Confidentiality of Laboratory Testing and Cofrac Accreditation

Commissioning testing from BJL Laboratoires involves providing samples and information that may be sensitive. Confidentiality covers not only test results but also the client's identity, the origin of samples and the technical information supplied to carry out the service.

BJL Laboratoires undertakes to treat non-public information received or generated during its services as confidential, subject to authorised disclosures and applicable legal obligations.

How Are Cofrac Accreditation and Confidentiality Connected?

Testing laboratory accreditation is based on NF EN ISO/IEC 17025. Clause 4.2 addresses the confidentiality of information obtained or generated during laboratory activities.

The laboratory must manage this responsibility through legally enforceable commitments. These requirements also extend to individuals acting on its behalf.

Information made publicly available by the client and information whose disclosure has been agreed are specific exceptions. When disclosure is required by law or authorised by contractual arrangements, the client must be notified of the information provided, unless notification is prohibited by law.

Information about a client obtained from a third party is also protected. The identity of its source must not be disclosed to the client without the source's agreement.

BJL Accreditation: A Defined Scope

BJL Laboratoires holds Cofrac accreditation No. 1-0973. The current scope specifies the activities covered, including the sample matrices, measured characteristics and methods concerned.

The confidentiality of a project does not mean that every analysis within it is accredited. A specific study, method development project or service outside the scope retains its own accreditation status.

View the BJL Laboratoires Cofrac accreditation certificate and scope.

What Information Is Covered?

Depending on the service, confidential information may include:

• the client's identity and contact details;
• the existence and purpose of a testing request;
• construction project, site, product or batch references;
• the origin and identification of samples;
• photographs, drawings and technical documents supplied;
• compositions, formulations and process information;
• results, analytical data and test reports;
• observations relating to contamination or non-conformity;
• communications and investigation findings.

The sensitivity of a project does not depend on its outcome: a negative result, a non-detect result or a feasibility study may also constitute confidential information.

Who Can Receive Test Results?

Report recipients must be defined through the order arrangements and the client's authorisations. A request from a third party does not, on its own, authorise the release of a client file.

If a report needs to be sent to an engineering consultancy, project owner, facility operator, adviser or another contact, identify the authorised recipients when placing the order.

For sensitive projects, also specify the designated contacts and preferred delivery arrangements so that these can be agreed with the laboratory.

Are There Exceptions to Confidentiality?

Confidentiality is not an absolute promise of non-disclosure. Certain information may need to be communicated under legal, regulatory, judicial or contractual requirements applicable to the service.

A reporting obligation, a legally binding demand or a lawful request from a competent authority must be assessed according to its purpose and legal basis. Disclosure should be limited to the information necessary for that purpose.

Access to files required for accreditation assessments is another specific situation, distinct from the public disclosure of results.

Can Cofrac Examine Client Files?

During its assessments, Cofrac may need to examine evidence of how services have been performed, including technical files, records and reports.

Cofrac has its own confidentiality rules, described in GEN PROC 08. These govern information collected during the accreditation process and the commitments of individuals who have access to it.

Public information about accreditation must be distinguished from confidential information contained in client files. Publishing an accreditation scope does not make the laboratory's client results public.

View Cofrac's confidentiality rules.

Contamination, Formulations and Sensitive Industrial Projects

An investigation may require information about a raw material, equipment, formulation or production incident.

Before sharing particularly sensitive information, you may request a specific confidentiality agreement. This can define the information covered, recipients, permitted uses and arrangements for returning or retaining information, taking applicable obligations into account.

Coded sample references may also be considered, provided that the information needed for traceability and interpretation of results is retained.

Explore our contamination investigation service | Analytical expertise and consulting

Confidentiality and Record Retention

Confidentiality does not mean that documents are deleted immediately after a report is issued. Records may need to be retained for traceability or to meet contractual, standards-based or regulatory requirements.

Arrangements for retaining records and samples, and any requests for their return or destruction, must be assessed according to the service concerned.

Personal data protection is a related but separate matter: it is not the same as the confidentiality of technical or commercial information.

Frequently Asked Questions

Are My Results Automatically Published?

No. Ordering an analysis does not authorise the publication of your results or the use of your project as a commercial reference.

Does Testing Outside the Accreditation Scope Remain Confidential?

Yes. BJL's general confidentiality commitment also covers services outside its accreditation scope. This does not give them accredited status.

Can a Third Party Obtain My Report Simply by Asking the Laboratory?

A request alone is not sufficient. Disclosure must be supported by appropriate authorisation or an applicable legal or contractual basis.

Does Detecting a Pollutant Always Lead to Reporting to an Authority?

There is no single answer covering every service. Any reporting obligations depend on the regulatory and contractual context of the project. Confidentiality cannot override a legal obligation.

Can I Request a Confidentiality Agreement Before Sending Samples?

Yes. Raise this request before sharing sensitive information so that the terms can be reviewed and agreed.

References

• NF EN ISO/IEC 17025: General requirements for the competence of testing and calibration laboratories, Clause 4.2 on confidentiality.
• Cofrac accreditation certificate and scope No. 1-0973 (in French).
• Cofrac GEN PROC 08: confidentiality rules (in French).