Counselling Confidentiality Explained

Counselling Confidentiality Explained

Counselling Confidentiality in the UK

Confidentiality is one of the main reasons counselling works. When you believe what you say will be treated respectfully and kept private, it becomes easier to speak honestly. You may talk about things you have avoided elsewhere, explore difficult thoughts and say things you have edited out in other conversations. That openness supports insight, emotional processing and change.

At the same time, confidentiality is not a magic promise that ‘nothing will ever be shared’. In UK counselling, privacy is shaped by ethics, law, safeguarding duties, organisational policies, and everyday practicalities like note-taking and supervision. This is where confusion often sits. Clients may wonder whether their partner can request their notes, whether their GP will be told what they say, or what happens if they talk about self-harm. Counselling trainees may worry that they will get it wrong in an assessment, or that one ‘wrong’ decision could end their career.

This guide explains how counselling confidentiality works across private practice, charities, schools and NHS settings. It covers what counsellors usually keep confidential, the limits, what triggers disclosure, how records are stored, who can access them, and what questions to ask before you begin. It also reflects the reality that more sessions now happen online, where privacy and data security need extra attention.

What is Counselling Confidentiality?

In counselling, confidentiality means that information you share with your counsellor is kept private and is not disclosed to others unless there is a clear ethical or legal reason to do so. It applies to what you say in sessions, what your counsellor observes, and what they record about your work together. It also applies to the fact that you are attending counselling at all, which can be sensitive in some situations.

Confidentiality is not the same as secrecy. Secrecy suggests absolute non-disclosure in all circumstances. Confidentiality is a commitment to protect your privacy, balanced with duties to prevent serious harm and to comply with the law. A helpful way to think of it is this: your information stays within an agreed circle, unless a specific threshold is met.

That agreed circle differs by setting.

  • In private practice, the circle is often small: you and your counsellor, plus their clinical supervisor, and sometimes an administrator who handles booking or payments.
  • In charities and agencies, the circle may include a clinical lead, a safeguarding lead, and secure record systems that managers can access.
  • In schools, the circle may include a designated safeguarding lead and, depending on policy, limited information sharing with pastoral staff.
  • In the NHS, the circle can be wider because care is documented within health records and accessed by relevant healthcare professionals involved in your care.

A counsellor should explain that circle in plain language before you begin, and they should not assume you already know how it works. Many ethical frameworks emphasise exactly that: actively protecting information, explaining who is within the confidentiality boundary, and being transparent about record-keeping and disclosure processes. 

What is Counselling Confidentiality?

What Counsellors Keep Confidential 

In most UK counselling relationships, the default position is that what you discuss is kept confidential. That typically includes:

  • Your personal history, relationships, work situation and life stresses.
  • Your health and mental health experiences, including diagnoses if you mention them.
  • The feelings and thoughts you share, including those that feel embarrassing or hard to admit.
  • Session content: themes you explore, what you say, and how the counsellor responds.
  • Attendance information: the fact that you are a client, appointment times, and session frequency.
  • Records created as part of therapy, such as brief session notes, risk assessments or agreed plans.

Counsellors also keep practical information, such as your address, contact details and emergency contact details. Many services store these separately from session notes, although that varies.

However, ‘kept confidential’ does not always mean ‘known only by your counsellor’. In ethical and regulated practice, counsellors have supervision. Supervision is a confidential professional space where counsellors discuss their work to protect clients and maintain quality. A counsellor should tell you that they use supervision, what they share (often anonymised or minimised), and how confidentiality is maintained within that process.

The biggest difference between settings is the level of organisational access to records. In a large service, records may be stored on an electronic system where multiple authorised staff can view them for legitimate reasons. In private practice, the counsellor may be the only person with access, unless they use a secure platform that provides administrative support or storage. In both cases, access should be restricted, justified and auditable. 

Limits of Confidentiality in Counselling

Every counselling service should explain confidentiality and its limits before therapy begins, ideally both verbally and in writing. The ‘limits’ are the situations where the counsellor may need to share information without your consent, or where they may first seek consultation before deciding whether sharing is necessary.

In UK practice, limits commonly include:

  • Risk of serious harm to you or to someone else, where sharing information may be necessary to protect safety.
  • Safeguarding concerns about a child or vulnerable adult, where professionals may have a duty to share information with safeguarding services or designated leads.
  • Legal requirements, such as complying with a court order requiring records or evidence, although this is less common than many people assume.
  • Organisational policies in settings such as the NHS or schools, where relevant information may be recorded within shared record systems used by other professionals involved in care or support.
  • Professional consultation where the counsellor may discuss aspects of a case with a clinical supervisor or safeguarding lead in order to make a safe and ethical decision.

A key point for clients is that ‘limits’ should be explained as a framework, not as a threat. A professional counsellor does not jump to disclosure. Instead, they think through proportionality: what is necessary, who needs to know, and what can be shared while still protecting your privacy as much as possible.

A key point for counselling trainees is that precision beats broad promises. If you promise “complete confidentiality”, you create risk for everyone. If you say, “I will keep what you tell me private, and I will explain clearly if we reach a situation where I may need to involve someone else to keep you or others safe”, you protect trust while staying honest.

When a Counsellor May Need to Break Confidentiality

The phrase ‘break confidentiality’ gets used a lot, but in real practice there are usually stages: assessment, consultation, discussion with the client where possible, and careful information sharing if needed.

Common situations where disclosure may be required or strongly justified include:

  1. Imminent risk of serious harm
    If a client is at high risk of suicide with immediate intent and means, or if there is credible risk of serious violence towards someone else, a counsellor may need to involve emergency services or relevant professionals.
  2. Safeguarding a child or vulnerable adult
    If a counsellor believes a child is being abused or is at significant risk of harm, they may need to make a safeguarding referral. Similar duties can apply to adults with care and support needs who are at risk of abuse or neglect.
  3. Legal compulsion
    In some circumstances, a court may order disclosure of records or require testimony. This is not everyday counselling reality, but it exists. Services should have a process for responding lawfully and only sharing the information that is required.
  4. Serious public protection concerns
    Some situations require urgent consultation and action where there is credible, serious risk. In practice, most counsellors seek guidance from their service, supervisor, safeguarding lead, or legal advice before taking steps.

Even in these scenarios, good practice is to involve the client wherever possible: explain concerns, outline options and aim for collaborative safety. There are exceptions, such as when telling the client would increase risk (e.g. imminent harm to someone else), but transparency is the default.

For clients, it is reasonable to ask: “If you were worried about my safety, what would you do first?” A thoughtful answer is a strong sign of professionalism.

For counsellors, it is also worth remembering that data protection law does not prevent information sharing when it is necessary to protect someone. UK guidance aimed at safeguarding practitioners repeatedly makes this point: lawful, proportionate sharing is allowed when it is necessary to keep people safe.

Safeguarding Disclosures and Confidentiality in Counselling

Safeguarding is one of the clearest areas where confidentiality and protection duties meet. In practice, safeguarding disclosures happen in many ways:

  • A child discloses abuse directly in school-based counselling.
  • A parent shares concerns about the behaviour of a partner or family member.
  • An adult client reveals they are being controlled, exploited or harmed.
  • A client discloses past abuse and the counsellor becomes concerned that children may currently be at risk.

In safeguarding contexts, the usual process is:

  • The counsellor listens carefully, clarifies key facts gently, and avoids asking leading questions.
  • The counsellor explains that safeguarding concerns cannot always be held in therapy alone.
  • The counsellor consults with a safeguarding lead, supervisor or manager according to policy.
  • A referral is made if thresholds are met, sharing only relevant information.

This is where informed consent matters. A good counselling contract should tell clients from the start that safeguarding concerns may need to be shared. When a disclosure occurs, it should not feel like a sudden rule change. It is an already explained boundary being applied.

For counselling trainees, a practical way to phrase it is:

“I will keep what you tell me confidential. The main exception is if I become seriously concerned about your safety, or someone else’s safety, especially a child or a vulnerable adult. If that happens, I will aim to talk with you about what needs to be shared and with whom. I would share the minimum needed to keep people safe.”

In schools, safeguarding processes are usually closely tied to the school’s designated safeguarding lead (DSL). Counsellors working in education need to understand how the school’s policy interacts with counselling ethics and how to communicate that clearly to pupils. The Department for Education’s guidance, information sharing advice for safeguarding practitioners, explains how confidentiality, the common law duty of confidentiality, and data protection fit into safeguarding decisions. It also emphasises that data protection legislation does not prevent proportionate information sharing when safety is at stake.

Self-Harm Disclosures and Confidentiality

Self-harm disclosures are common in counselling, and confidentiality around them is a major source of anxiety for clients. Many people worry that if they admit self-harm, the counsellor will ‘tell someone’, contact family, or report them. That fear can stop them from being honest, which undermines care.

In most cases, self-harm does not automatically trigger a breach of confidentiality. Counsellors typically assess:

  • The function of the self-harm (e.g. emotion regulation, self-punishment, dissociation management).
  • Frequency, severity, medical risk and escalation.
  • Suicide intent and plans, if any.
  • Protective factors and support systems.
  • Capacity and ability to keep themselves safe between sessions.

If the risk is assessed as manageable and the client can engage with a safety plan, confidentiality is usually maintained. The counsellor may still encourage the client to seek additional support, such as GP input, crisis services or trusted social support, but that is different from the counsellor disclosing without consent.

Disclosure becomes more likely when:

  • There is serious medical risk or escalating severity.
  • The client has suicidal intent or is unable to commit to basic safety steps.
  • The client is a minor or a vulnerable adult and safeguarding thresholds apply.
  • There is evidence of coercion, exploitation or serious harm by others.

Real-world example: A 28-year-old client discloses occasional superficial cutting after arguments, with no suicidal intent. They feel ashamed and hide it. The counsellor explores triggers, builds alternative coping strategies, and agrees a plan for crisis moments. Confidentiality remains intact. The client may choose to speak to their GP later, but that is their choice.

Another example: A 16-year-old pupil discloses frequent self-harm with increasing severity, and says they sometimes pass out from blood loss. They also describe not feeling able to stop. In a school setting, the counsellor is likely to involve safeguarding, because the risk is serious and the client is a child. The counsellor should tell the pupil what will be shared, and aim to keep them involved in the process.

For clients, the best question is simple: “If I tell you about self-harm, what happens?” A confident counsellor will explain how risk is assessed and what thresholds matter, rather than giving a simple yes or no.

Self-Harm Disclosures and Confidentiality

Confidentiality and Risk of Harm

Risk of harm is broader than self-harm. It can include suicidal thinking, violence towards others, neglect, abuse, exploitation, and severe impairment. Counsellors are not police and they are not there to punish honesty. Their goal is safety and therapeutic work. Confidentiality supports that. However, safety duties require them to act when risk crosses a threshold.

What does ‘threshold’ mean in practice? Many services consider factors such as:

  • Likelihood: How probable harm is.
  • Imminence: How soon it might happen.
  • Severity: How serious the potential harm is.
  • Specificity: How clear the plan or target is.
  • Protective factors: What reduces risk.

If a client says, “Sometimes I wish I would not wake up”, that may indicate depression and passive suicidal ideation. It calls for exploration, not automatic disclosure. If a client says, “I have pills next to me and I am taking them tonight”, that indicates imminent risk, and action is likely required.

For trainees, it helps to remember that you can assess risk without interrogating. Use calm, direct questions. Summarise. Check understanding. Then consult your supervisor or safeguarding lead if you are unsure. Acting alone when you are uncertain can increase the risk of mistakes. Equally, delaying when risk is urgent can be dangerous.

In the NHS, risk information is usually documented in the clinical record. That can feel exposing to clients, but it is often part of coordinated care between professionals. NHS confidentiality principles focus on restricting access to those with a legitimate role and using information only when it is necessary to provide safe care. 

How Counselling Notes Are Stored and Managed

Clients often imagine counselling records as a detailed transcript. In reality, notes vary widely, and this is one reason confusion persists.

Many counsellors keep brief session notes that might include:

  • Date and time of session.
  • Themes discussed.
  • Risk level and any safety planning.
  • Interventions used or agreed tasks.
  • Referrals or signposting.
  • Professional reflections needed for continuity.

Some counsellors keep process notes for their own memory, often in a more personal or reflective style. In agencies, note formats can be standardised. In the NHS, notes may be more structured to support care, audit and governance.

Storage methods also vary:

  • Paper notes stored in locked cabinets in a locked room.
  • Encrypted digital notes stored on a password-protected device.
  • Secure clinical record systems (common in NHS and larger organisations).
  • Practice management software designed for healthcare record-keeping.

In online counselling, storage and communication expand beyond session notes. Emails, appointment reminders, platform logs and payment records can all be personal data. This is why professional guidance emphasises basic security measures and clear client information about what is recorded and how long it is kept. BACP’s discussion of notes and record keeping highlights that services should set appropriate retention periods, inform clients about record-keeping, and ensure that therapeutic records containing sensitive information are stored securely. 

As a client, you do not need to know every technical detail, but you should be told:

  • What notes are kept.
  • Where they are stored.
  • How long they are retained.
  • Who can access them.
  • How you can request access to them.

As a counsellor, you should keep notes that are adequate, relevant and not excessive. Write with the assumption that a client may request to read them one day. Avoid judgemental language, be factual and record risk decisions and your reasoning clearly.

GDPR for Counselling Records 

In the UK, counselling records usually include special category personal data because they relate to mental health and wellbeing. This means stricter requirements around lawful basis, special category conditions, transparency, and security apply. The Information Commissioner’s Office (ICO) sets out what special category data is and how data concerning health is defined, in its special category data guidance and its explanation of what counts as special category data.

For clients, the most relevant GDPR points are:

  • You have rights over your data, including the right to be informed, and in most cases, the right to access your records.
  • Services should provide a privacy notice explaining what they collect and why.
  • Data should be stored securely and only retained as long as needed.
  • Disclosure should be limited to what is necessary for the purpose.

For counsellors and services, the practical GDPR tasks include:

  • Identifying a lawful basis under Article 6 of the UK GDPR and a special category condition under Article 9, and any relevant Data Protection Act 2018 conditions where needed.
  • Providing a clear privacy notice and retention policy.
  • Using secure storage, access controls and encryption where appropriate.
  • Training staff and keeping audit trails in organisations.
  • Completing data protection impact assessments when introducing higher-risk processing, especially with online platforms.

A key point is that GDPR does not prohibit keeping counselling notes. It requires that data is handled responsibly. Notes can protect clients by documenting risk assessments, safeguarding decisions and continuity of care. Problems arise when records are excessive, insecure or unclear.

Who Can Access Counselling Notes?

Access to counselling notes is a common client concern, and the answer depends on the setting.

Private practice

Typically, only the counsellor can access notes. The main exception is supervision, where anonymised or minimised information may be discussed. If the counsellor uses an admin assistant or a booking system, that person or service may see basic data such as your name and appointment time, but not your clinical details.

Charities and agencies

Records are usually held within an organisational system. That means authorised staff may access notes for legitimate purposes, such as clinical governance, safeguarding, handling complaints or continuity if a practitioner is absent. A well-run service will limit access, log it and explain the policy to clients.

Schools

School counselling varies widely. Some school counsellors are employed by the school. Others are commissioned from external services. The most common pattern is: session content is confidential, but safeguarding concerns are shared with the designated safeguarding lead. Some schools also record very limited information in school systems (e.g. attendance), while clinical counselling notes remain separate. This should be explained clearly to pupils, and to parents where appropriate.

NHS

In the NHS, counselling and psychological therapy notes are usually part of the health record. This means relevant NHS staff involved in your care can access them, subject to role-based access and confidentiality policies. NHS organisations set confidentiality principles that require staff to protect person-identifiable information and restrict access to those with a legitimate purpose. 

Courts and third parties

Therapy notes are not casually available to third parties. Employers cannot request access and family members do not have an automatic right to see them. However, there are situations where records can be requested or ordered, for example through legal processes, or if a client makes a subject access request. The ICO guidance on access to health information explains how access works, and it also discusses limits and exemptions, including issues like serious harm. 

For clients, the practical takeaway is to ask: “Who can access my notes in your service?” and “Are my counselling notes separate from other records?” The answer should be specific and clear, not vague.

Who Can Access Counselling Notes?

Confidentiality in NHS Counselling

Confidentiality in the NHS operates within healthcare record systems. The NHS relies on information sharing among professionals to deliver safe care, but it also has strong confidentiality rules about who can see person-identifiable information and for what purposes. NHS England publishes a confidentiality policy describing principles that must be followed by anyone with access to confidential information. 

If you receive counselling through NHS Talking Therapies or another NHS service, you can usually expect:

  • Your attendance and session notes are recorded in your NHS clinical record.
  • Staff involved in your care may access your record.
  • Information may be used for service management, audit and occasionally research; services should explain how and why this is done.
  • Confidentiality may be breached in cases of serious risk, safeguarding concerns or legal requirements.

Clients often ask: “Will my GP automatically be told what I say?” In many NHS contexts, your GP may receive a referral letter, a summary of treatment, or information relevant to ongoing care. The level of detail can vary. It is helpful to ask what is shared routinely, what requires your consent, and what might be shared in a risk situation. Many NHS Talking Therapies services also publish confidentiality explanations for clients, similar to the approach described on local service pages. 

Confidentiality in School Counselling 

School counselling sits at a sensitive intersection: young people need privacy to speak honestly, but schools also have safeguarding responsibilities. When done well, school counselling offers a protected space with clear boundaries that pupils can understand.

In many schools, the contract looks like this:

  • What you say is confidential.
  • The counsellor will not routinely tell teachers or parents what you discuss.
  • If the counsellor is concerned that you or someone else is at serious risk, they may need to share information with the school’s designated safeguarding lead, and possibly other services.
  • Wherever possible, the counsellor will discuss this with you first and involve you in the process.

For pupils, clarity is essential. A counsellor should explain confidentiality in language that fits the pupil’s age, and should check understanding. Phrases like “Confidential unless someone is not safe” can be too vague. A clearer approach is a brief explanation with examples, plus reassurance that sharing is limited and focused.

For counsellors, it is important to understand the school’s safeguarding policy, information-sharing routes, and how records are kept. Counsellors should also avoid creating a false distinction between ‘counselling rules’ and ‘school rules’, ensuring the pupil receives one coherent explanation.

If you want a structured way to think about what to share, when, and how to document your reasoning, the ICO’s 10 step guide to sharing information to safeguard children is a practical read.

BACP Confidentiality and Ethics Guidance

BACP guidance is widely used in the UK counselling field as a reference point for ethical standards, especially for BACP members. Their confidentiality resources emphasise protecting client information, making clear who is within the confidentiality boundary, and ensuring that recipients of identifiable information treat it as confidential. 

BACP also publishes the Ethical Framework for the Counselling Professions, which is the main reference point for ethical decision-making for BACP members, and includes expectations around privacy, record-keeping and explaining confidentiality limits. 

For a practical angle on what notes are for, how long to keep them and how to communicate this to clients, BACP’s notes and record keeping commentary is useful. 

How to Explain Confidentiality to Clients

This section is aimed at trainees and newly qualified counsellors, but many clients may also find it helpful, as it illustrates what a clear confidentiality explanation sounds like.

A strong confidentiality explanation has five parts.

1) A clear promise

Start with reassurance.
“What you share with me is private. I treat it as confidential.”

2) The circle of confidentiality

Name who may have access and why.
“I have clinical supervision where I talk about my work to make sure I am practising safely. I do not share your identity unless there is a serious reason, and supervision is confidential.”

If you work in an organisation, be specific:
“Because this is a service, authorised staff such as my clinical manager or safeguarding lead can access records if needed for safety or governance. We restrict access and we record it.”

3) The limits

Explain thresholds without sounding dramatic.
“Confidentiality may need to be broken if I become seriously concerned about your safety, someone else’s safety, or if there is a safeguarding concern involving a child or vulnerable adult.”

4) The process if a limit is reached

Clients fear sudden disclosure. Reduce that fear by describing steps.
“If I were worried, I would usually talk with you first. We would explore what support could help, and I would aim to agree with you what information is shared and with whom. If I had to share without your agreement, I would share the minimum necessary, and explain what I had done unless this would increase risk.”

5) Practicalities: notes and data

Finish with concrete, calming details.
“I keep brief notes to support your care. They are stored securely. You can ask what I record and how long I keep it. You can also ask for our privacy notice.”

Real-world examples you can use in assessment

Clients often understand confidentiality best through examples.

  • “If you told me you had been arguing with your partner and you felt ashamed, that stays here.”
  • “If you told me you had thoughts of not wanting to live, we would talk about them. This does not automatically mean I tell someone.”
  • “If you told me you had a plan to end your life tonight and you could not keep yourself safe, I would need to act to protect you. I would tell you what I was doing.”
  • “If you told me a child is being harmed, I would need to follow safeguarding procedures. I would talk this through with you and share relevant information with the safeguarding lead.”

Questions clients should ask before starting counselling

If you want reassurance, these questions are practical and reasonable:

  • “Who is in the circle of confidentiality in your service?”
  • “What are the limits of confidentiality, in plain language?”
  • “If you felt worried about my safety, what would you do first?”
  • “What notes do you keep, and where are they stored?”
  • “How long do you keep records before deleting or destroying them?”
  • “Can I access my records, and are there any restrictions on that?”
  • “Do you use email or text for any sensitive information?”
  • “What platform do you use for online sessions, and how is it secured?”
  • “If a safeguarding issue came up, how would you involve me?”

A professional counsellor will not be irritated by these questions. They will welcome them, because clear contracting protects both you and them.

Helpful external resources for deeper reading

If you want to explore the frameworks behind what you have read here, these links are a good start:

These resources show the ethical and legal landscape and can help you feel grounded in what ‘normal professional confidentiality’ looks like in the UK. 

Conclusion

Confidentiality is not a minor detail in counselling – it is the container that makes the work possible. In the UK, confidentiality is protected by strong ethical standards and by data protection law, but it also has limits shaped by safeguarding duties, serious risk situations, and the practical realities of different settings.

If you are a client, your safest path is to choose a professional service and ask direct questions about limits, notes and access. You deserve a clear, calm explanation before you share your story. If you are a trainee or newly qualified counsellor, your best protection is to contract carefully, avoid absolute promises, and be ready to explain not just the limits, but the process – consultation, proportionality and sharing only what is necessary.

When confidentiality is explained well, it builds trust rather than fear. That trust gives people the confidence to speak honestly, and that honesty is where meaningful therapy begins.

Psychology and Counselling Courses

Looking to get a Mental Health qualification?

We offer a wide range of Counselling and Psychology courses all with full tutor support.

Learn more