HIV Test Confidentiality, Partner Disclosure and a Donor Data Request
A 26-year-old woman attending antenatal clinic at a sub-county hospital tests HIV-positive on the national rapid testing algorithm, with two consecutive reactive tests. You are the laboratory technologist who performed and recorded the tests. The comprehensive care clinic counsellor is on leave. Later that afternoon, the woman’s husband, who is a known patient on ART at the same facility, comes to the laboratory reception and asks you to confirm his wife’s HIV result, saying he has a right to know and that he will “sort out the issue at home”. Thirty minutes later, a data clerk from a donor-funded programme asks for the day’s line list with names, ages and test results for entry into a tablet-based register. The laboratory register is open on the bench. The facility has no written data-sharing agreement with the programme.
1. How should you respond to the husband’s request, and what are the limits of partner disclosure in this situation?
Read the worked answer
Do not confirm or deny the wife’s result. The husband’s status as a patient does not give him access to another patient’s record. HIV status is sensitive personal health information; disclosure by a laboratory worker without the client’s consent is a breach of confidentiality and of the ethical duty of privacy. It may also expose the woman to harm, which is a real risk given the husband’s statement that he will “sort out the issue at home”.
The appropriate response is calm and non-disclosing: explain that you cannot discuss any patient’s results with him, that he should speak with the clinician or counsellor, and offer to arrange a confidential discussion for him about his own health. Do not speculate, hint, or confirm by tone or expression.
Partner notification is a clinical and counselling process, not a laboratory reception task. National guidance and the confidentiality provisions of Kenya’s HIV legislation support disclosure to a partner through trained providers, normally with the client’s consent and with support for the client to disclose voluntarily. Assisted partner notification services can be offered to the woman by the comprehensive care team when the counsellor returns. If there is an immediate risk of violence, the clinical team should address safety planning.
Document the encounter factually: time, who asked, what was requested, what you said, and the referral made. Inform the laboratory manager and the in-charge of the comprehensive care clinic.
2. What should you do about the data clerk’s request for the line list, and what conditions would make any data sharing acceptable?
Read the worked answer
Do not hand over the register or a named line list. The clerk has made an informal request, the register is open on the bench, and there is no written data-sharing agreement. Patient identifiers linked to HIV results are among the most sensitive data a laboratory holds; unauthorised disclosure could lead to stigma, discrimination or violence.
Immediate actions: close or cover the register, move it out of reception, and tell the clerk that you cannot release named data. Refer the request to the facility in-charge and the programme’s data officer. Record the request and your response.
Acceptable sharing requires several conditions:
- A written data-sharing or data-processing agreement between the facility and the programme, approved by the facility’s management and data protection focal person.
- A defined purpose, such as programme monitoring or quality improvement, with the minimum necessary data fields.
- De-identification or coded identifiers wherever names are not essential; if names are essential, a lawful basis and safeguards must be documented.
- Secure transfer and storage, access controls on the tablet, and no personal devices or open registers.
- Confidentiality undertakings from the clerk and programme staff, and a process for breach reporting.
- Compliance with Kenya’s data protection law and the facility’s confidentiality policy.
The laboratory technologist’s duty is to protect the data in their custody, not to resolve a programme’s information needs informally. If the programme needs aggregate counts, provide anonymised totals through the proper channel.
3. The counsellor is absent and the woman is waiting. What is your professional responsibility to her, and what would you do before the end of the day?
Read the worked answer
The woman needs a confidential, supported discussion of her result, not a laboratory counter conversation. As the person who performed and recorded the tests, you should ensure she is told in a private space by an appropriately trained provider, with her consent and with a plan for disclosure support and linkage to care.
Practical steps:
- Do not disclose the result in the reception area or in front of relatives. Escort her to a private room if the clinic can provide one.
- Contact the comprehensive care clinic in-charge or the on-call counsellor. If no counsellor is available, a trained clinician may give the result; the laboratory should hand over the documented result through the agreed clinical channel.
- Confirm that post-test counselling, disclosure support and ART linkage are arranged before she leaves.
- Record the handover and the name of the receiving provider.
- Inform the laboratory manager about the counsellor absence and the two confidentiality incidents: the husband’s request and the data clerk’s request.
- Ensure the register is secured and that reception staff know not to discuss results with relatives.
A reflective note should focus on the systems gaps: lone working without counselling cover, an open register, and no data-sharing agreement. The ethical principle is clear: the woman’s confidentiality and safety come first, and any disclosure must be made with her consent and through the proper clinical process.