Confidentiality in disability support is not a formality. It is the foundation that lets people invite a support worker into their home, share personal routines, and accept help with things they may not discuss with anyone else. When a participant trusts that their information stays with the people who need it, support works better. When that trust is broken, everything else suffers, from the relationship with the worker to a person's willingness to ask for help at all. This article explains what confidentiality covers, what support workers are expected to do, how information sharing should work, and where to turn if something goes wrong.
Why confidentiality matters in disability support
Support work often happens in private spaces. A worker may help someone shower, dress, manage medication, prepare meals, or handle paperwork. In the process they learn about health conditions, financial circumstances, family relationships and personal preferences. None of that is small talk. It is sensitive information that belongs to the participant.
Confidentiality protects more than privacy. It protects dignity and choice. A person who knows their information is handled carefully is more likely to speak openly about what they need, which leads to better support planning and fewer surprises for everyone involved. Families also rely on this. Parents, siblings and carers often share details with a provider so support can be tailored, and they need to know that information will not travel further than it should.
What counts as confidential information
People sometimes assume confidentiality only covers formal documents. In practice it covers a much wider range of details, including information shared in ordinary conversation inside the home.
- Personal details such as name, address, date of birth and contact information
- Health information, including diagnoses, medications, appointments and medical history
- Information about a person's disability, support needs and daily routines
- Details of the supports a person receives and who provides them
- NDIS plan information and funding details
- Financial and banking information where a provider helps with money-related tasks
- Family circumstances, relationships and living arrangements
- Notes, photographs, incident reports and progress records
- Things a participant says in confidence during a support shift
That last point matters. A casual comment made while cooking dinner is still a private disclosure. Support workers are expected to treat it that way.
What the NDIS Quality and Safeguards Commission expects
The NDIS Quality and Safeguards Commission is clear that if you are a support worker, you must ensure the confidentiality of the people you support is always protected. The word "always" is doing real work there. It does not apply only during formal tasks or when documents are being handled. It applies to conversations, phone calls, text messages, social media, and what a worker says to friends or family after a shift.
For participants and families, this sets a reasonable expectation: the people supporting you should not discuss your circumstances with anyone who does not need to know. Not in a staff room, not in a group chat, not on a personal social media account.
Your right to control your information
Under Australian law and provider policies, people receiving support have a right to control how their information is collected, used and shared. That is a strong statement of principle, and it is worth understanding what it means day to day.
Control means you should be told what information is being collected and why. It means you should know who within an organisation can see your records. It means you should be asked before details are passed to a third party, such as a new therapist, a support coordinator or another service. It also means you can ask questions about how records are stored and how long they are kept.
If a provider cannot explain their approach in plain language, that is a signal worth paying attention to. You are entitled to an answer you can understand.
When information may be shared
Confidentiality does not mean information is never shared. Support usually involves several people working together, and useful support depends on some coordination. The important distinction is between sharing that happens with the participant's knowledge and agreement, and sharing that happens without it.
Providers commonly explain that they will keep information private and will not tell other people about it unless they have to. In practice, information might be shared in situations such as:
- With the participant's consent, so a support team can coordinate care
- With a person the participant has nominated, such as a family member or guardian
- With a support coordinator or allied health professional involved in the person's supports
- Where there is a serious risk to someone's safety or wellbeing
- Where the law requires disclosure, such as certain reporting obligations
- For internal purposes such as supervision, quality review or complaint handling
What matters is that these pathways are explained in advance rather than discovered after the fact. A participant should not learn from a neighbour that their support arrangements were discussed at a social gathering.
Consent, capacity and changing your mind
Consent is not a one-off signature. It is an ongoing conversation. Someone may agree to share information with a particular service in January and decide in June that they would prefer that service did not have those details any more. Participants and their families should feel able to raise this.
Where a person has a guardian or another decision-maker involved, the provider should be clear about who is authorised to give consent and how the participant's own wishes are included in those decisions. Good practice is to involve the person as much as possible, regardless of formal arrangements.
Just as importantly, consent given for one purpose does not automatically cover another. Agreeing to share health information with a physiotherapist is not the same as agreeing to appear in a provider's marketing material. Those are separate conversations.
Confidentiality in everyday support situations
At home
The home is where most sensitive information is exchanged. A support worker may notice changes in mood, overhear a difficult phone call, or help sort through personal mail. None of that becomes general knowledge. Workers should also be careful with practical habits: not leaving paperwork visible, not discussing one participant's situation during another person's shift, and not using a personal phone to photograph documents.
In the community
Support often happens in public, which creates its own challenges. A worker assisting someone with personal care in a shopping centre or at a medical appointment should manage the situation discreetly. Conversations about health or funding should not be held in a way that others can easily overhear. This does not require secrecy, just judgement.
With other services
When several providers are involved, information needs to move between them to be useful. That should be handled through agreed channels, with clear records of what was shared and why. Participants can reasonably ask which services hold their information and what has been passed on.
Questions worth asking a provider
Families often get clearer answers when they ask specific questions before support starts, or when reviewing an existing arrangement. Useful ones include:
- What information do you collect about me or my family member, and why?
- Who inside your organisation can see my records?
- Will you ask me before sharing information with another service?
- What happens if a support worker needs to discuss my support with a manager?
- How are written notes and records stored, and who can access them?
- What is your process if I believe my confidentiality has been breached?
Providers should be able to answer these without hesitation. If they cannot, ask for the answer in writing.
What to do if confidentiality is broken
If you believe private information has been shared inappropriately, start by raising it with the provider directly. Ask what happened, who was involved, and what will change. A serious provider will take the concern seriously and explain their complaint process.
If you are not satisfied with the response, or you would prefer not to go to the provider first, there are external pathways. The NDIS Quality and Safeguards Commission and the Tasmanian Disability Services Commissioner both publish information about privacy, confidentiality and how to make a complaint. These are the best places to check current processes, timeframes and contact details, as these can change.
Confidentiality and locally based providers
Provider size affects how confidentiality works in practice. A small, locally based provider in Launceston or elsewhere in Northern Tasmania may have a tighter team, which can mean fewer people handling your information. It can also mean workers are more visible in the community, so discretion matters just as much.
What participants and families should look for is consistency. A provider that explains its privacy approach up front, asks before sharing, and treats everyday conversations as confidential is doing the basics well. That is the standard worth expecting, regardless of how large or small the organisation is.
Frequently Asked Questions
Can a support worker tell their family about my situation?
No. Support workers must protect the confidentiality of the people they support at all times. Details about your health, supports, routines or personal circumstances should not be shared with their friends or family, even in general terms. If you are ever unsure whether information has been shared inappropriately, raise it with the provider directly and ask for their complaint process.
Do I have to share my medical information with a provider?
You have a right to control how your information is collected, used and shared. Providers generally need enough information to support you safely, but you can ask why particular details are required and who will see them. If a request feels excessive, ask for an explanation in writing before agreeing, and check the current guidance published by the NDIS Quality and Safeguards Commission.
What happens if there is a risk to my safety?
Confidentiality is not absolute. Providers commonly explain that information stays private unless there is a reason it must be shared, such as a serious risk to someone's safety or a legal obligation to disclose. Ask your provider to explain these situations before support begins, so you know what to expect rather than finding out afterwards.
Who should I contact if my privacy is breached?
Start with the provider and ask for their complaints process. If you are not satisfied, or prefer not to approach them first, the NDIS Quality and Safeguards Commission and the Tasmanian Disability Services Commissioner publish information about privacy, confidentiality and complaints. Check their websites for current contact details and processes, as these can be updated from time to time.
Confidentiality in disability support ultimately comes down to a simple idea: the information a person shares belongs to them. Support workers, coordinators and providers are trusted with it so that support can be delivered well, not so it can be discussed freely. Participants and families are entitled to ask questions, to give or withdraw consent, and to expect that private details stay private. Checking those expectations early, and revisiting them as circumstances change, keeps the relationship between a person and their support team built on trust rather than assumption.