality, reasonable adjustments and ethics overlap?

Occupational health advice may affect access to work, absence management, redeployment and continued employment. Ethical practice requires the doctor to provide a fair and clinically defensible opinion without making assumptions based on a diagnosis or disability.

The Equality Act 2010 includes provisions concerning disability discrimination and the duty to make reasonable adjustments in relevant circumstances. The application of the Act depends on the facts and the relevant legal tests.

An occupational physician should help the employer understand functional effects and potential adjustments. Examples may include altered working hours, additional breaks, temporary modification of duties or a phased return, depending on the person's circumstances and job demands.

Avoid presenting a diagnosis as proof that a person cannot work. Equally, do not recommend an adjustment without considering the essential duties, risks and practical circumstances.

The physician's role is to provide evidence-based advice, identify relevant limitations and explain possible options. The employer remains responsible for employment decisions, taking account of its legal obligations and the available evidence.

For related legal principles, see MFOM Occupational Health Law Revision.

How should you answer MFOM ethics and confidentiality SBA questions?

Ethics SBAs often include several options that are defensible in some circumstances. The task is to identify the best next step based on the facts provided.

Use this sequence:

  1. Identify the ethical problem.
  2. Establish the worker's wishes and what they have consented to.
  3. Identify who needs the information and why.
  4. Assess any risk to the worker, colleagues, patients or public.
  5. Consider the applicable professional guidance and legal framework.
  6. Explore whether the problem can be resolved through discussion or limited disclosure.
  7. Select the proportionate action and document the reasoning.

Read the question carefully. If it asks for the next best step, immediate disclosure may not be the best answer when there is time to discuss the concern with the worker. If the vignette describes an urgent and serious risk, however, delay may be inappropriate.

Common mistakes include:

  • Treating confidentiality as absolute.
  • Assuming the employer owns the worker's medical information.
  • Disclosing a diagnosis when functional advice would suffice.
  • Confusing consent to an assessment with consent to disclose a report.
  • Assuming refusal of consent automatically justifies disclosure.
  • Treating an unwise decision as proof of incapacity.
  • Ignoring serious risks to other people.
  • Failing to document the reasoning behind a difficult decision.
  • Giving legal conclusions without enough information about the circumstances.

Practise explaining why the preferred answer is more appropriate than the alternatives. This develops the judgement needed for both written questions and clinical discussions in the OSCE.

Frequently asked questions

Is confidentiality absolute in occupational medicine?

No. Confidentiality is a fundamental professional duty, but disclosure may be justified or required in specific circumstances, such as valid consent, a legal obligation or a sufficiently serious risk. The doctor must assess the situation carefully and disclose only what is necessary.

Can an employer demand an employee's diagnosis?

An employer's request does not automatically entitle them to the worker's full medical history or diagnosis. The occupational physician should consider the purpose of the referral, consent, relevance and proportionality, and whether functional advice can meet the employer's needs.

What should I do if a worker refuses consent to a report?

Explain the purpose and likely content of the report, explore the worker's concerns and consider whether a more limited report would be acceptable. If consent remains withheld, explain the implications and do not assume that the employer can receive the information regardless.

Can I disclose information without consent if a worker poses a safety risk?

Potentially, but the seriousness of the risk, the relevant professional guidance and the legal basis for disclosure must be considered. Discuss the concern with the worker where practicable, seek appropriate advice and limit any disclosure to what is necessary.

Does an unwise decision mean that a worker lacks capacity?

No. A person should not be considered to lack capacity simply because they make a decision that others disagree with. Apply the relevant legal framework to the specific decision and document the assessment where required.

What is the best way to revise ethics for MFOM?

FOM Ethics Guidance for Occupational Health Practice. This is a must read.

Practise scenarios involving consent, disclosure, conflicts of interest, capacity, public safety and fitness for work. For each scenario, identify the competing duties, the relevant guidance, the available options and the most proportionate response.

Ethics questions reward careful reasoning, clear professional boundaries and proportionate decisions. Test your understanding with our free sample questions and explore our pricing for further MFOM revision practice.

Ready to start practising?

Access 500+ SBA questions created by a UK occupational health physician. Clear explanations provided for every question.