Nursing care
Confidentiality vs duty to warn: when a threat to an identifiable person comes first
Written and reviewed by Dana Whitfield, RN, MSN · 4 min read · Updated October 2026
Short answer
Confidentiality is the default; duty to warn or protect is a narrow exception. When a patient makes a credible threat of serious physical harm against an identifiable person, protecting that person can override confidentiality. The nurse reports the threat promptly to the provider and team, documents the exact words, and the organisation decides on warning the person or police.
Find the trigger: serious, credible threat to an identifiable person
Patients share sensitive information on the understanding that it stays within the care team, and that trust underpins treatment. Venting anger, dark humour or vague hostility does not usually override it. The exception arises when there is a reasonable probability the patient will seriously harm a specific, identifiable person, such as a named partner, neighbour or colleague.
United States privacy rules permit disclosure, without the patient's agreement, when a clinician believes in good faith that it is necessary to prevent or lessen a serious and imminent threat to a person or the public. Disclosure goes to someone reasonably able to prevent the harm, including the target or law enforcement. Whether warning is required or only allowed varies by state law.
What stays confidential and what can be shared
Diagnosis, history, substance use, sexual health and past offences generally stay confidential, even when they are uncomfortable or socially concerning. A threat, by contrast, is assessed for intent, plan, means and a target. Sharing within the treatment team for care is allowed and expected; disclosure outside the team needs one of the recognised exceptions, such as a specific threat or a legal reporting duty.
When disclosure is justified, it is limited to the minimum information needed to prevent harm, and the patient is told when feasible. That might mean the potential victim learns of the threat and its seriousness, not the patient's full psychiatric history. Mandatory reports for child abuse or certain communicable diseases are separate legal duties, and are not the same as duty to warn.
The nurse's role: report, document, keep people safe
A nurse who hears a threat does not promise secrecy. If a patient says "don't tell anyone," explain honestly that information about a risk of harm to others cannot be kept private. Report immediately to the provider and charge nurse, and follow the organisation's threat policy. Document the patient's words in quotes, the time, the named person and who was notified.
Assess immediate safety on the unit: access to weapons, the potential victim visiting, the patient's agitation. Increase observation as ordered. The decision to contact the potential victim or police is usually made by the treating clinician or designated team under local law. A nurse acting alone by calling the person directly, without escalation, is a common wrong exam option.
Common exam traps and how to avoid them
One trap is treating any upsetting statement as grounds for disclosure. Telling a family member about a patient's diagnosis because they are worried, or informing an employer about a mental health admission, breaches confidentiality unless the patient consents or a legal exception applies. Curiosity, concern or convenience are not exceptions. The protective exception focuses narrowly on preventing serious harm.
The opposite trap is staying silent because the patient asked for privacy or because the threat was made in a therapy group. Credible threats are escalated whatever the setting. Another trap is sharing more than needed: disclosure should be limited to what prevents the harm. When unsure, the safe nursing choice is to report to the provider and follow organisational policy.
Work through an original scenario
Hypothetical item: during an evening group, a patient tells the nurse, "When I get out on Friday, I'm going to my ex-wife's house with the gun I keep in the garage." Which action is best? Options: keep it confidential because it was said in therapy, call the ex-wife personally, report the statement to the provider and document it, or tell the patient he is joking.
Reporting to the provider and documenting is best. The statement names an identifiable person, a plan and means, which meets the threshold for protective action. Keeping it confidential ignores the danger, calling the ex-wife bypasses the team process, and dismissing it fails to assess risk. Compare a patient who says, "Everyone at work annoys me": that alone warrants assessment, not disclosure.
Sources and further reading
45 CFR 164.512: Uses and disclosures to avert a serious threat to health or safety (Cornell LII). Good-faith disclosure to prevent or lessen a serious and imminent threat, to a person reasonably able to prevent it including the target, or to law enforcement.
AMA Code of Medical Ethics: Confidentiality. Disclosure without consent when there is reasonable probability of serious physical harm to an identifiable person or to self; minimum necessary; notify the patient when feasible.
The next step on this is the same as on everything else here: answer questions and read the rationales. Our safe and effective care practice questions are the closest set to what this page covers.
One question from the safe and effective care set
A nurse on a medical unit receives report on four clients. Which client should the nurse assess first?
Rationale
Prioritization items are airway, breathing, circulation, in that order — the ranking survives every rewording. Audible gurgling around a fresh tracheostomy is a partially obstructed airway and it is the only option that can kill the client in the next few minutes. Fever, post-op pain, and a glucose of 232 are all real problems that need the nurse, just not first.
Answer: C
Common questions
Should the nurse promise to keep a patient's secret?
No. The nurse can say information stays within the care team but cannot promise secrecy about risks of harm to the patient or others.
Who decides whether the potential victim is warned?
Usually the treating provider or designated team under organisational policy and state law. The nurse's responsibility is to report the threat promptly and document it accurately.
Does a threat of self-harm also justify sharing information?
Disclosure may be permitted when there is a reasonable probability of serious self-harm. The nurse reports it and follows the suicide risk protocol rather than keeping it private.
More on safe and effective care
Guides on this