
Professional Confidentiality and Liability
Confidentiality is a cornerstone of the doctor‑patient relationship. In many jurisdictions, including Italy, the duty to keep patient information secret is protected by both criminal…

Under Art. 622 c.p., which element is NOT required for the crime of revealing professional secrecy to be completed?
A medical student overhears a confidential discussion about a patient’s HIV status. Which statement accurately reflects the student's liability for disclosure?
Which of the following is considered an imperative cause that permits a physician to disclose patient information?
A doctor informs a patient’s spouse about the patient’s diagnosis without the patient’s consent. Under which condition could this be legally justified?
Which of the following best distinguishes the criminal liability of a public official from that of a private physician under the secrecy statutes?
A physician receives a subpoena to testify about a patient’s private medical records. Which provision allows the physician to refuse testimony?
Which of the following actions would be considered a permissible transmission of professional secrecy?
A doctor discovers that a patient’s family member, who is also a healthcare worker, has disclosed the patient’s condition to a friend. Under the criminal code, which element of the offense is most directly violated?
In the context of professional liability, which combination of elements is essential to establish civil responsibility for a medical error?
A surgeon follows a clinical guideline that is later deemed inadequate for a specific patient’s condition, resulting in injury. Under the Gelli‑Bianco law, which factor may mitigate criminal liability?
Which of the following best describes the distinction between 'imperizia' and 'negligenza' in medical malpractice?
A hospital fails to secure its electronic health records, and an unauthorized third party accesses a patient’s data. Under the professional secrecy statutes, the hospital’s liability is based on:
A physician is asked by a police officer to provide a patient’s medical record for an ongoing investigation. Which category of cause permits this disclosure?
Which of the following statements accurately reflects the scope of professional secrecy regarding non‑health‑related information about a patient’s relatives?
A doctor who is also a public official discloses patient information in a private capacity. Under which article could the doctor be prosecuted for a more severe offense?
Which of the following best characterizes a 'permissive' cause for revealing professional secrecy?
A patient’s legal representative requests the medical record after the patient has been declared incompetent. Which principle governs the professional’s response?
Under the civil code, which type of liability arises when a physician breaches a contractual duty owed to a patient?
A physician’s negligence leads to a patient’s injury, but the injury was not foreseeable. Which classification best fits the physician’s conduct?
Understanding Professional Confidentiality and Liability in Healthcare Law
Confidentiality is a cornerstone of the doctor‑patient relationship. In many jurisdictions, including Italy, the duty to keep patient information secret is protected by both criminal statutes (e.g., Art. 622 of the Penal Code) and professional codes of ethics. Breaching this duty can lead to civil, disciplinary, and criminal consequences. This course unpacks the key legal concepts, the circumstances that justify disclosure, and the differences in liability for physicians, students, and public officials.
1. The Legal Framework for Professional Secrecy
Professional secrecy is regulated primarily by:
- Art. 622 of the Italian Penal Code (c.p.) – criminalizes the unlawful revelation of secrets obtained in the exercise of a profession.
- Deontological Codes – professional bodies (e.g., the Italian Medical Association) set ethical standards that often mirror or exceed statutory rules.
- Procedural Guarantees – certain procedural codes (e.g., Article 200 of the Code of Criminal Procedure) provide limited immunity for professionals when called to testify about confidential information.
Understanding the elements required for a crime under Art. 622 is essential for avoiding liability.
2. Elements Required for the Crime of Revealing Professional Secrecy
To constitute a criminal offense under Art. 622, four elements must be present:
- Access to the information – the professional must have obtained the data because of his/her professional role.
- Unjustified disclosure – the revelation must be made without a lawful cause or justification.
- Intentional act – the disclosure must be intentional (or at least reckless), not merely accidental.
- Absence of actual damage – damage to the patient is NOT a required element. The mere act of unauthorized disclosure suffices for criminal liability.
Therefore, even if no concrete harm occurs, the professional can still be prosecuted.
3. When Is Disclosure Legally Justified?
Italian law recognizes specific imperative causes that allow a physician to break confidentiality without incurring liability. These include:
- Judicial orders (e.g., a court‑ordered forensic examination report).
- Public health emergencies where disclosure is necessary to prevent a serious threat to the community.
- Patient’s explicit written consent, especially when the consent is directed to a third party (e.g., a spouse).
Other situations—such as personal safety of the physician, academic requests, or informal verbal consent—do not constitute valid justifications.
4. Duty to Protect Potential Victims
One of the most frequently debated exceptions involves the physician’s duty to protect third parties from imminent harm. The correct legal justification is:
- The physician has a duty to protect potential victims from imminent harm. This aligns with the principle that the right to life and personal safety can outweigh confidentiality when a credible threat is identified.
In practice, the physician must assess the immediacy and seriousness of the threat and, if justified, disclose only the information necessary to prevent the crime.
5. Liability of Medical Students and Trainees
Even before obtaining a full medical license, students are bound by the same confidentiality obligations as qualified professionals. Liability arises when:
- The student intentionally discloses confidential information causing harm to the patient.
Negligent or accidental disclosures without damage generally do not trigger criminal liability, though disciplinary sanctions from the university may still apply.
6. Distinguishing Public Officials from Private Physicians
Both public officials and private physicians can be prosecuted under secrecy statutes, but the scope of liability differs:
- Public officials may be punished for negligent disclosure, reflecting the higher public trust placed in their positions.
- Private physicians are typically liable only for intentional or reckless disclosures, unless the law expressly expands the scope (as in certain health‑security emergencies).
This distinction underscores the importance of intent and the professional context in assessing criminal responsibility.
7. Subpoenas and the Right to Refuse Testimony
When a physician receives a subpoena demanding access to a patient’s medical records, the following provision is pivotal:
- Article 200 of the Code of Criminal Procedure – grants professionals the right to refuse testimony on matters covered by professional secrecy, provided the request is not accompanied by a judicial order that specifically overrides the privilege.
In practice, the physician should promptly inform the court of the confidentiality claim and may request a protective measure (e.g., a sealed hearing) to balance the legal demand with the duty of secrecy.
8. Permissible Transmission of Confidential Information
Not every sharing of patient data is unlawful. The following scenario is permissible:
- Sending the patient’s chart to a specialist for a second opinion **with the patient’s consent**. This respects the principle of “minimum necessary” disclosure and adheres to both statutory and ethical standards.
Conversely, posting anonymized case details online, leaving charts unattended, or providing information to commercial entities without consent are clear violations.
9. Practical Checklist for Maintaining Confidentiality
Use this checklist to ensure compliance in everyday practice:
- Obtain written consent before sharing any patient information with third parties.
- Verify the legal basis (court order, public health emergency, or imperative cause) before disclosing without consent.
- Limit disclosure to the minimum necessary data needed for the purpose.
- Secure all physical and digital records – use locked cabinets, encrypted files, and access logs.
- Educate trainees about their confidentiality obligations and the potential for criminal liability.
- When faced with a subpoena, consult the Article 200 exemption and seek legal counsel.
10. Frequently Asked Questions (FAQ)
Q: Can a physician disclose a patient’s HIV status to a colleague for academic discussion?
A: No. Academic discussions require either patient consent or anonymization that prevents identification. Direct disclosure without consent is a breach of Art. 622.
Q: Does damage to the patient need to be proven for a criminal charge?
A: No. The crime is complete once the secret is disclosed without justification, regardless of actual harm.
Q: Are medical students exempt from criminal liability for confidentiality breaches?
A: No. They are liable if they intentionally reveal information causing harm, though negligence without damage may not reach the criminal threshold.
11. Conclusion
Professional confidentiality balances the patient’s right to privacy with societal interests such as public safety and justice. By mastering the legal framework—especially Art. 622, the permissible exceptions, and procedural protections—healthcare professionals can navigate complex situations confidently and ethically. Remember: the safest approach is always to obtain explicit consent, limit disclosures to what is strictly necessary, and consult legal counsel when uncertainty arises.
