Guides

Professional secrecy for nutritionists: scope, limits, and hard cases

What professional secrecy covers in nutrition practice, when it can or must be broken, how it relates to data protection, and how to handle the cases that raise the most doubts.

9 min read

Professional secrecy is not the same as data protection, even though they overlap. One protects the trust of the care relationship; the other regulates how information is processed. You can comply scrupulously with the second and still breach the first.

The distinction matters because the consequences differ. A data protection breach leads to an administrative procedure and possibly a fine. Breaching professional secrecy can additionally carry disciplinary consequences before your professional body and, depending on the country and severity, civil or criminal liability.

What exactly it covers

Secrecy reaches everything you learn by reason of your professional practice, and that is broader than usually assumed. It is not limited to clinical content:

  • The content of the consultation and everything recorded in the clinical file.
  • The very fact that this person is your client.
  • What they tell you about their personal, family, or working life even when not clinically relevant.
  • What you observe without being told.
  • What you learn about third parties through the client.

How long it lasts

It does not end when treatment ends, nor when the client stops coming, nor when you close the practice. It does not lapse on the client’s death either, although most frameworks then allow access by people connected by family or de facto ties, with limits: nothing is disclosed that affects the deceased’s privacy or the professional’s subjective notes, and any express prohibition left by the client in life is respected.

The cases that raise doubts

SituationGeneral criterion
The client’s partner asks about their progressNo information without the client’s express authorisation, even if they attend together
The client is a minorInform whoever holds parental responsibility, weighing the minor’s maturity and their own right to confidentiality
Another professional asks about the caseOnly what is needed for continuity of care, and preferably with the client’s knowledge
The company paying for the sessions asks for a reportYou may report service usage, never clinical content, and it is agreed in writing beforehand
A court requests the clinical recordComply with the request, limited to what is asked, keeping a documentary record
You detect signs of an eating disorderSecrecy is not broken: refer and coordinate with the client, unless there is imminent risk to life
Indicative criteria. The specifics depend on each country’s legal and professional framework; for a real case, consult your professional body.

When it can be broken

The exceptions are narrow and must be read restrictively. The most common:

  1. Express consent of the client, and only to the extent they authorise.
  2. A judicial request, limited to what the authority asks for.
  3. Serious and imminent risk to the life or health of the client or third parties.
  4. Legal notification duties expressly set out in the rules.
  5. Self-defence in proceedings where the client sues you, and only as far as necessary.

Secrecy and your team

Reception staff, assistants, and administrators access information covered by secrecy without carrying the professional duty you hold by virtue of your qualification. The way to extend that obligation to them is a signed confidentiality agreement, backed by two practical measures worth more than the paper: give each person only the access their role needs, and revoke it the same day they stop working with you.

Everyday mistakes

  • Discussing an identifiable case on social media or in a talk, assuming removing the name is enough.
  • Publishing before-and-after photos without specific written consent for that use.
  • Talking about a client in the waiting room or with the door open.
  • Leaving the clinical record on screen while walking the client out.
  • Using shared messaging groups where clients can see each other.
  • Sending a plan to the wrong address through autocomplete.

None of these comes from bad faith, and all are avoidable with small habits: lock the screen when you stand up, check the recipient before sending, and assume any case you describe is identifiable to someone.

Frequently asked questions

Can I discuss a case in supervision or training?

Yes, provided the information is dissociated so the client cannot be identified. If the case is so distinctive that it is recognisable, you need their consent.

Does secrecy stop me collaborating with the client’s doctor?

No. Continuity of care justifies sharing what is needed, and the client should know and agree. Sharing the whole file when a summary would do would be excessive.

What if a family member insists on information?

Explain that you need the client’s authorisation and ask the client directly. The relative’s insistence does not change the criterion, and giving in to avoid conflict is what creates the problem.

Does secrecy apply the same in online consultations?

The same, and the environment needs care too: headphones, a room where nobody else can hear, and checking the client is also somewhere they can speak freely.

This guide is informational and is not legal advice. Check the regulations in force in your country and consult a professional if in doubt.

Next step

Take clinical nutrition to the next level with Almendra

Design plans, manage clients, and automate follow-ups in a single platform.

Get started for free
We use cookies
These cookies help us keep the page secure, give you a better experience, and show you more relevant advertising. We won't turn them on unless you agree.

Read more on our Privacy policy