RBTTestPrep
Menu

Confidentiality

The obligation to protect information about clients and others from being shared except with authorized people, for valid reasons, as allowed by law, the BACB and the employer.

RBTs learn a great deal about clients and families: names, diagnoses, behavior, family situations, schedules and addresses. Confidentiality means keeping that information private. The RBT Ethics Code (2.0) requires RBTs to protect the confidentiality and privacy of clients, stakeholders and others in the workplace by following BACB, employer and legal requirements (such as privacy laws), and to maintain confidentiality when handling client information and records.

The code also sets specific limits. RBTs discuss confidential client information only under the direction of their supervisor, unless the law allows sharing for a valid reason, such as protecting the client or others from harm. They share only the information that is necessary in job-related communications such as emails and documentation. They do not share identifying information, including photos, videos and written information, about clients on social media or websites.

Day-to-day confidentiality includes not discussing clients in public places, not leaving data sheets or devices unattended, using only approved, secure systems for messages and records, not using a client's name in personal conversations, and not confirming to an outside person that someone is a client unless authorized. Task F.5 covers the full cycle of collecting, using, storing, protecting and disclosing confidential information.

When an RBT is unsure whether they can share something, such as when a teacher, relative or another provider asks about a client, they check with their supervisor before sharing.

Example and non-example

ExampleA neighbor asks an RBT, "Isn't that the boy you work with? What's wrong with him?" The RBT politely says they cannot talk about their work and changes the subject.
Non-exampleAn RBT posts a photo of a client's artwork on social media with the client's first name, because the caregiver told them it was fine. The ethics code prohibits sharing identifying client information on social media, so this breaches confidentiality.

Don't confuse it with

Protected health information (PHI)Protected health information is a U.S. legal category of health data; confidentiality is the broader duty to protect all client information.
Client dignityClient dignity concerns respectful treatment in every interaction, while confidentiality concerns protecting information.

Test yourself

3 questions

  1. Question 1After scoring a client's worksheets, an RBT is left with papers that show the client's name and work. What should the RBT do with them?

    Show answer

    C: Store or dispose of them per confidentiality rules. Permanent products with client information are confidential records. The RBT Ethics Code requires RBTs to protect client confidentiality and follow employer and legal requirements for records.

    • A: Leaving identifiable client work in a shared space risks a breach of confidentiality.
    • B: RBTs must not share identifying client information, including photos, on social media or websites.
    • D: Client information is shared only as needed and as directed by the supervisor.

    Task A.3 · 40-hour curriculum section C · RBT Ethics Code 2.08 · RBT Ethics Code 2.09

  2. Question 2An RBT has finished a home session and needs to enter data into the clinic's electronic data system. Which practice protects the client's confidentiality?

    Show answer

    A: Using an approved device where no one else can see the screen. Client data are confidential records. RBTs follow employer and legal requirements, which includes using approved systems and keeping others from viewing client information.

    • B: Personal accounts are outside the organization's protected systems and put client records at risk.
    • C: Data entry is the RBT's job duty, and the record should stay within the organization's procedures.
    • D: Sharing client information on social media is prohibited, even with staff.

    Task A.4 · 40-hour curriculum section C · RBT Ethics Code 2.08 · RBT Ethics Code 2.09

  3. Question 3An RBT has finished filling out a paper assessment protocol with a client's name and scores. What should the RBT do with it?

    Show answer

    C: Store it as the organization's policy requires for client records. Assessment protocols contain confidential client information. RBTs follow the BACB, employer and legal requirements for storing and protecting client records.

    • A: A personal phone is not an approved place to keep confidential client records.
    • B: Leaving records in a backpack risks loss and access by others.
    • D: A personal email account is not a secure, approved place for client records.

    Task B.2 · 40-hour curriculum section D · RBT Ethics Code 2.08

Answer every question to see your score.

On the RBT exam

This term belongs to task F.5 Confidentiality in content area F, Ethics, which is 11 of the 75 scored questions.

Related terms