The AMA was founded in part to establish the first national code of medical ethics. Today the Code is widely recognized as authoritative ethics guidance for physicians through its Principles of Medical Ethics interpreted in Opinions of AMA’s Council on Ethical and Judicial Affairs that address the evolving challenges of contemporary practice.
Information gathered and recorded in association with the care of a patient is confidential. Disclosing information to third parties for commercial purposes without consent undermines trust, violates principles of informed consent and confidentiality, and may harm the integrity of the patient-physician relationship.
In keeping with the professional responsibility to safeguard the confidentiality of patients’ personal information, physicians have an ethical obligation to manage medical records appropriately. This obligation encompasses managing the records of current patients, retaining old records against possible future need, and providing copies or transferring records to a third party when requested by the patient or the patient’s authorized representative.
Information gathered and recorded in association with the care of a patient is confidential, regardless of the form in which it is collected or stored.
When there is reason to believe that patients’ confidentiality has been compromised by a breach of the EMR, physicians have a responsibility to follow ethically appropriate procedures for disclosure. The degree to which an individual physician has an ethical responsibility to address inappropriate disclosure depends in part on his or her awareness of the breach, relationship to the patient(s) affected, administrative authority with respect to the records, and authority to act on behalf of the practice or institution.
In handling patient data, individual physicians should balance supporting and respecting patient privacy with upholding their ethical obligations to the betterment of public health. The use of data for the benefit of public health should be treated as a form of public good in which the standards and values of health care should follow the data and be upheld and maintained. Those with access to datasets have a duty to uphold the ethical values of health care in which the data were produced.
Genetic testing is most appropriate when the results of testing will have meaningful impact on the patient’s care. It is important that patients always receive appropriate counseling. Physicians should not encourage testing unless there is effective therapy available to prevent or ameliorate the condition tested for.
Physicians may ethically provide genetic testing to inform reproductive decision making when the patient requests, but may also wish to offer broad screening to all persons who are considering having a child.
Patients who undergo genetic testing have a right to have their information kept in confidence, and a variety of state and federal laws prohibit discrimination by employers, insurers, and other third parties based on genetic information.
With the exception of genetic information (or material) collected under the jurisdiction of a coroner, medical examiner, or other medical legal officer, the release of genetic information from a physician’s records without the patient’s informed consent constitutes a breach of confidentiality. However, under limited circumstances, physicians may disclose such information to the criminal justice system.
Assisted reproduction offers hope to patients who want children but are unable to have a child without medical assistance. In many cases, patients who seek assistance have been repeatedly frustrated in their attempts to have a child and are psychologically vulnerable. Those patients whose health insurance does not cover assisted reproductive services may also be financially vulnerable. Candor and respect are thus essential for ethical practice.
Copyright 2026 American Medical Association. All Rights Reserved.