Worker-Manager Confidentiality

When workers share personal matters with managers

Many employees develop a good working relationship with their manager over time. This often leads to conversations that go beyond day to day tasks, with workers sharing personal information they expect to remain private.

In most cases, managers will maintain confidentiality of these disclosures. But this duty is not absolute. There are situations where a manager may need to share information with others in the organisation, even when it was given in confidence.

Under UK GDPR, employers have a legal obligation to safeguard employees' personal data, and managers should be trained on these requirements. However, understanding where the boundaries lie helps both workers and managers handle sensitive conversations appropriately.

Workplace Privacy Checker

Describe what your employer is monitoring or asking for and find out whether it is lawful under UK privacy and data protection law.

Try our Workplace Privacy Checker free, here on this site →

Keeping workplace gossip in check

Managers often have access to personal information about staff, including salary details, health matters, disciplinary records and performance assessments. This access comes with a clear responsibility to keep such information private, and breaching this may constitute a violation of data protection law.

It is considered unprofessional and may breach legal obligations for a manager to share confidential details about one employee with another. This applies whether the information came through formal HR channels or informal conversation.

Workplace gossip can spread quickly and cause real harm to individuals. Managers should exemplify confidentiality by refraining from engaging in speculation about colleagues. Where rumours are circulating, they may need to address the matter directly or refer it to HR.

If less senior staff need access to certain information for legitimate work reasons, the organisation will usually release it through proper channels in an appropriate form. Managers should not take it upon themselves to share data informally, even with good intentions. Failing to maintain confidentiality can result in legal consequences for both the manager and the organisation, as well as lasting damage to employee trust.

Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.

When confidentiality may need to give way

There are times when a manager may be justified in disclosing information shared in confidence. The key consideration is whether keeping the information private could cause harm to the worker, to colleagues, or to the organisation as a whole.

For example, if a worker discloses something that suggests they may harm themselves or pose a risk to others, the manager has a legal and ethical responsibility to act. This might involve speaking with HR, occupational health services, or in serious cases, external agencies.

Similarly, if a worker reveals information about illegal activity, fraud, or serious misconduct, the manager cannot simply ignore it. The organisation may have legal obligations to investigate or report certain matters. Public interest disclosures are protected under the Public Interest Disclosure Act 1998, which sets out the framework for whistleblowing provisions.

In these situations, managers should try to be transparent with the worker where it is safe to do so. Explaining that the information cannot remain confidential, and why, is often better than acting without any explanation. Managers should also document these conversations for accountability and transparency.

Organisations should have clear policies outlining when confidentiality might need to be overridden. Managers who are uncertain how to proceed should seek guidance from HR or contact the ACAS helpline on 0300 123 1100, which offers free advice on workplace issues.

What workers should consider before sharing

Before disclosing personal information to a manager, workers may want to consider what they hope to achieve and whether they are comfortable with others potentially finding out.

While managers are legally bound to protect personal data under UK GDPR, they may feel obliged to pass information on if they believe disclosure is necessary for legitimate reasons.

Where you need to discuss a personal matter but want formal protections, you may prefer to speak with HR directly. All staff handling personal data, including both HR staff and managers, are bound by data protection rules and internal confidentiality policies. You can also contact your trade union representative if you have one.

The Information Commissioner's Office provides guidance on how employers should handle personal data under UK GDPR at ico.org.uk. If you believe your employer has mishandled your personal information, you can raise a concern with the ICO. For further information on workplace rights, visit GOV.UK.

The Next Step

Now that you have read through the advice above, you might want to put it into practice. Our Workplace Privacy Checker lets you describe what your employer is monitoring or asking for and find out whether it is lawful under UK privacy and data protection law. Try it now →