Dental team members have a duty of confidentiality to their patients [1], and disclosure of personal health information without consent is governed by the ethical guidance of the General Dental Council [2], the Data Protection Act 2018 [3] and the UK General Data Protection Regulations (UK GDPR) [4] To provide appropriate care for patients and provide care within the NHS system, it is sometimes necessary to share personal information with others. However, disclosure of personal information requires the patient’s consent and must be on a strict ‘need-to-know’ basis; only the minimum identifiable information necessary for the purpose can be given.