Guides

UK Law on Confidentiality and HIV Status

The UK law on confidentiality and HIV status
Guides

UK Law on Confidentiality and HIV Status

References UK clinical guidance from the NHS, the British HIV Association (BHIVA), and the British Association for Sexual Health and HIV (BASHH). Last updated: April 2026.

Your HIV status is confidential medical information and is protected by strict UK laws and NHS rules. Clinicians, healthcare staff, and anyone handling your records are legally bound to keep this information private. Breaches are taken seriously and can result in disciplinary action or prosecution.

Here’s what the law says, who can access your status, and what your rights are.

Order a discreet home HIV test

Your HIV status is protected by several overlapping laws and rules:

  • NHS (Venereal Diseases) Regulations 1974 — gives extra protection to information collected in sexual health clinics, including HIV
  • Data Protection Act 2018 and the UK GDPR — HIV status is “special category” data needing extra safeguards
  • Common law duty of confidentiality — applies to all healthcare settings
  • Equality Act 2010 — protects against discrimination based on HIV status
  • Human Rights Act 1998 — Article 8 right to private and family life

Who Can See Your HIV Records?

WhoWith Your ConsentWithout Consent
Your HIV clinic teamYes, for your careOnly within the team
Your GPUsually yes (but you can opt out)No
Other hospital staffFor your care onlyIn emergencies
EmployerOnly if you discloseNever
Family membersOnly with your permissionNever
InsurersIf you tell themNever

Your GP and HIV Records

HIV clinics will usually ask if they can share information with your GP. Most people agree because it helps coordinate care — your GP prescribes for other conditions, and it avoids dangerous drug interactions. But you have the right to ask for your HIV status not to be shared with your GP if you prefer.

Exceptional Situations

There are a few rare situations where information may be shared without your consent:

  • When required by court order
  • If there’s a serious, immediate risk to another identifiable person
  • For public health purposes (e.g. contact tracing, usually done with consent and discretion)
  • Safeguarding concerns for children or vulnerable adults

Even in these cases, only the minimum necessary information is shared and you should normally be told.

What to Do If Confidentiality Is Breached

  1. Raise your concern with the service involved
  2. Make a formal complaint via NHS complaints procedure (PALS)
  3. Contact the Information Commissioner’s Office (ICO) for data protection breaches
  4. Report clinicians to their regulator (GMC, NMC) if appropriate
  5. Seek legal advice — Terrence Higgins Trust has a legal helpline

Read more: Disclosing your HIV status | HIV and the Equality Act | What is HIV?

Frequently Asked Questions

Can my employer find out I have HIV?

No. Unless you tell them, employers have no way of accessing your HIV status. Healthcare records are confidential and cannot be shared with employers without your consent.

Will my family be told my HIV status?

Never without your permission. The NHS will not share your status with family members or partners. You decide who to tell and when.

Does my HIV status appear on my GP record?

Usually yes, because HIV affects prescribing and other health decisions. But you can ask for it to be kept out of shared records if you have strong reasons. Discuss this with your HIV team.

Sources

Have questions? Get tested from home.

Confidential, accurate, and rapid results you can trust.

Order a Test Kit