Privacy Considerations in Reference Letters

Privacy and Reference Letters

Writing a reference letter often means sharing personal information about someone else. You are describing their character, their behavior, their circumstances, and sometimes their struggles. That responsibility comes with an obligation to think carefully about what you share, who will read it, and whether the person you are writing about has agreed to it.

Privacy in reference letters is not just a legal concept. It is a practical and ethical one. Sharing too much personal information can embarrass the person you are trying to help, violate their trust, or create legal problems for you as the letter writer. Sharing too little can produce a vague letter that does not accomplish its purpose.

The goal is to include enough specific, relevant information to make your letter effective while respecting the boundaries of what is appropriate to disclose.

The information in your reference letter should be relevant to the letter's purpose and within the scope of what you have personally observed or been told directly.

Appropriate to share:

Your relationship to the person and how long you have known them
Character traits you have witnessed firsthand, with specific examples
Positive behaviors or contributions you have personally observed
General context about their life situation when it is relevant to the letter's purpose
Facts the person has asked you to include or confirmed they are comfortable with

Think carefully before sharing:

Specific medical diagnoses or health conditions
Financial details like income, debts, or account balances
Mental health information or therapy history
Details about other family members, especially children
Information about past legal issues not related to the current matter
Relationship or marital problems
Substance use history (unless the person has asked you to address it)

Generally inappropriate to share:

Information the person told you in confidence and has not authorized for the letter
Details about other people who are not the subject of the letter
Medical information you learned through a professional relationship (if you are a healthcare provider)
Gossip, rumors, or information you heard secondhand
Anything you would not be comfortable saying to the person's face

A useful test: before including a piece of personal information, ask yourself whether the person you are writing about would be surprised or uncomfortable to learn you had shared it. If the answer is yes, leave it out or ask them first.

Medical and Financial Privacy

Medical and financial information carry extra sensitivity because they are protected by specific laws and because their disclosure can have lasting consequences.

Medical privacy: If you are a healthcare provider, HIPAA (the Health Insurance Portability and Accountability Act) restricts what medical information you can disclose about a patient. Even if a patient asks you to write a character reference letter, HIPAA limits what you can share without a proper written authorization. If you are not a healthcare provider, HIPAA does not apply to you directly, but the principles of medical privacy still matter ethically.

If you are writing a letter that mentions someone's health situation, stick to what they have explicitly asked you to include. Instead of naming specific diagnoses, you might describe the impact you have observed: "I have watched Sarah manage a serious health challenge over the past two years with remarkable determination" is different from disclosing specific medical details.

Financial privacy: Reference letters sometimes touch on financial circumstances, particularly in hardship letters or court letters where the person's financial situation is relevant. Be cautious about including specific dollar amounts, debt figures, or income details unless the person has provided that information specifically for the letter. Describing financial hardship in general terms is often sufficient and less intrusive.

If you are an employer writing a reference and you have access to the person's salary or financial data through your position, sharing that information in a reference letter could violate company policy or employment law, depending on your jurisdiction.

The safest approach to privacy in reference letters is simple: talk to the person before you write the letter and ask what they are comfortable with you sharing.

Before writing, discuss:

What the letter is for and who will read it
What specific information or examples they would like you to include
Whether there are topics they do not want you to mention
Whether they have any documents or context that would help you write accurately

Get explicit consent for sensitive topics. If the letter needs to address a difficult situation (substance abuse recovery, mental health challenges, financial hardship), confirm that the person wants you to address it and how much detail they are comfortable with. "I would like you to mention that I completed a treatment program" is a clear green light for that specific piece of information. It is not permission to describe their entire treatment history.

Written consent is stronger than verbal. For letters that will be used in legal proceedings or formal applications, having the person's written consent to share specific information protects both of you. This does not need to be a formal legal document. An email confirming what they would like you to include is sufficient in most cases.

Consent can be withdrawn. If the person changes their mind about what they want shared, respect that. Update or rewrite the letter if necessary.

Third-Party Privacy Concerns

Your reference letter is about one person, but it may involve details about others. Children, spouses, family members, coworkers, and community members can all appear in the narrative of a reference letter. Their privacy matters too.

Children deserve special protection. If you are writing about someone's parenting qualities for a custody case, you may need to mention their children. Use first names or initials only, avoid sharing identifying details about the children's schools or activities that could identify them to strangers, and focus on the parent's behavior rather than the children's personal information.

Spouses and partners may appear in your letter as context. Avoid sharing private details about the person's relationship or their partner's personal life. If you are writing about a divorce-related hardship, for example, you can describe the financial impact without characterizing the other person's behavior.

Coworkers and colleagues mentioned in employment references should be referenced in general terms unless they have consented to being named. "Several team members have told me they rely on her leadership" is better than naming specific people without their knowledge.

Victims in criminal cases should never be named, characterized, or discussed in a character reference letter for the defendant. This is both a privacy issue and a strategic one. The attorney handling the case can advise you on appropriate boundaries.

Practical Privacy Guidelines

Here are concrete steps you can take to protect privacy while writing an effective reference letter.

Include only what is relevant. Every piece of personal information in your letter should serve the letter's purpose. If a detail does not help establish the person's character, support their request, or provide context the reader needs, leave it out.

Use the minimum necessary detail. This is a principle borrowed from HIPAA, but it applies broadly. Share enough information to make your point, but not more than necessary. "She has faced significant health challenges" may be sufficient context without naming the specific condition.

Let the subject review the letter. Before submitting your letter, show it to the person you are writing about. They can flag anything they are uncomfortable with, correct inaccuracies, and confirm they are happy with what you have written. This step also protects you from unintentionally sharing something sensitive.

Consider the letter's audience. A letter submitted to a court may become part of the public record in some jurisdictions. A letter for an employer will likely be seen by HR staff and hiring managers. Knowing who will read your letter helps you calibrate how much personal information to include.

When in doubt, ask. If you are unsure whether a piece of information is appropriate to share, ask the person you are writing about. If they are unavailable, err on the side of sharing less rather than more.

Questions People Often Ask

Can a reference letter become part of the public record? In some court proceedings, yes. Documents submitted to a court may be accessible to the public depending on the jurisdiction and case type. If your letter contains sensitive personal information, this is worth discussing with the attorney before submission.

What if the person asks me to include information I am uncomfortable sharing? You are not obligated to include anything you do not want to put your name on. If the person asks you to share details you believe are too private, irrelevant, or potentially harmful, you can explain your concern and suggest a different approach. Your integrity as a letter writer matters.

Does HIPAA apply to me as a reference letter writer? HIPAA applies to "covered entities" (healthcare providers, health plans, healthcare clearinghouses) and their business associates. If you are not a healthcare provider and you did not learn the information through a healthcare role, HIPAA technically does not restrict you. But the ethical principle of protecting someone's medical information applies regardless of whether HIPAA covers you.

Can I mention someone's criminal history in a reference letter? This depends heavily on the context. In a court character reference letter, the criminal matter is already known to the judge. In an employment reference, sharing someone's criminal history may violate state laws or company policies. Consult the attorney or check your state's rules before including criminal history in a reference.

Getting Started

Writing a reference letter that is both effective and privacy-conscious takes thought, but it is not complicated. LetterLotus's questionnaire tool helps you organize your observations and produce a clear, focused letter. For more about what our tool does and does not do, visit our disclaimer page.