The six Caldicott principles, applying to the handling of patient-identifiable information, are:
- justify the purpose(s) of every proposed use or transfer
- don’t use it unless it is absolutely necessary, and
- use the minimum necessary
- access to it should be on a strict need-to-know basis
- everyone with access to it should be aware of their responsibilities, and
- understand and comply with the law.