How do I provide evidence of the confidentiality procedures applying to both staff and board members?

You should submit documentation that describes the policy and/or procedures used to ensure that information is kept private and confidential. Evidence that the policy applies to both staff and board members may include, for example, a sampling of signed confidentiality statements by staff and board members - one or two samples from each group should be sufficient.