What information collected by NPMs may be considered confidential?

Information gathered by NPMs can include sensitive personal data, including medical records, discipline records, or information that may allow the identification of a person without their consent. 

References to the type of information that may be confidential by NPMs may be found in domestic NPM legislation, as well as data protection and privacy laws, and in international instruments on treatment of detainees such as the Nelson Mandela Rules and the Bangkok Rules.