The 5 golden rules
Use the approved system for care notes and updates — not personal messages.
Lock your phone and laptop (PIN/password/Face ID).
Don’t share photos or videos unless the office has agreed it for a care reason.
Don’t share client details with family members unless they’re the authorised contact and the office has confirmed.
Report mistakes immediately — quick reporting prevents harm.
What to do if…
…you accidentally text/email the wrong person
Tell your manager/on-call immediately.
Don’t try to “fix it quietly” by deleting messages — report it.
If you can, take a screenshot for evidence and follow instructions from the office.
You won’t be blamed for reporting promptly — we need to act fast to reduce risk.
…a family member asks you to WhatsApp them updates or photos
Say something like:
“I can’t share care information through personal apps. We’ll send updates through the agreed route so everything is safe and recorded.”
If they keep pressuring you, contact your manager — this is a governance and safety issue, not something you should manage alone.
…you’re asked to take a photo (e.g., a wound, a pressure area, equipment set-up)
Do not take photos unless:
the office has confirmed it’s needed for care and consent/authorisation is in place, and
you know where to upload it securely.
If it is authorised:
Take the photo using the approved method.
Upload it to the approved system immediately.
Delete it from your device (including “recently deleted”).
…you lose your phone or think it’s been stolen
Call the on-call manager immediately.
Tell them what device it is and whether it had any work information on it.
Follow instructions (you may need to change passwords right away).
…you’ve written notes on paper in the home
Paper notes can be risky in a private home.
Keep them in the agreed secure place (not on the kitchen table).
Don’t leave them where visitors can see them.
Don’t throw them in the household bin — ask the office what to do for confidential disposal.
…you get a suspicious email or link (phishing)
If something feels off:
don’t click links
don’t open attachments
report it to the office/security contact
Phishing is one of the most common ways care organisations get hacked.
Remember
In live-in care, people may treat you like “part of the household” — but you are a professional handling regulated information. If you’re unsure, pause and ask the office.
