 The duty of confidentiality is a core consensus norm within health care (Currie 2005). One important manifestation of this consensus in the U.S. has been the development of the “certificate of confidentiality” whereby researchers declare that confidentiality is of especial interest to their subjects (Wolf and Zandecki 2006, Wolf et al. 2004). The technological age has given rise to the call for health care providers, even those who work alone or in small groups, to be aggressive in the adoption of responsible information practices. All would agree that office practices can and should be designed to protect the identity of clients and the privacy of conversations. Common understandings are that practitioners should be judicious in the collection of information; they should store treatment notes and records in a secure manner; they should share information only with consent or as required by law; and they should protect sensitive information in its online and off-line forms using locks, passwords, encryption and other appropriate devices. Sensitive information that is no longer needed should not be retained indefinitely.