Handover, Notes and Confidentiality: A Ward Guide

This is a plain guide to hospital handover, notes and confidentiality for anyone who works on a ward or at a desk: how to hand a shift over without losing anything, how to write notes that protect the patient and you, how to report an incident, and how to keep patient information private in a building full of curious people. None of it is complicated. All of it is where new starters get into trouble.

The rules on records and privacy are set by the health regulator and the data protection authority where you work, and your employer turns them into a policy. This guide gives you the habits. The policy gives you the detail, and it wins.

If it is not written down, it did not happen

A note is the only thing that survives the shift. The nurse who saw the patient goes home. The record stays. If a question is asked in six months, by a family, a manager or a court, the record is what answers it. If you did something and did not write it, the answer is that it was not done.

How to write patient notes as a healthcare assistant gives the full method with before-and-after examples. The rules in short:

Facts, not opinions. "Ate half of lunch, refused pudding, drank 200 ml of water" is a note. "Eating well" is a guess. "Patient was rude" is an opinion; "patient said 'leave me alone' and turned away" is a fact.
What you saw, heard, did and who you told. Those four things, in that order, make a complete entry.
Time it. The time it happened and the time you wrote it, if they differ. Sign it with your name and role, printed if your signature is unreadable.
Never erase. If you make a mistake on paper, one line through it so it can still be read, then the correction, then your initials and the time. On a screen, use the correction function; the system keeps the original.
Write it now. An entry at the end of a twelve-hour shift is an entry from memory.

Charts are notes too. The fluid chart, the food chart, the turn chart and the observations chart are legal records. A turn you did but did not chart is a turn that did not happen when the pressure sore is investigated. Fill them in at the bedside, at the time.

Non-clinical roles keep records that matter just as much: the cleaning log, the transport log, the visitor book at reception. Fill them in the same way: fact, time, name.

Giving and receiving a shift handover

Handover is where most information is lost in a hospital. The outgoing team is tired. The incoming team has not met the patients. Whatever is not said clearly in those minutes is gone until something goes wrong. How to give a good shift handover covers the method; the essentials:

Prepare before the shift ends. Do not walk into handover with nothing. In the last hour, go round your patients, check the charts, and write a line per patient: what matters most, what changed, what is outstanding.

Give it in a fixed order, risks first. For each patient: who they are, why they are here, the one thing the next shift must know, what is due, and what to watch. Say the risks before the routine. "He fell yesterday, he is on hourly checks, he will try to get up for the toilet alone" before "he likes two sugars".

Receive it with questions. The incoming shift accepts responsibility when handover ends, so ask before you accept. "When were the last obs?" "Has anyone told the family?" "Is the pressure area dressing due today?" A handover you do not understand is not a handover.

Walk the ward afterwards. Handover tells you what the last team believed. The patient tells you what is true now.

Non-clinical teams hand over too. Porters: which transfers are booked, which patient needs oxygen or two staff. Housekeeping: which side rooms are isolation, which bay needs a deep clean. Reception: which patient is expected, which visitor is restricted. Same shape: risks first, outstanding tasks, what changed.

Transfers between departments

A transfer is a handover with a journey in the middle, and it is where patients lose their notes, their medicines and sometimes their identity. Your hospital has a transfer checklist. Use it every time, not from memory.

Before the patient leaves the ward:

Identity. Wristband on, name and date of birth checked against the transfer form.
Notes. Paper notes and charts in the folder, or the electronic record flagged for the receiving ward.
Medicines. The medicines chart travels with the patient. Anything due in transit is planned.
Devices. Drip, catheter, drain, oxygen: each one noted, secured and working.

Preparing for transport. Enough oxygen in the cylinder for the journey and a wait at the other end. Lines secured. A blanket, because corridors are cold. The patient told where they are going and why.

Who escorts. A clinician goes with a patient who could get worse on the way; a porter alone takes a patient who is stable. Your hospital's policy sets the match between escort and risk. If you are a porter and you are asked to take someone alone who looks unwell, say so before you leave.

At the other end, hand over in person to a named member of staff: patient, notes, medicines, devices, and anything you noticed on the way. Do not leave a patient in a corridor with a folder on their lap. Then close the loop: return the equipment, log the time, tell the ward the patient arrived.

Discharge: what goes home

Discharge is the last handover, to the patient and whoever is at home. It fails in small practical ways: the tablets left in the locker, the house keys in a property bag, the patient sent home to an empty house with no food and no way to get upstairs.

What goes home with the patient: their medicines, with the new ones explained; the discharge letter; any dressings, equipment or follow-up dates; their belongings, checked against the property list; their keys.

Explaining medicines to take home is a clinician's job, but anyone can check understanding. "Can you tell me how you will take the new tablets?" is a better question than "Do you understand?" If the patient cannot explain, tell the nurse before they leave. Teach-back method examples for hospital staff has the words.

The practical discharge: transport confirmed, clothes that fit the weather, someone expected at home or a key safe code that works. For a patient who lives alone, the question is whether they can get in, get to bed, get to the toilet, and get food and drink for the first day.

Spotting the patient who is not ready. A patient who cannot stand to get dressed, who is confused about where they live, or who says "I do not think I can manage" is a patient to raise with the nurse before the transport arrives. Nobody minds a delayed discharge. Everyone minds a readmission the same night.

Incident reports without blame

An incident is anything that harmed a patient, staff member or visitor, or could have. A fall. A wrong meal to a patient with an allergy. A needlestick. A medicine given late. A near miss where you caught it just in time. All of them get reported, and the near misses are the most valuable, because they show where the next harm will come from.

How to write an incident report in a hospital walks through the form. The principles:

Facts, sequence, times. What happened, in order, with the time of each step. Who was there. What was done afterwards. Who was told.
No blame, no guessing. "The bed rail was down" not "the night staff left the bed rail down". "Patient found on floor at 03:10" not "patient fell".
Report your own mistakes. The report is not a confession. It is the information the hospital needs to stop it happening again. Staff who report their own errors are the ones a good manager trusts most.
Report on the shift. Memory fades and the facts drift.

What happens after you submit: a manager reviews it, patterns are looked for across the hospital, and sometimes you are asked to add detail. In a hospital that reports well, you also hear back what changed because of your report. If you never do, ask. Feedback is what keeps people reporting.

Who has a right to know

Confidentiality means that what you learn about a patient at work stays with the people who need it to care for that patient. Not the patient's neighbour who phones. Not your partner at dinner. Not the colleague who is curious.

Who has a right to know: the clinical team caring for the patient; the patient; and whoever the patient has said can be told. That last part matters. A patient's spouse has no automatic right to the diagnosis. A parent of an adult patient has none. A police officer at the desk has none without the process your hospital's policy sets out.

Who does not: everyone else, including staff not involved in the patient's care, however senior, however friendly, however good their reason sounds.

Curious colleagues. Every time you open a record, the system logs who, when and which patient. Looking up a neighbour, a celebrity or your own relative because you are worried is a breach, and hospitals check the logs. If you need to know about a family member's care, ask them, like anyone else.

Phones, screens and corridors

Most confidentiality breaches are not hacks. They are a conversation in a lift. Giving patient information over the phone covers the hardest everyday case; the rest:

Corridors, lifts and canteens. Do not discuss a patient where you can be overheard, and assume you always can be. "The lady in bed six with the bowel cancer" is identifiable to her daughter standing behind you in the lift.

Screens, printouts and whiteboards. Lock the screen when you step away from it, every time. Turn the monitor so the queue at reception cannot read it. Handover sheets go in the confidential waste, never in the bin and never home in a pocket. The whiteboard at the nurses' station shows what the policy allows and no more; diagnoses do not belong on it.

Phone enquiries. The caller says they are the patient's son. You do not know that. Verify the way your policy says: a password agreed with the patient at admission, a call back to a known number, or passing the call to the nurse in charge. If you cannot verify, say so kindly: "I am not able to give out information over the phone, but if you give me your number I will ask the nurse to call you back." Never confirm that someone is a patient to an unverified caller; even "yes, she is on this ward" is information.

Logins, phishing and personal phones

Your login is you. Everything done under it is recorded as done by you. Never share a password or a smartcard, never log someone else in "just for a minute", and never leave your card in the reader. If anyone asks for your password, including someone claiming to be from IT, refuse and report it.

Phishing is a message that tries to trick you into clicking a link or giving a password. Signs: urgency ("your account will be closed today"), a request for a password, a sender address that is almost right, a link that does not go where it says. When in doubt, do not click. Report it to IT by the route in your policy.

Shared computers. Lock the screen when you leave it. Log out at the end of the shift.

Personal phones. No patient photographs, ever, whatever the reason and whoever asks. No patient details in messaging apps, including the ward group chat. If your hospital provides an approved app for clinical messages, use that and nothing else.

Reporting a breach. If you sent an email to the wrong person, lost a handover sheet, found a printout in a public place, or clicked a link you should not have, report it straight away by your policy's route. Fast reporting limits the harm and is treated very differently from a breach found later.

A worked example: a ward clerk's afternoon

Say a ward clerk on a medical ward takes a call at two in the afternoon. The caller says he is the nephew of a patient in bay three and wants to know whether she has had her scan results. The clerk does not recognise his voice and the patient's record has no password set.

The clerk says: "I am sorry, I am not able to give out any information over the phone. If you leave your name and number, I will ask the nurse looking after her to call you back." The caller pushes: "Just tell me if she is still there." The clerk repeats the same sentence, kindly, and takes the number. She writes on the message pad: time, caller's name, claimed relationship, number, request, and that no information was given. She hands it to the nurse in charge.

At three, a healthcare assistant tells the clerk that a visitor to the same patient was shown a printed handover sheet left on the counter. The clerk picks it up, puts it in the confidential waste, and fills in an incident report before her shift ends: what was found, where, at what time, by whom, what was done. No names of who left it there. Her manager thanks her the next day and moves the printer.

At the end of the shift, the clerk hands over to the evening clerk: the open message for the nurse, the incident report number, the restricted visitor on bay one, and the two admissions expected. Risks first, then tasks, then routine.

Common mistakes

Writing opinions ("difficult", "eating well", "fine") instead of what you saw and measured.
Writing the shift's notes at the end from memory.
Correcting a paper note with correction fluid or by scribbling it out.
Arriving at handover with nothing prepared, or giving the routine before the risks.
Accepting a handover you did not understand because the other shift wanted to leave.
Sending a patient to another department without the medicines chart.
Leaving an incident unreported because nobody was hurt this time.
Confirming to a caller that someone is on the ward.
Discussing a patient in the lift.
Leaving a screen unlocked at the desk, or a handover sheet on the counter.
Patient photographs or details on a personal phone or a group chat.

Quick reference

Notes: facts, what you saw and heard and did and who you told, time, sign, never erase, write it now.
Charts: at the bedside, at the time.
Handover: prepare in the last hour, risks first, ask before you accept, then walk the ward.
Transfer: identity, notes, medicines, devices; oxygen for the journey; hand over in person; close the loop.
Discharge: medicines explained and checked back, belongings and keys, transport, a safe first night.
Incident: facts, sequence, times, no blame, your own mistakes included, on the shift.
Confidentiality: only the people who need it to care for the patient. No lifts, no canteens, no curious colleagues.
Phone: verify or pass to the nurse; never confirm a patient is on the ward.
Screens locked, printouts in confidential waste, your login is you, no patient anything on a personal phone.
Breach or phishing: report fast.

Questions people ask

I am a cleaner. Do I need to write anything down?

Yes. The cleaning log is a record. It shows which room was cleaned, when, by whom and with what, and it is what the infection control team reads when there is an outbreak. Fill it in at the time and sign it. If you were pulled away before finishing a room, write that too.

Can I tell a patient's husband how she is doing when he phones?

Only if you know it is him and the patient has agreed. Most hospitals set a password with the patient on admission for exactly this; if there is one and he gives it, you can share what the policy allows. If there is no password or he does not know it, take his number and ask the nurse to call back. Never confirm that she is a patient to someone you have not verified.

What should I do if I realise I made a mistake in the notes yesterday?

Add a new entry now, with the time you are writing it, that says what the correction is and which entry it corrects. Do not go back and change yesterday's entry so it looks as if it was always right. A visible correction is honest and protects you. A hidden one is the thing that gets people disciplined.

I made a mistake that did not harm anyone. Do I still report it?

Yes. A near miss is the best kind of incident report, because the hospital gets to fix the cause before anyone is hurt. Reporting your own mistake is treated as professionalism, not a confession, in any hospital that takes safety seriously.

Learn this in five minutes

The track "Writing Notes That Protect Patients and You" practises the five habits in this guide: why unwritten care did not happen, facts instead of opinions, timing, signing and correcting an entry, the charts, and the records non-clinical roles keep. The tracks beside it cover shift handover, transfers, discharge, incident reporting, keeping patient information private and digital security, each as a five-minute situation from a real shift.