Confidential information is information entrusted by an individual in confidence, where there is a general obligation not to disclose that information without consent.
Confidential information may include personal information such as name, age, address, and personal circumstances, as well as sensitive personal information regarding race, health, sexuality, etc.
Confidential information may be known, or stored on any medium. Photographs, videos, etc are subject to the same requirements as information stored in health records, on a computer, or given verbally.
Information that identifies individuals personally is assumed to be confidential, and should not be used unless absolutely necessary. Whenever possible, anonymised data—from which personal details have been removed and which therefore cannot identify the individual—should be used instead. Note however that even anonymised information can only be used for justified purposes.