Posted By Bob Youel I have come accross situation on many an occasion and won [most] in the end - its a battle management etc MUST provide enough quality information to allow an adequate risk assessment and to create a safe system of work thereafter The DPA and other various medical confidentiality laws etc are used on most occasions, in my personal opinion/experience [>25 years], as a shield for management to hide behind you have to stick to your guns noting that management should risk assess with input from advisers etc not the other way - even if you have to hold their hand - around There is a certain belief in social services etc that has deep routed customs - you have to manage / educate people to realise that all these customs etc are not always for the best noting that most people in such industries / employment care and really think/believe that they are doing what is best

Posted By Mark Talbot Suggest you write to the Information Commissioner (see http://www.ico.gov.uk/eventual.aspx) and get -once and for all- a letter from them explaining that DPA should not endanger carers/service providers. An exemption to the Act exists at section 31(2)(e)&(f) You can then show that to all and sundry...