1.3 Informed Consent, Confidentiality & PDPA in Healthcare

1.3 Informed Consent, Confidentiality & PDPA in Healthcare

Patient autonomy, informed consent, and privacy rights form the cornerstone of bioethics and health law in Singapore. Nurses in clinical settings across acute hospitals, community care, and outpatient clinics frequently navigate complex medico-legal scenarios involving patient decision-making capacity, proxy consent, advance directives, and statutory data protection mandates under the Personal Data Protection Act 2012 (PDPA).

---

Framework of Valid Informed Consent in Singapore

Informed consent is both an ethical duty and a legal requirement rooted in the common law right to self-determination and bodily integrity. Performing an invasive procedure or administering medical treatment without valid consent may constitute civil battery or professional misconduct.

Four Legal Elements of Valid Consent

1. Mental Capacity: The patient possesses the cognitive capability to understand, retain, weigh, and communicate a decision regarding the proposed intervention.
2. Voluntariness: Consent must be given freely without undue influence, coercion, or misrepresentation by healthcare providers or family members.
3. Adequate Information: The patient must be informed of the nature of the procedure, intended benefits, material risks, potential complications, and viable treatment alternatives (including no treatment). Under Singapore's modified Montgomery standard (Hii Chii Kok [2017]), disclosure must address risks that a reasonable person in the patient's circumstances would consider important.
4. Specificity: Consent is specific to the proposed procedure and practitioner. General consent forms signed upon hospital admission do not cover high-risk invasive interventions or surgical operations.

The Role of the Registered Nurse in Consent

While the primary legal responsibility for explaining procedures and obtaining consent rests with the operating physician or surgeon, the Registered Nurse plays vital advocacy roles:

• Verification: Verifying that a signed, valid consent form exists in the patient chart prior to pre-operative medication administration or procedural transport.
• Witnessing: Serving as an independent witness to the patient's signature, confirming identity and voluntary signing.
• Patient Advocacy: Assessing the patient's understanding. If a patient expresses confusion, anxiety, or hesitancy, the RN must halt pre-procedure prep and contact the physician to re-explain the intervention.

---

Mental Capacity Act (MCA) 2008 & Decision-Making Frameworks

When adult patients suffer from temporary or permanent cognitive impairment (e.g., dementia, severe stroke, traumatic brain injury, acute delirium), decision-making is governed by the Mental Capacity Act (Cap. 177A / MCA 2008).

Five Statutory Principles of the MCA 2008:

1. Presumption of Capacity: Every adult must be presumed to have capacity unless established otherwise.
2. Support to Make Decisions: A person must not be treated as lacking capacity unless all practicable steps to help them make a decision have been taken without success.
3. Unwise Decisions: A person is not to be treated as lacking capacity merely because they make an unwise or risky decision.
4. Best Interests: Any decision made or act done for a person who lacks capacity must be made in their Best Interests.
5. Least Restrictive Option: Decisions must restrict the person's rights and freedom of action as little as possible.

Key Legal Instruments for Healthcare Decision-Making

---

Personal Data Protection Act 2012 (PDPA) in Healthcare

In Singapore, the protection of personal data and patient health information (PHI) is enforced under the Personal Data Protection Act 2012 (PDPA), overseen by the Personal Data Protection Commission (PDPC), alongside Ministry of Health data governance frameworks.

Core Obligations Applied to Nursing Practice:

• Consent & Purpose Limitation: Patient data (NRIC number, diagnosis, contact details, medical history) may only be collected, used, or disclosed for healthcare treatment purposes for which the patient has consented.
• Protection Obligation: Institutions and nurses must implement reasonable security measures to prevent unauthorized access, leakage, or loss of medical records. This includes logging off EMR workstations (e.g., Epic/Sunrise Clinical Manager), securing physical charts, and maintaining password security.
• Retention Limitation: Patient records must be retained only as long as necessary for medical or legal compliance.

Statutory Exceptions to Patient Confidentiality

While confidentiality is a paramount duty under the SNB Code for Nurses and Midwives, nurses may legally disclose confidential patient data without consent in specific statutory circumstances:

1. Infectious Diseases Act (Cap. 137): Mandatory notification of specified communicable diseases (e.g., Tuberculosis, COVID-19, Dengue, Mpox) to the Ministry of Health for public health surveillance.
2. Child Protection & Vulnerable Adults Act: Mandatory reporting of suspected child abuse under the Children and Young Persons Act or abuse of vulnerable adults under the Vulnerable Adults Act 2018.
3. Court Subpoena & Police Investigations: Disclosures mandated by court orders or statutory police powers under the Criminal Procedure Code.
4. Prevention of Imminent Serious Harm: Disclosures necessary to prevent imminent, severe self-harm, suicide, or violent harm to third parties.

---

Professional Ethics and Social Media Conduct

The SNB enforces strict guidelines regarding digital communications and social media usage. Under the SNB Advisory on Social Media Usage:

• Nurses are strictly prohibited from taking photographs, videos, or audio recordings of patients, clinical wards, or medical documentation.
• Posting identifiable patient information, clinical case details, or hospital incidents on social media (Facebook, Instagram, TikTok, WhatsApp, Telegram) is a major breach of confidentiality.
• Breaching social media guidelines constitutes professional misconduct resulting in formal SNB disciplinary action, including suspension or striking off.

---

Clinical Scenario: Managing Confidentiality Demands by Family Members

Scenario: Mr. Lim, a 68-year-old competent inpatient diagnosed with early-stage colorectal cancer, explicitly requests his nursing team not to disclose his diagnosis to his adult children, as he wishes to discuss it privately later. While Mr. Lim is at radiology, his son arrives at the ward counter, demanding to read his father's electronic medical charts and baseline pathology report.

Analysis & Nursing Action:

1. Application of PDPA & Autonomy: Mr. Lim is a competent adult with full legal capacity. Under the PDPA and SNB ethical codes, his medical data is confidential, and his explicit instruction to withhold details must be respected.
2. Managing Family Expectations: The RN must politely decline the son's demand to view the medical chart. The nurse should explain: "Under Singapore healthcare privacy laws and institutional policy, patient medical records are strictly confidential. We can only share clinical information with your father's direct consent."
3. De-escalation & Support: The RN offers to facilitate a joint meeting between Mr. Lim, the primary care team, and the son when Mr. Lim feels ready, maintaining therapeutic family rapport without breaching confidentiality.