Privacy
Mental-health support and privacy at work
Understand the intended boundary between a funded workplace programme and personal care.

Funding does not require visibility into care
An organisation may need limited information to fund eligibility and operate a programme. That does not mean it should see an individual’s intake, professional, appointments, messages, notes, outcomes or care history.
Ask what is reported
Programme reporting should be aggregate, limited to a defined purpose and protected by minimum-cell suppression so small groups cannot be inferred.
Read the service’s privacy explanation
Before sharing sensitive information, look for clear answers about who controls the data, who may access it, retention, consent and how to exercise data rights.
General information only. This guide is not medical advice, diagnosis or emergency support.