Confidentiality is both a legal and an ethical duty