Consent and Information-Sharing With Families: Getting the Boundaries Right in Older People’s Care
Information-sharing with families is one of the most frequent sources of tension in older people’s services. Some families feel “kept in the dark”, while others expect full access to records and decisions even when the person has capacity and does not consent. Providers can also drift into unsafe practice by relying on relatives for decisions or disclosing information because it feels helpful in the moment. A defensible approach is built on consistent consent practice, clear documentation and a repeatable communication model. This article sits within Family Partnership, Carer Support & Best Interests Practice and connects with planning disciplines set out in Person-Centred Planning in Social Care | 7-Part Guide for Providers, focusing on operational delivery and inspection-ready assurance.
Consent is a process, not a one-off checkbox
In practice, consent changes over time and by topic. A person may consent to their daughter receiving routine updates but not to sharing financial information, personal history, or safeguarding details. Providers should capture consent as a structured record: what can be shared, with whom, by what method, and when it must be reviewed. Where capacity fluctuates, staff should document how they checked consent at the time and how they maximised involvement.
Clarifying roles: next of kin is not a legal status
Confusion about “next of kin” drives poor practice. Next of kin does not automatically give decision-making authority. Providers should be clear about who holds relevant legal authority (LPA for health and welfare, deputyship) and the scope. Where no authority exists, the person decides if they have capacity; if not, decisions follow best interests processes. This clarity reduces the risk of relatives assuming control or staff feeling forced to comply with demands.
Operational example 1: Relative demands full access to care records
Context: A resident has capacity and does not want certain personal information shared. A relative insists they are “next of kin” and demands access to daily notes and medication records, threatening to complain if refused.
Support approach: The provider uses a calm, rights-based approach and documents consent clearly, while still offering appropriate reassurance to the family.
Day-to-day delivery detail: A senior speaks with the resident privately to confirm preferences and records what can be shared. The service explains to the relative that information-sharing is guided by the resident’s consent and privacy rights. A structured update format is offered (e.g., weekly wellbeing summary) within the consent boundaries. Staff are instructed not to debate disclosure on the floor and to escalate requests to a senior to avoid inconsistent responses. Interactions are recorded factually, including what was requested, what was explained and what was agreed.
How effectiveness or change is evidenced: Reduced repeated confrontations, clearer record trail showing lawful practice, and fewer escalation risks because staff responses are consistent and senior-led.
When capacity is lacking: lawful sharing for best interests and safeguarding
When a person lacks capacity, information-sharing may be necessary to support best interests decisions, safe care delivery, and safeguarding. Providers should record the rationale: what information is shared, with whom, and why it is necessary and proportionate. This protects against both under-sharing (leaving families without essential information) and over-sharing (unlawful disclosure). The key is decision-specific reasoning and a clear record.
Operational example 2: Capacity fluctuates and consent becomes unclear
Context: A person experiences delirium during infection. The family want daily updates and involvement in treatment escalation decisions. Staff are unsure whether consent applies because the person is confused at times but lucid at others.
Support approach: The provider treats consent as time- and decision-specific, documenting checks and ensuring involvement is maximised when capacity is present.
Day-to-day delivery detail: Staff document capacity observations each shift for relevant decisions and record when the person is able to express preferences. When the person is lucid, the senior confirms what information can be shared and records consent. When capacity is lacking for a specific decision, staff document best interests consultation with the family, including what information was shared and why it was necessary. A consistent daily update plan is agreed, with clear boundaries about what can be shared and review times.
How effectiveness or change is evidenced: Improved documentation quality, fewer disputes about “not being told”, and evidence that the service maximised the person’s involvement rather than defaulting to relatives.
Safeguarding and confidentiality: sharing without escalating conflict
Safeguarding contexts are particularly sensitive. Families may be involved, but not all details can always be shared, especially where sharing could increase risk (for example, if a family member is implicated, or the person does not consent and has capacity). Providers should have a clear escalation route for disclosure decisions: involve safeguarding leads, record rationale, and keep explanations factual and calm. Staff should not improvise disclosure decisions in high-pressure moments.
Operational example 3: Allegation of financial abuse by a family member
Context: A resident reports missing money and suggests a family member may be taking it. Another family member demands details, claiming they have a right to know and will “sort it out”.
Support approach: The provider prioritises the person’s safety and rights, follows safeguarding processes, and shares information proportionately.
Day-to-day delivery detail: The safeguarding lead records the disclosure and initiates the safeguarding process. Staff check capacity and consent regarding sharing. If the resident has capacity and does not consent, the provider explains that it cannot share details, but can confirm that concerns have been raised and will be handled through formal processes. If capacity is lacking, the service documents a best interests rationale for sharing necessary information with appropriate parties while avoiding disclosures that could increase risk. Communication is controlled through a named senior to prevent misinformation and escalation.
How effectiveness or change is evidenced: Clear safeguarding records, reduced risk of retaliation or coercion, and defensible evidence of proportionate information-sharing decisions.
Commissioner and regulator expectations (explicit)
Commissioner expectation: Providers evidence lawful, consistent information-sharing with families, including clear consent practice, decision-specific capacity checks and documented rationales for disclosures in best interests and safeguarding contexts.
Regulator / inspector expectation (e.g., CQC): Inspectors expect people’s privacy and confidentiality to be respected, with appropriate family involvement and consistent staff understanding. They will look for clear consent records, decision-making documentation and safe handling of safeguarding-related information.
Governance and assurance: how to prove consent practice is working
Useful assurance measures include auditing consent records for clarity and review dates, sampling incident notes where families were updated to test consistency, and tracking complaints about “not being told” or “being excluded”. Supervision should test staff confidence in explaining boundaries and escalations, and ensure staff do not disclose under pressure.