Image Description: Brown & Cream Coloured Image Depicting a Typewriter With Wording "Safeguarding" Typed On Paper. Image Credit: PhotoFunia.com Category: Vintage Typewriter.

Safeguarding, GDPR & Welfare Concerns

Disclaimer: What You Can and Cannot Do When Someone Vulnerable Reaches Out

This article is for general information, awareness and signposting only. It does not constitute legal advice, safeguarding advice, medical advice, financial advice, benefits advice or professional casework support.

Disabled Entrepreneur UK is not a law firm, emergency service, safeguarding authority, benefits adviser, housing adviser, mental health provider, social services department, or regulated advocacy service. We cannot act as your solicitor, caseworker, representative, emergency contact or intermediary.

If someone is in immediate danger, call 999. If someone needs urgent medical or mental health help but it is not an immediate life-threatening emergency, contact NHS 111. If you are worried about an adult or child at risk, contact the relevant local authority safeguarding team, social services, the police, or another appropriate statutory service.

Where appropriate, Disabled Entrepreneur UK may be able to provide general signposting or pass enquiries to affiliate no-win-no-fee legal partners, but legal providers must assess any case directly. There is no guarantee that any case will be accepted.

When a vulnerable person reaches out for help, compassion must be balanced with safeguarding, privacy, consent, GDPR, and professional boundaries. Helping does not mean taking over someone’s case. Sometimes the safest thing you can do is signpost, document concerns, encourage the person to contact the correct organisation, and escalate only where there is a serious risk of harm.

Introduction: When Helping Becomes Overwhelming

Many people who run disability, health, welfare, legal awareness, community, or advocacy websites may one day receive a distressing email from someone who is vulnerable, desperate, hungry, suicidal, homeless, abused, neglected, without benefits, or unable to get help from official organisations.

The instinct may be to help immediately. However, safeguarding must be handled carefully. There is a difference between:

  • Listening with compassion;
  • Signposting someone to the right support;
  • Helping them draft a letter;
  • Raising a safeguarding concern;
  • Contacting emergency services;
  • Acting as their caseworker;
  • Giving legal advice;
  • Sharing their personal data without authority.

The wrong approach can accidentally cause more harm, breach confidentiality, create false expectations, or place an untrained person in a position of responsibility they are not qualified or insured to hold.

The aim is not to turn vulnerable people away. The aim is to help safely, lawfully, and proportionately.

What Is Safeguarding?

Safeguarding means protecting people from abuse, neglect, exploitation, harm and avoidable danger.

Safeguarding can apply to both adults and children. It may involve concerns about:

  • Abuse;
  • Neglect;
  • Self-neglect;
  • Domestic abuse;
  • Coercive control;
  • Financial exploitation;
  • Modern slavery;
  • Homelessness;
  • Food poverty;
  • Lack of medication;
  • Mental health crisis;
  • Suicidal thoughts;
  • Disability-related vulnerability;
  • A person being unable to protect themselves;
  • An organisation failing to respond to serious welfare concerns.

In England, adult safeguarding duties are mainly connected to the Care Act 2014. The Care Act statutory guidance explains how local authorities should fulfil responsibilities around care, support, prevention, wellbeing and safeguarding.

In Wales, safeguarding adults is governed by the Social Services and Well-being (Wales) Act 2014. Welsh Government guidance says that if you are worried about an adult in your family or community, you can contact social services in the person’s area or call 101.

The Wales Safeguarding Procedures also state that practitioners are expected to report concerns about adults or children at risk to the relevant local authority social services department.

What You Can Do When Someone Vulnerable Contacts You

If someone contacts you in distress, there are practical and safe steps you can take.

1. Acknowledge Their Message

You can acknowledge that you have received the message and that you are sorry they are experiencing difficulties.

Use calm wording such as:

“Thank you for contacting us. I am sorry you are going through this. From what you have described, this sounds urgent and you should contact the appropriate support services directly.”

2. Encourage Emergency Help Where Needed

If the person appears to be in immediate danger, at risk of suicide, without essential medication, being abused, or unable to keep themselves safe, encourage them to contact emergency services.

Use direct wording:

“If you are in immediate danger or feel at risk of harming yourself, please call 999 now or go to A&E.”

3. Signpost to the Right Organisation

You can signpost people to:

  • Emergency services;
  • NHS 111;
  • Samaritans;
  • Local Adult Social Care
  • Local Children’s Services;
  • Police non-emergency 101;
  • Citizens Advice;
  • Shelter;
  • Foodbanks;
  • GP surgery;
  • Mental health crisis teams;
  • Domestic abuse services;
  • Legal advice providers;
  • Welfare rights advisers;
  • Housing associations;
  • Local council hardship schemes.

4. Provide General Draft Wording

You may help someone structure an email to send to themselves. This can be very useful for vulnerable people who are overwhelmed, distressed, disabled, neurodivergent, traumatised or unsure how to explain their situation.

However, you should make it clear that:

  • They must send it themselves;
  • They must check that the facts are accurate;
  • They must decide what personal information to include;
  • You are not acting as their representative;
  • They should not send you unnecessary sensitive documents.

5. Keep Boundaries Clear

A safe boundary statement might say:

“We can provide general signposting and draft wording, but we cannot act as your caseworker, legal representative, advocate, emergency contact or intermediary.”

This protects both the vulnerable person and the person receiving the message.

What You Cannot Do

Unless you are properly qualified, authorised, insured and regulated, you should not:

  • Give legal advice;
  • Advise on benefits entitlement as a regulated welfare adviser;
  • Act as a solicitor or claims handler;
  • Act as someone’s caseworker;
  • Manage their DWP, housing, NHS, council, or legal correspondence;
  • Store passports, medical records, or benefit records unnecessarily;
  • Make safeguarding decisions yourself;
  • Promise that an organisation will act;
  • Promise that a solicitor will take their case;
  • Contact multiple organisations with sensitive information without a lawful basis;
  • Forward full email chains without thinking about consent, necessity, and proportionality;
  • Take over responsibility for someone’s safety.

You can care deeply without taking legal or professional responsibility for the whole situation.

GDPR and Safeguarding: The Key Principle

GDPR does not prevent safeguarding. This is one of the most misunderstood areas of data protection.

The Information Commissioner’s Office says its Data Sharing Code of Practice is designed to help organisations share data in a “fair, safe and transparent way” while protecting privacy.

The key question is not simply: “Do I have consent?”

The better questions are:

  • Is there a genuine safeguarding or welfare concern?
  • What information is necessary to share?
  • Who needs to receive it?
  • What is the purpose of sharing it?
  • Is there a lawful basis?
  • Is the information accurate?
  • Is it proportionate?
  • Have I documented why I shared it?
  • Could the same result be achieved with less information?

GDPR requires lawful, fair and transparent handling of personal data. It does not require people to ignore serious risks.

Consent: When You Have It

If a person clearly gives permission for you to share information, that can help. For example, they may write:

“I give permission for you to contact Adult Social Care, Citizens Advice and my housing association about this matter.”

However, consent should be:

  • Clear;
  • Specific;
  • Informed;
  • Freely given;
  • Documented;
  • Limited to the purpose;
  • Capable of being withdrawn.

Even with consent, you should still only share necessary information.

For example, if the concern is that someone has no food, no benefits, and may be unsafe, you may not need to forward their entire life history, medical records, trauma disclosures, or identity documents. You may only need to say:

“This person has contacted us stating they are vulnerable, without income, struggling to access support, and may need urgent welfare assistance. They have given permission for this concern to be shared.”

Consent Is Not Always Required in Safeguarding

In some high-risk situations, information may be shared without consent.

The ICO states in its safeguarding children guidance that one common myth is that consent is always needed; it explains that consent is not required to share a child’s data for safeguarding purposes.

For adults, the position is more nuanced because adults generally have the right to make their own decisions, even unwise ones, if they have mental capacity. However, information sharing without consent may still be justified where there is serious risk, an emergency, abuse, neglect, coercion, exploitation, vital interests, legal obligation, public task, or safeguarding necessity.

The ICO explains that “vital interests” may apply where processing personal data is necessary to protect someone’s life, but it is limited and generally applies to matters of life and death.

Where sensitive data is involved, such as health, mental health, medication, disability, race, sexual life or other special category data, the ICO says organisations need both an Article 6 lawful basis and an Article 9 condition under UK GDPR.

The Data Protection Act 2018 also includes substantial public interest conditions, including the safeguarding of children and individuals at risk.

In plain English: GDPR should not be used as an excuse to ignore someone at serious risk, but it also does not give permission to share everything with everyone.

Authorised Email Sharing: What Does It Mean?

Authorised email sharing means that personal information is shared in a lawful, necessary and proportionate way.

It may be authorised because:

  1. The person has given clear consent.
  2. There is a safeguarding concern.
  3. There is a serious risk of harm.
  4. There is a legal obligation.
  5. A public authority needs the information to carry out its statutory functions.
  6. Sharing is necessary to protect someone’s vital interests.
  7. Sharing is necessary for substantial public interest reasons, such as safeguarding a person at risk.

However, authorised sharing does not mean forwarding everything without thought.

Before forwarding an email, ask:

  • Does the recipient need the full email chain?
  • Could I summarise the concern instead?
  • Does the email contain unnecessary medical, financial or trauma details?
  • Has the person consented?
  • Is there a high-risk reason to share without consent?
  • Am I sharing with the correct organisation?
  • Have I removed irrelevant third-party information?
  • Have I kept a note of why I shared it?

When Organisations Ask for Full Disclosure of Emails

Some organisations will not act unless they can see the full email chain, screenshots, dates, documents, or evidence. This can be frustrating, especially where a vulnerable person is asking for urgent help.

There are reasons why organisations may request disclosure:

  • To verify consent;
  • To understand the timeline;
  • To confirm what was said;
  • To identify risk;
  • To prevent fraud;
  • To decide whether safeguarding thresholds are met;
  • To assess whether they have legal responsibility;
  • To protect staff, service, and users;
  • To avoid acting on inaccurate or incomplete information.

However, organisations should still follow data protection principles. They should not demand excessive information if a summary would be sufficient. They should explain what they need, why they need it, and how the information will be used.

A practical compromise is to send a short safeguarding summary first and state that further information can be provided with the person’s consent or if legally required.

Welfare Checks: What Are They?

A welfare check is a visit, call, or other contact made to check whether a person is safe and well.

Welfare checks may be carried out by:

  • Police;
  • Adult Social Care
  • NHS services;
  • Mental health teams;
  • Housing associations;
  • Local councils;
  • Homelessness teams;
  • Support workers;
  • Family members or carers;
  • Other appropriate professionals.

A welfare check may be needed if someone:

  • Has not been seen or heard from;
  • Has no food, money, heating, or medication;
  • Appears suicidal or at risk of self-harm;
  • Is experiencing abuse or neglect;
  • Is being exploited;
  • Is unable to care for themselves;
  • Has serious mental health concerns;
  • Is confused, distressed, or vulnerable;
  • Has made alarming disclosures by email, text, or phone;
  • Is refusing contact but may be at serious risk.

Should Social Care Do Welfare Checks?

Where a vulnerable adult appears to be at risk, Adult Social Care should assess the concern and decide what action is required. This may include a welfare call, referral, care assessment, safeguarding enquiry, contact with other agencies, or a visit.

In England, local authorities have safeguarding duties under the Care Act 2014 where they have reasonable cause to suspect that an adult has care and support needs, is experiencing or at risk of abuse or neglect, and is unable to protect themselves because of those needs.

In Wales, an adult at risk is defined in the Social Services and Well-being (Wales) Act 2014 as an adult who is experiencing or at risk of abuse or neglect, has needs for care and support, and because of those needs is unable to protect themselves.

Not every welfare concern will meet the formal safeguarding threshold, but that does not mean the concern should be ignored. Social care, housing providers, GPs, mental health teams and voluntary organisations may still be able to offer support, signposting, referrals, food support or crisis help.

Foodbanks, Food Vouchers and GP Referrals

If someone has no food or no money for food, this can quickly become a safeguarding and welfare concern, especially if the person is disabled, elderly, mentally unwell, medically vulnerable or isolated.

Food banks often operate through referral systems. Citizens Advice states that if someone cannot go to Citizens Advice, they may be able to ask for a referral from another organisation, such as a GP, housing association or social worker.

Trussell also explains that people can get food vouchers from local community organisations that can ensure they receive the right support.

People in crisis may be able to ask the following for a food bank referral or emergency support:

  • GP surgery;
  • Citizens Advice;
  • Social worker;
  • Housing association;
  • Local council;
  • Mental health team;
  • Support worker;
  • School or college;
  • Charity;
  • Local church or community group;
  • Homelessness team;
  • Domestic abuse service.

They may also ask the local council about crisis grants, discretionary assistance, local welfare support, hardship schemes or household support schemes, depending on where they live.

What to Do If You Are Concerned About Someone’s Wellbeing

Do

  • Take the concern seriously.
  • Stay calm and factual.
  • Encourage them to contact emergency services if there is immediate danger.
  • Ask whether they are safe right now.
  • Ask whether they consent to you sharing limited information with a relevant organisation.
  • Encourage them to contact Adult Social Care, Citizens Advice, GP, NHS 111, police, or housing provider.
  • Keep a written note of what they disclosed, when, and what you advised.
  • Share only necessary information.
  • Use official contact routes.
  • Protect your own boundaries.
  • Signpost to specialist help.
  • Encourage them to send emails themselves where possible.
  • Use draft wording to empower them.
  • Escalate if there is a serious risk of harm.

Do Not

  • Promise confidentiality if there is a serious safeguarding risk.
  • Promise you can fix the situation.
  • Take over the case.
  • Give legal advice unless qualified and authorised.
  • Diagnose mental health conditions.
  • Store unnecessary documents.
  • Forward passports, medical records, or trauma disclosures unless necessary.
  • Share information with random third parties.
  • Contact organisations without a clear reason.
  • Allow yourself to become the only support person.
  • Ignore suicide, self-harm, abuse, neglect, starvation, homelessness, or medical risk.
  • Assume someone else will act.
  • Put yourself at risk emotionally, legally, or physically.

Practical Rule: Minimum Necessary Information

When sharing safeguarding information, use the minimum necessary information.

For example:

Too much information

Forwarding a full email chain containing passport details, medication lists, trauma history, suicide attempts, medical records, financial details, family disputes and third-party names to multiple organisations.

Safer approach

Sending a short factual summary:

“A vulnerable adult has contacted us stating they have been without benefits since October, have serious health and mental health conditions, may not have enough food, and is struggling to get support. They have given permission for a safeguarding/welfare concern to be raised. Please confirm whether Adult Social Care, welfare rights, housing support or another relevant team can contact them urgently.”

This approach protects the person’s dignity and reduces the risk of unnecessary data sharing.

Generic Email 1: Asking Adult Social Care for a Welfare Check

Subject: Urgent Welfare Concern Regarding a Vulnerable Adult

Dear Adult Social Care Team,

I am contacting you because I am concerned about the welfare of a vulnerable adult.

The person has disclosed that they are experiencing significant hardship and may be at risk due to health, mental health, financial, housing, food or safeguarding concerns.

The key concerns are:
The person may be vulnerable due to disability, illness, mental health difficulties or care and support needs.
They may be without adequate income, food, medication, support, or safe living conditions.
They may be struggling to access help from relevant organisations.
There may be a risk of neglect, self-neglect, deterioration, or harm.

Please assess whether a welfare check, safeguarding referral, care assessment, crisis support or signposting to appropriate services is required.

The person has given consent for this concern to be shared: Yes / No / Unable to confirm.

If further consent or a formal referral form is required, please advise urgently.

Please confirm receipt of this email and advise what action will be taken.

Kind regards,
[Your Name]

Generic Email 2: Person Asking for Their Own Welfare Support

Subject: Urgent Request for Welfare and Safeguarding Support

Dear Sir/Madam,

I am writing to request urgent help because I am vulnerable and struggling to cope.

I am experiencing the following difficulties:
No or reduced income.
Difficulty accessing benefits, housing, medical, or social care support.
Food poverty or difficulty buying essentials.
Health or mental health concerns.
Risk of harm, neglect, self-neglect or deterioration.
Difficulty communicating with organisations.

I am asking for urgent advice and support. Please assess whether I need:
A welfare check;
A safeguarding referral;
Adult Social Care support;
Benefits advice;
Housing support;
Foodbank referral;
Mental health support;
Crisis support;
Reasonable adjustments.

I give consent for relevant organisations to share necessary information with each other where this is needed to help resolve my welfare and safeguarding concerns.

Please confirm receipt of this email and tell me what action will now be taken.

Kind regards,
[Your Name]

Generic Email 3: Requesting a Foodbank Referral

Subject: Urgent Request for Foodbank Referral or Food Voucher

Dear Sir/Madam,

I am contacting you because I urgently need help with food.

I am currently struggling to afford food and essential items. Please can you advise whether you can issue a food bank voucher, refer me to a local food bank, or direct me to emergency food support?

I may also need help with:
Benefits;
Housing;
Debt;
Energy bills;
Medical needs;
Social care;
Mental health support;
Local welfare assistance.

Please let me know what information you need from me and whether you can make an urgent referral.

Kind regards,
[Your Name]

Generic Email 4: Giving Consent for Information Sharing

Subject: Consent to Share Information for Welfare and Safeguarding Support

Dear Sir/Madam,

I give consent for relevant organisations involved in my welfare, safeguarding, housing, benefits, health or support needs to share necessary information with each other for the purpose of helping me access support.

This may include communication between:
Adult Social Care
Citizens Advice;
My housing provider;
My GP or NHS services;
DWP or benefits departments;
Local council services;
Welfare rights advisers;
Relevant charities or support organisations.

I only consent to information being shared where it is necessary, proportionate and relevant to my welfare, safeguarding, benefits, housing, health or support needs.

Please confirm if you require a specific consent form.

Kind regards,
[Your Name]

Generic Email 5: Raising a Concern Without Consent Due to High Risk

Subject: Urgent Safeguarding/Welfare Concern – Possible Serious Risk

Dear Sir/Madam,

I am contacting you to raise an urgent welfare or safeguarding concern.

I do not have clear consent to share full personal information at this stage / I am unable to confirm consent, but I believe there may be a serious risk of harm, neglect, self-neglect, deterioration, or crisis.

The concern is as follows:
[Brief factual summary only]

I am sharing this limited information because I believe it may be necessary and proportionate for safeguarding or welfare purposes.

Please assess whether action is required and advise whether this should be treated as a safeguarding concern, welfare check, care assessment, crisis response or referral to another appropriate service.

Kind regards,
[Your Name]

Legal and Data Protection Considerations

The relevant legal framework may include:

The law expects organisations to protect personal data, but it also recognises that information may need to be shared to prevent serious harm.

The safest approach is:

  1. Get consent where possible.
  2. Share only what is necessary.
  3. Use official channels.
  4. Keep records.
  5. Do not delay emergency action where life or safety is at risk.
  6. Ask the relevant safeguarding authority for guidance if unsure.
  7. Do not use GDPR as an excuse to ignore serious risk.
  8. Do not use safeguarding as an excuse to share excessive information.

How Small Organisations and Bloggers Can Protect Themselves

If you run a website, blog, charity, campaign group, or small organisation, consider having:

  • A safeguarding page;
  • A privacy policy;
  • A disclaimer;
  • A referral policy;
  • A data retention policy;
  • A clear statement that you are not an emergency service;
  • A clear statement that you cannot provide legal advice;
  • A clear statement that you cannot act as a caseworker;
  • A process for responding to crisis messages;
  • Template replies for vulnerable people;
  • A list of emergency contacts;
  • Boundaries around receiving sensitive documents;
  • A consent wording template;
  • A record of safeguarding concerns and actions taken.

This protects both the vulnerable person and the organisation.

Final Thoughts: Compassion With Boundaries

Safeguarding is not about taking over someone’s life. It is about recognising risk and helping the person reach the right support.

If someone is vulnerable, hungry, suicidal, abused, neglected, without medication, without benefits, homeless, or unable to protect themselves, it is not enough for organisations to hide behind bureaucracy or say “GDPR” without considering safeguarding duties.

At the same time, individuals, bloggers, campaigners, and small organisations must be careful. Sharing too much information, acting without authority, or becoming someone’s unofficial caseworker can create legal, emotional and safeguarding risks.

The best approach is compassionate, factual, lawful, and proportionate:

  • Listen;
  • Signpost;
  • Document;
  • Encourage direct contact with official services;
  • Get consent where possible;
  • Share only necessary information;
  • Escalate serious risk;
  • Protect boundaries;
  • Do not ignore danger.

Helping someone safely is still helping.

Further Reading & Resources

Content Writing & Research For Law Firms, Infographic. Image Credit: The UK Website Designers Group. Copyright 2026
Renata MB Selfie
Editor - Founder |  + posts

Renata The Editor of DisabledEntrepreneur.uk - DisabilityUK.co.uk - DisabilityUK.org - CMJUK.com Online Journals, suffers From OCD, Cerebellar Atrophy & Rheumatoid Arthritis. She is an Entrepreneur & Published Author, she writes content on a range of topics, including politics, current affairs, health and business. She is an advocate for Mental Health, Human Rights & Disability Discrimination.

She has embarked on studying a Bachelor of Law Degree with the goal of being a human rights lawyer.

Whilst her disabilities can be challenging she has adapted her life around her health and documents her journey online.

Disabled Entrepreneur - Disability UK Online Journal Working in Conjunction With CMJUK.com Offers Digital Marketing, Content Writing, Website Creation, SEO, and Domain Brokering.

Disabled Entrepreneur - Disability UK is an open platform that invites contributors to write articles and serves as a dynamic marketplace where a diverse range of talents and offerings can converge. This platform acts as a collaborative space where individuals or businesses can share their expertise, creativity, and products with a broader audience.

Spread the love