Information Governance Strategy

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Information Governance Strategy"

Transcription

1 Information Governance Strategy To whom this document applies: All Trust staff, including agency and contractors Procedural Documents Approval Committee Issue Date: January 2010 Version 1 Document reference: 292 Date(s) reviewed: March 2011 Version 2 Approved by: Procedural Documents Approval Committee October 2011 Version 2a March 2012 Version 3 Date approved: March 2014 March 2014 Version 4 Next Review date: March 2016 Version No: 4 Responsibility for review: Head of Information Governance Contributors: Please See Procedural Development, Consultation Proposal Form page 2 Archiving information held by the secretary of the Procedural Documents Approval Committee Strategy: 292 Page 1 of 12

2 Procedural Development Consultation Proposal Form Title: Information Governance Strategy Policy Procedure Guideline Protocol Standard Strategy Name of person presenting document: Rees Millbourne Head of Information Governance Reason for document development/review: Review of document, minor changes made due to organisational changes. Names of development team (including a representative from all relevant disciplines): Rees Millbourne Head of Information Governance Who has been consulted? Medical Director (Caldicott Guardian) Director of Finance (Senior Information Risk Owner (SIRO)) Deputy Director of Finance Associate Director of ICT Does this document require presentation and agreement from Health and Safety Committee or Staff Partnership Forum prior to PDAC approval? Yes No Specify groups of staff to whom the document relates: All Trust staff, including agency and contractors Source of supporting evidence (references etc.): See Evidence Base. Are there resource implications? Yes No If yes please detail them: Does the Procedure/Guideline meet latest NHSLA, Risk Management Standards, Essential Standards of Quality and Safety (CQC)? Yes No Does this Procedure/Guideline include children, if applicable? 1. Does this document apply to children? Yes No 2. Are there aspects of this document that differ with regard to the treatment of children? Yes No If yes, please state who has been consulted A Trust review will occur every two years unless national guidance states otherwise. Date: March 2014 Procedure: 292 Page 2 of 12

3 Contents Review, Updating and Archiving of the Document 1 Document Development and Consultation Process 2 Contents 3 Introduction 4 Related Documents 4 1. Definition of Terms 5 2. Roles and Responsibilities 6 3. Process Core Measures to Protect Information Culture Stronger Accountability Stronger Scrutiny Implementation Information Governance Assurance Framework Confidential Information Steering Group Corporate Records Group Health Records Group Key Objectives 4. Training Evidence Base Monitoring Compliance and Audit Dissemination, Implementation and Access to the Document 12 Page No Procedure: 292 Page 3 of 12

4 Statement of Intent Effective use of information is absolutely central to the challenges faced by the Trust to improve the clinical management of individual patients or efficient management of services and resources in order to achieve Trust business objectives. The Trust needs to keep person identifiable and sensitive data secure, in order to build public confidence. This is essential to strengthen greater data sharing with other health organisations and other agencies in a controlled manner for the provision of healthcare to patients and in some circumstances for public interest. The Trust cannot guarantee that it will never experience loss of data but the organisation will ensure that high standards are implemented and maintained to protect information and meet public expectations. The document sets out how the Trust will: implement core measures to protect information, including personal data, to enhance consistency of protection and transparency of protection to others. develop a culture that properly values, protects and uses data both in planning and delivery of Trust services. implement strong accountability mechanisms, recognising that individual divisions, services and departments need to understand and address risks to information, including personal data in their areas; and implement processes of strong scrutiny of performance, to build confidence and ensure that lessons are learned and shared. Introduction This document sets out the approach Colchester Hospital University NHS Foundation Trust will take to develop and implement a robust Information Governance framework for the future management of information. The vision of the strategy is: To enable the Trust and its provider services to assure itself, its service users and its partners that information used, particularly person identifiable data, whatever its form or content, and whatever its context, will be processed in accordance with prevailing legislation and standards of best practice. During the implementation of electronic health records and Trust IT systems coupled with increased public concern and public awareness about safeguarding personal data, that Information Governance policies, processes and procedures are transparent, robust, safe and secure. To ensure that public confidence and trust in handling and processing person identifiable data is maintained and confirmed. To improve and assure its Information Governance related activities and to deliver year on year consolidation and improvements in its Information Governance Toolkit scores. Related Documents 239 Data Protection Procedure 297 Data Quality Policy 311 Data Transfer and Removable Media Policy 189 Health Records Procedure 238 Information Governance Procedure 291 Information Security Policy 314 Internet Policy 315 Internet Procedure Procedure: 292 Page 4 of 12

5 308 Network Security Policy 288 Release of Data to Outside Agencies Procedure (Police forces etc.) 318 Registration Authority Procedure 287 Responding to Requests made under the Freedom of Information Act 2000 and Environmental Information Regulations 2004 Procedure 350 Third Party Requests for Clinical and Personal Information Procedure (including patients and relatives) 1. Definition of Terms Information Governance Information Governance is a framework to ensure necessary safeguards for, and appropriate use of, personal information for both patients and staff. Information Governance Assurance Framework The NHS Information Governance Assurance Framework is the mechanism by which: Information Governance policies and standards are set regulators can check an organisation s compliance, and an organisation can be performance managed. The framework therefore includes an annual assessment using the Information Governance toolkit. Information Governance Toolkit (IGT) A tool with which the Trust self-assesses its compliance with current legislation, Government directives and other national guidance relating to information handling. The initiatives include: Information Governance management. confidentiality and data protection assurance. information security assurance. clinical information assurance. secondary use assurance. corporate information assurance. The NHS Health and Social Care Information Centre (HSCIC) Information Governance Statement of Compliance revised edition 2 (IGSoC2) NHS HSCIC is supporting the NHS to deliver better care, safer care, for patients by introducing new information technology systems and services which improve the way information is stored and shared in the NHS. All organisations wishing to access and use HSCIC systems and services, including the N3 network, must meet the terms and conditions in the IGSoC2. Information Assets Information assets come in many shapes and forms. It is generally sensible to group information assets in a logical manner e.g. where they all related to the same information system or business process. Person Identifiable Data/Information (PID/I) Information that allows the identification of an individual to be revealed, either explicitly or by implication. Identifiable data/information includes: name, address. Procedure: 292 Page 5 of 12

6 full postcode. date of birth. pictures, photographs, video, audio-tapes or other images of patients. NHS number and local patient identifiable codes. any grouping term such as baby, new-born baby. National Insurance numbers for staff. pay or sickness details for staff. anything else that may be used to identify an individual directly or indirectly. For example, rare diseases, drug treatments or statistical analyses which have very small numbers within a small population may allow individuals to be identified. N3 Network N3 is the name for the National NHS Network, which provides fast broadband networking services to the NHS. 2. Roles and Responsibilities Board of Directors In his communication to the Chief Executive, the NHS Chief Executive has made it clear that ultimate responsibility for Information Governance in the NHS rests with the Board of Directors for the organisation, who should note that: Information Governance must be explicitly referenced within each organisation s statement of internal controls. from 2009/10 onwards, the major NHS organisations must baseline their performance within the toolkit by the end of July each year and should update the assessment with improvements at end of October to enable performance and actions to be tracked by commissioners and other monitoring bodies. organisations must sign the Information Governance Statement of Compliance (IGSoC)2 to provide assurance that they are meeting these key requirements and must have robust improvement plans to address any shortfalls against other requirements. details of serious untoward incidents involving actual or potential loss of personal data or breach of confidentiality must be published in annual reports and reported to the Clinical Commissioning Group (CCG) and to the Information Commissioner, where appropriate. Foundation Trusts are subject to the same requirements, set out by Monitor. The contractual arrangements with independent sector NHS providers also contain strengthened Information Governance requirements. Chief Executive The Chief Executive as the Accounting Officer for the Trust has ultimate responsibility for ensuring that processes are in place. Senior Information Risk Owner (SIRO) The SIRO is an executive who is familiar with and takes ownership of the organisation s information risk policy and acts as advocate for information risk for the Board of Directors. The Director of Finance is the designated SIRO for the Trust and they will: be accountable. foster a culture for protecting and using data. provide a focal point for managing information risks and incidents. be concerned with the management of all information assets. Procedure: 292 Page 6 of 12

7 Caldicott Guardian The Caldicott Guardian is a senior person responsible for protecting the confidentiality of patient and service-user information and enabling appropriate information-sharing. The Guardian plays a key role in ensuring that NHS, Councils with Social Services responsibilities and partner organisations satisfy the highest practical standards for handling patient identifiable information. The Medical Director has been designated Caldicott Guardian for the Trust and they will: be advisory. be the conscience of the organisation. provide a focal point for patient confidentiality and information sharing issues. be concerned with the management of patient information. Head of Information Governance The Head of Information Governance is responsible for: overseeing the Information Governance systems and processes within the Trust. collating the evidence required for the Information Governance toolkit. developing the improvement plan for the following year s submissions. providing the organisation with Information Governance advice. carrying out operational duties on behalf of the Caldicott Guardian and SIRO. Directors and Associate Directors Directors and Associate Directors will have responsibility for the protection of person identifiable data and for identifying and managing any risk associated with this, within their own sphere of responsibility. Audit and Risk Assurance Committee/Executive Team The strategy will go to the Audit and Risk Committee for approval if there is a major review of the document. Minor changes can be approved by the SIRO or by the Executive Team. Divisions, Services and Departments Are responsible for: making Information Governance and measures to protect information, including personal data part of normal/everyday activity. setting and driving forward a culture that properly values, protects and uses data both in planning and delivery of Trust services. providing evidence for the IGT. adhering to Information Governance related procedures. ensuring breaches/near misses relating to Information Governance are reported using the organisations incident reporting procedure. informing the Head of Information Governance, Caldicott Guardian or SIRO of any Information Governance risk related information that needs urgent attention. All Staff For Information Governance, it is the responsibility of all staff to: be aware that they have a duty under legislation to protect information, especially Person Identifiable Data. report Information Governance incidents, including near misses, using the Trust s incident reporting system and learn from Information Governance incidents to reduce risks in the future. be familiar with the Trust s Information Governance Strategy and associated procedures and comply with these. Procedure: 292 Page 7 of 12

8 actively participate in the Trust s induction training and complete the mandatory IG e-learning and subsequent annual updates. report to line management any perceived Information Governance issues in their area of work. Information Asset Owners (IAO) Information Asset Owners are senior individuals involved in running the relevant business. Their role is to understand and address risks to the information assets they own and to provide assurance to the SIRO on the security and the use of those assets. Service Managers, Heads of Department or Associate Directors will be nominated as IAOs. Information Asset Administrators (IAA) Information Asset Administrators ensure that policies and procedures are followed, recognise actual or potential security incidents, consult their IAO on incident management, and ensure that information asset registers are accurate and up to date. The IAA will be a member of Operational staff responsible for one or more information assets as nominated by the IAO for the area of responsibility. 3. Process Core Measures to Protect Information The Department of Health (DH) has issued policy advice on how the Trust must manage information. The Trust must implement processes to: specify which data is person identifiable and requires higher levels of protection. A risk assessment should be performed if the level of data cannot be identified as to whether the higher level of protection should be applied to all information. ensure, where possible, such information should not be transferred, but it should be accessed on its home system or remotely via a secure channel. ensure, where transfer must occur, that this is done through secure electronic transfer so that discs are phased out where possible. ensure, where data has to be put onto removable media such as discs or laptops that the information transferred is minimised and uses encryption. secure disposal for paper or electronic records. use independent penetration testing to test Trust systems. put controls in place on access to information systems and logging and monitoring of use. increase the use of the accreditation process, developed to provide assurance to the Trust for systems holding personal data. Culture High levels of data security must be underpinned by a culture that values, protects and uses information. This culture is important both when services are being planned and when they are being delivered. This has to be led by the Board of Directors, but individual service areas/departments will be responsible for their own data security. Senior Managers will need to understand and actively manage any day to day operational processes that may wrongly lead staff to cut corners and expose information, in whatever form, to an unacceptable risk. Procedure: 292 Page 8 of 12

9 The Trust will regard any data loss as a cause for concern, and take immediate action to improve matters for the future. When problems occur, the culture has to be one in which losses are identified and learned from. This should apply to near misses as well as actual incidents. The Trust will take the following action: Introduce Privacy Impact Assessments, which ensure that privacy issues are factored into plans from the start, and those planning services are clear about their aims. These will be carried out in accordance with the Trust s Risk Management Strategy and Policy, document number 118. Information Governance elearning annual training will be completed by all Trust staff. Use existing processes such as the incident reporting system or the whistleblowing procedure by which individuals can bring concerns to the attention of senior management. Amend Trust policies and procedures where necessary to make clear that failing to apply to controls in handling personal data could result in disciplinary action. Stronger Accountability The onus is on the Trust to plan and secure the information it uses. The protection and use of data is part and parcel of organisational business. The Trust should aim to increase accountability by: establishing a process by which information assets are identified and allocated to a responsible owner. using the Information Governance toolkit and the incident reporting system to form part of an annual assessment to support the Chief Executive s judgement for the Statement on Internal Control for the Trust. Stronger Scrutiny The Trust will cover information assurance in its annual report and will report on information security annually via the Information Governance Toolkit submission. The commitment to stronger scrutiny will now be reinforced through: development and publication of an Information Charter, which will set out the standards that patients and staff can expect from the Trust when requesting, or holding their personal information, how they can get access to their personal data and what they can do if they think that these standards are not being met. consideration to be given for publicising material on specific information assets held, such as, what information is contained and used. Implementation The Trust will implement new technical protection for information as directed by the Government for information that it holds directly. The Trust will identify the protected personal data it holds, will roll out encryption to protect it in transit, and have minimised the use of removable media. The Trust should also work with delivery partners to ensure that they apply the same protections. It is acknowledged that it will take time to implement this strategy fully; some of the timescales have been set by Government and the Board of Directors should be informed in order to take appropriate action(s) if the timescales set by Government are at risk of not being achieved. Procedure: 292 Page 9 of 12

10 Information Governance Assurance Framework The central strategic responsibility for steering the Information Governance agenda forward within the Trust lies with the Audit & Risk Committee under its devolved responsibility from the Board of Directors, to whom it remains accountable. Audit & Risk Committee Confidential Information Steering Group Corporate Records Group Health Records Group Figure 1: Information Governance Assurance Framework Confidential Information Steering Group The Confidential Information Steering Group is a standing group accountable to the Audit & Risk Committee. Its purpose is to support and drive the broader Information Governance (IG) agenda and provide the Board with the assurance that effective information governance best practice mechanisms are in place within the organisation for the management of confidential information. Corporate Records Group This group is responsible to oversee and advise on all issues relating to corporate records within the Trust to support Information Governance which aims to ensure that corporate records, whether paper or electronic, are accessible and retrievable when and where required. The group escalates any issues, risks or noncompliance to the Confidential Information Steering Group. Health Records Group This group is responsible to oversee and advise on all issues relating to health records within the Trust to support the operational use of health records within the Trust and to support Information Governance. This group will also assist in the development of the Electronic Patient Record. Key Objectives for Senior leadership must continue to be provided as it demonstrates the importance of Information Governance and is critical in obtaining resources: To implement robust Information Governance assurance systems and processes. For all designated groups/committees to meet as stated within their terms of reference. To show improvement between the July submission and the October submission of the IGT. To achieve an overall score for the IGT of Compliant or Satisfactory for the March submission. To achieve full assurance in internal/external audits against requirements which are audited within the IGT. Procedure: 292 Page 10 of 12

11 4. Training The Trust recognises the importance of effective training and education to maintain its position as a quality healthcare provider and fully realises the potential of its staff. From an Information Governance perspective, a systematic and comprehensive strategy and education programme is crucial. It underpins the entire Information Governance process by making all staff aware of their roles and responsibilities for information management. The Trust has developed an accredited in-house elearning package which supports central guidelines for topic content. Identified trends in IG incidents are included in the training material to promote learning from incidents in an effort to reduce the reoccurrence rate. 5. Evidence Base Common law duty of confidentiality Data Protection Act 1998 Human Rights Act 1998 Freedom of Information Act 2000 Access to Health Records Act 1990 (where not superseded by the Data Protection Act) Computer Misuse Act 1990 (amended in 2005) Copyright, Designs and Patents Act 1988 (as amended by the Copyright Regulations 1992) Crime and Disorder Act 1998 Electronic Communications Act 2000 Regulation of Investigatory Powers Act 2000 Re-use of Public Sector Information Regulations 2005 Records Management NHS Code of Practice 2006 Confidentiality NHS Code of Practice 2003 Information Security Management NHS Code of Practice NHS Information Risk Management Data Handling Procedures in Government: Final Report June 2008 Information Governance Toolkit Information Governance Assurance Programme Documentation: Gateway reference: 9912 Gateway reference: Closure Document Privacy Impact Assessment Handbook Version 2.0 (Information Commissioner) The Operating Framework for the NHS in England 2012/13 The Caldicott 2 Review Department of Health September 2013 A guide to confidentiality in health & social care, Health & Social Care Information Centre September Monitoring Compliance and Audit Information Governance is not a linear process and requires perpetual review and adjustment in order to provide maximum protection. The Trust will ensure that processes and activities outlined within the strategy and the strategy document itself is updated annually. The Trust will use its routine management monitoring and audit tools and processes to monitor compliance with this strategy. Audits will be undertaken a minimum of Procedure: 292 Page 11 of 12

12 quarterly. Non-compliance will be reported to the Confidential Information Strategy Group, which reports up to the Audit and Risk Committee. Tools will include: IGT self-assessment. Internal audit on IGT requirements. Production of an annual report of Information Governance activities. Identifying whether the key objectives of this document have been achieved. 7. Dissemination, Implementation and Access to the Document This strategy is available on the Trust intranet. Staff are notified via , of the strategy and any amendments. Procedure: 292 Page 12 of 12

Policy Document Control Page

Policy Document Control Page Policy Document Control Page Title Title: Information Governance Policy Version: 5 Reference Number: CO44 Keywords: Information Governance Supersedes Supersedes: Version 4 Description of Amendment(s):

More information

Information Governance Strategy :

Information Governance Strategy : Item 11 Strategy Strategy : Date Issued: Date To Be Reviewed: VOY xx Annually 1 Policy Title: Strategy Supersedes: All previous Strategies 18/12/13: Initial draft Description of Amendments 19/12/13: Update

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version: 4 Bodies consulted: Caldicott Guardian, IM&T Directors Approved by: MT Date Approved: 27/10/2015 Lead Manager: Governance Manager Responsible Director: SIRO Date

More information

Information Governance Strategy. Version No 2.0

Information Governance Strategy. Version No 2.0 Plymouth Community Healthcare CIC Information Governance Strategy Version No 2.0 Notice to staff using a paper copy of this guidance. The policies and procedures page of PCH Intranet holds the most recent

More information

Information Governance Framework and Strategy. November 2014

Information Governance Framework and Strategy. November 2014 November 2014 Authorship : Committee Approved : Chris Wallace Information Governance Manager CCG Senior Management Team and Joint Trade Union Partnership Forum Approved Date : November 2014 Review Date

More information

Barnsley Clinical Commissioning Group. Information Governance Policy and Management Framework

Barnsley Clinical Commissioning Group. Information Governance Policy and Management Framework Putting Barnsley People First Barnsley Clinical Commissioning Group Information Governance Policy and Management Framework Version: 1.1 Approved By: Governing Body Date Approved: 16 January 2014 Name of

More information

INFORMATION GOVERNANCE STRATEGIC VISION, POLICY AND FRAMEWORK

INFORMATION GOVERNANCE STRATEGIC VISION, POLICY AND FRAMEWORK INFORMATION GOVERNANCE STRATEGIC VISION, POLICY AND FRAMEWORK Policy approved by: Assurance Committee Date: 3 December 2014 Next Review Date: December 2016 Version: 1.0 Information Governance Strategic

More information

INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK

INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK Log / Control Sheet Responsible Officer: Chief Finance Officer Clinical Lead: Dr J Parker, Caldicott Guardian Author: Associate IG Specialist, Yorkshire

More information

Information Governance Management Framework

Information Governance Management Framework Information Governance Management Framework Responsible Officer Author Business Planning & Resources Director Governance Manager Date effective from October 2015 Date last amended October 2015 Review date

More information

Information Governance Plan

Information Governance Plan Information Governance Plan 2013 2015 1. Overview 1.1 Information is a vital asset, both in terms of the clinical management of individual patients and the efficient organisation of services and resources.

More information

1.5 The Information Governance Policy should be read in conjunction with the Information Governance Strategy.

1.5 The Information Governance Policy should be read in conjunction with the Information Governance Strategy. Title: Reference No: NHSNYYIG - 007 Owner: Author: INFORMATION GOVERNANCE POLICY Director of Standards First Issued On: September 2010 Latest Issue Date: February 2012 Operational Date: February 2012 Review

More information

Information Governance Policy

Information Governance Policy Policy Policy Number / Version: v2.0 Ratified by: Audit Committee Date ratified: 25 th February 2015 Review date: 24 th February 2016 Name of originator/author: Name of responsible committee/individual:

More information

Information Governance Framework

Information Governance Framework Information Governance Framework Authorship: Chris Wallace, Information Governance Manager Committee Approved: Integrated Audit and Governance Committee Approved date: 11th March 2014 Review Date: March

More information

Information Governance Strategy

Information Governance Strategy Information Governance Strategy Document Status Draft Version: V2.1 DOCUMENT CHANGE HISTORY Initiated by Date Author Information Governance Requirements September 2007 Information Governance Group Version

More information

Information Governance Policy Version - Final Date for Review: 1 October 2017 Lead Director: Performance, Quality and Cooperate Affairs

Information Governance Policy Version - Final Date for Review: 1 October 2017 Lead Director: Performance, Quality and Cooperate Affairs Information Governance Policy Version - Final Date for Review: 1 October 2017 Lead Director: Performance, Quality and Cooperate Affairs NOTE: This is a CONTROLLED Document. Any documents appearing in paper

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Name of Policy Author: Name of Review/Development Body: Ratification Body: Ruth Drewett Information Governance Steering Group Committee Trust Board : April 2015 Review date:

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Information Governance Policy_v2.0_060913_LP Page 1 of 14 Information Reader Box Directorate Purpose Document Purpose Document Name Author Corporate Governance Guidance Policy

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version 1.1 Responsible Person Information Governance Manager Lead Director Head of Corporate Services Consultation Route Information Governance Steering Group Approval Route

More information

Information Governance Strategy. Version No 2.1

Information Governance Strategy. Version No 2.1 Livewell Southwest Information Governance Strategy Version No 2.1 Notice to staff using a paper copy of this guidance. The policies and procedures page of LSW Intranet holds the most recent version of

More information

Information Governance Strategy

Information Governance Strategy Information Governance Strategy ONCE PRINTED OFF, THIS IS AN UNCONTROLLED DOCUMENT. PLEASE CHECK THE INTRANET FOR THE MOST UP TO DATE COPY Target Audience: All staff employed or working on behalf of the

More information

INFORMATION GOVERNANCE STRATEGY

INFORMATION GOVERNANCE STRATEGY INFORMATION GOVERNANCE STRATEGY Page 1 of 10 Strategy Owner Valerie Penn, Head of Governance Strategy Author Caroline Law, Information Governance Project Manager Directorate Corporate Governance Ratifying

More information

All CCG staff. This policy is due for review on the latest date shown above. After this date, policy and process documents may become invalid.

All CCG staff. This policy is due for review on the latest date shown above. After this date, policy and process documents may become invalid. Policy Type Information Governance Corporate Standing Operating Procedure Human Resources X Policy Name CCG IG03 Information Governance & Information Risk Policy Status Committee approved by Final Governance,

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version: Revised: Consultation: Ratified by: 1.0 Information Governance Committee Governance Committee Date ratified: 19 March 2008 Name of originator/author: David McGrath

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Primary Intranet Location Information Management & Governance Version Number Next Review Year Next Review Month 7.0 2018 January Current Author Phil Cottis Author s Job Title

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY Directorate of Performance Assurance INFORMATION GOVERNANCE POLICY Reference: DCP074 Version: 2.5 This version issued: 27/03/15 Result of last review: Minor changes Date approved by owner (if applicable):

More information

RECORDS MANAGEMENT POLICY

RECORDS MANAGEMENT POLICY RECORDS MANAGEMENT POLICY Version 8.0 Purpose: For use by: This document is compliant with /supports compliance with: To outline the lifecycle of a record and to provide guidance on retention and disposal

More information

Information Governance Strategy 2015/16

Information Governance Strategy 2015/16 Information Governance Strategy 2015/16 Ratified Governing Body (November 2015) Status Final Issued November 2015 Approved By Executive Committee (August 2015) Consultation Equality Impact Assessment Internal

More information

Information Governance Standards in Relation to Third Party Suppliers and Contractors

Information Governance Standards in Relation to Third Party Suppliers and Contractors Information Governance Standards in Relation to Third Party Suppliers and Contractors Document Summary Ensure staff members are aware of the standards that should be in place when considering engaging

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Information Governance Policy Issue Date: June 2014 Document Number: POL_1008 Prepared by: Information Governance Senior Manager Insert heading depending on Insert line heading

More information

NHS Commissioning Board: Information governance policy

NHS Commissioning Board: Information governance policy NHS Commissioning Board: Information governance policy DOCUMENT STATUS: To be approved / Approved DOCUMENT RATIFIED BY: DATE ISSUED: October 2012 DATE TO BE REVIEWED: April 2013 2 AMENDMENT HISTORY: VERSION

More information

Policies for: Information Governance Information Quality Information Management Information Security. Version Control Version: 0.1

Policies for: Information Governance Information Quality Information Management Information Security. Version Control Version: 0.1 Policies for: Information Governance Information Quality Information Management Information Security Approved by: None this version Date approved: Name of originator/author: Ade Oduntan, Mike Hellier,

More information

INFORMATION GOVERNANCE POLICY & FRAMEWORK

INFORMATION GOVERNANCE POLICY & FRAMEWORK INFORMATION GOVERNANCE POLICY & FRAMEWORK Version 1.2 Committee Approved by Audit Committee Date Approved 5 March 2015 Author: Responsible Lead: Associate IG Specialist, YHCS Corporate & Governance Manger

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Document Number 01 Version Number 2.0 Approved by / Date approved Effective Authority Customer Services & ICT Authorised by Assistant Director Customer Services & ICT Contact

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Policy ID IG02 Version: V1 Date ratified by Governing Body 27/09/13 Author South Commissioning Support Unit Date issued: 21/10/13 Last review date: N/A Next review date: September

More information

Information Governance Policy

Information Governance Policy Information Governance Policy UNIQUE REF NUMBER: AC/IG/013/V1.2 DOCUMENT STATUS: Approved by Audit Committee 19 June 2013 DATE ISSUED: June 2013 DATE TO BE REVIEWED: June 2014 1 P age AMENDMENT HISTORY

More information

INFORMATION GOVERNANCE AND DATA PROTECTION POLICY

INFORMATION GOVERNANCE AND DATA PROTECTION POLICY INFORMATION GOVERNANCE AND DATA PROTECTION POLICY WN CCG Information Governance & Data Protection Policy July 2013 1 Document Control Sheet Name of Document: Information Governance & Data Protection Policy

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Policy Summary This policy outlines the organisation s approach to the management of Information Governance and information handling. It explains the accountability and reporting

More information

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER 3 APPLIES TO: ALL STAFF 4 COMMITTEE & DATE APPROVED: AUDIT COMMITTEE

More information

Information Governance Policy and Management Framework

Information Governance Policy and Management Framework Information Governance Policy and Management Framework Policy Number: IG01 Version: 3.0 Ratified by: Governing Body Date ratified: February 2016 Name of originator/author: Louise Chatwyn Information Governance

More information

Information Governance Policy

Information Governance Policy BEXLEY CARE TRUST MANAGEMENT MANUAL Title: INFORMATION GOVERNANCE POLICY Originating Department: IT DEPARTMENT Authorised by: Risk Management Committee June 2008 Reference no: CA12 Date of Issue: JANUARY

More information

INFORMATION RISK MANAGEMENT POLICY

INFORMATION RISK MANAGEMENT POLICY INFORMATION RISK MANAGEMENT POLICY DOCUMENT CONTROL: Version: 1 Ratified by: Steering Group / Risk Management Sub Group Date ratified: 21 November 2012 Name of originator/author: Manager Name of responsible

More information

NHS Newcastle Gateshead Clinical Commissioning Group. Information Governance Strategy 2015/16

NHS Newcastle Gateshead Clinical Commissioning Group. Information Governance Strategy 2015/16 NHS Newcastle Gateshead Clinical Commissioning Group Information Governance Strategy 2015/16 Document Status Equality Impact Assessment Document Ratified/Approved By Approved No impact NHS Quality, Safety

More information

Information Governance Policy

Information Governance Policy Information Governance Policy REFERENCE NUMBER IG 101 / 0v3 May 2012 VERSION V1.0 APPROVING COMMITTEE & DATE Clinical Executive 4.9.12 REVIEW DUE DATE May 2015 West Lancashire CCG is committed to ensuring

More information

NHS Waltham Forest Clinical Commissioning Group Information Governance Policy

NHS Waltham Forest Clinical Commissioning Group Information Governance Policy NHS Waltham Forest Clinical Commissioning Group Information Governance Policy Author: Zeb Alam & David Pearce Version 3.0 Amendments to Version 2.1 Updates made in line with National Guidance and Legislation

More information

Information Governance Policy. 2 RESPONSIBLE PERSON: Steve Beeho, Head of Integrated Governance. All CCG-employed staff.

Information Governance Policy. 2 RESPONSIBLE PERSON: Steve Beeho, Head of Integrated Governance. All CCG-employed staff. Information Governance Policy 1 SUMMARY This policy is intended to ensure that staff are fully aware of their Information Governance (IG) responsibilities, so that they can effectively manage and best

More information

Policy Checklist. Head of Information Governance

Policy Checklist. Head of Information Governance Policy Checklist Name of Policy: Information Governance Policy Purpose of Policy: To provide guidance to all staff on their responsibilities regarding information governance and to ensure that the Trust

More information

Version Number Date Issued Review Date V1 25/01/2013 25/01/2013 25/01/2014. NHS North of Tyne Information Governance Manager Consultation

Version Number Date Issued Review Date V1 25/01/2013 25/01/2013 25/01/2014. NHS North of Tyne Information Governance Manager Consultation Northumberland, Newcastle North and East, Newcastle West, Gateshead, South Tyneside, Sunderland, North Durham, Durham Dales, Easington and Sedgefield, Darlington, Hartlepool and Stockton on Tees and South

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Version Version 1 Ratified By Date Ratified PROPOSED FOR APPROVAL 15/11/12 Author(s) Responsible Committee / Officers Date Issue November 2012 Review Date November 2013 Intended

More information

NHS North Durham Clinical Commissioning Group. Information Governance Strategy 2015/16

NHS North Durham Clinical Commissioning Group. Information Governance Strategy 2015/16 NHS North Durham Clinical Commissioning Group Information Governance Strategy 2015/16 Document Status Equality Impact Assessment Document Ratified/Approved By Final No impact Risk and Audit Committee/Governing

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Reference: Information Governance Policy Date Approved: April 2013 Approving Body: Board of Trustees Implementation Date: April 2013 Version: 6 Supersedes: 5 Stakeholder groups

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Including the Information Governance Strategy Framework and associated Information Governance Procedures Last Review Date Approving Body N/A Governing Body Date of Approval

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Version: 3.2 Authorisation Committee: Date of Authorisation: May 2014 Ratification Committee Level 1 documents): Date of Ratification Level 1 documents): Signature of ratifying

More information

Policy: D9 Data Quality Policy

Policy: D9 Data Quality Policy Policy: D9 Data Quality Policy Version: D9/02 Ratified by: Trust Management Team Date ratified: 16 th October 2013 Title of Author: Head of Knowledge Management Title of responsible Director Director of

More information

A Question of Balance

A Question of Balance A Question of Balance Independent Assurance of Information Governance Returns Audit Requirement Sheets Contents Scope 4 How to use the audit requirement sheets 4 Evidence 5 Sources of assurance 5 What

More information

Information Governance and Data Protection Policy

Information Governance and Data Protection Policy Information Governance and Data Protection Policy Page 1 of 21 Document Control Sheet Name of document: Version: Owner: File location / Filename: Information Governance and Data Protection Policy Final

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Issued by: Senior Information Risk Owner Policy Classification: Policy No: POLIG001 Information Governance Issue No: 1 Date Issued: 18/11/2013 Page No: 1 of 16 Review Date:

More information

Information Governance Policy (incorporating IM&T Security)

Information Governance Policy (incorporating IM&T Security) (incorporating IM&T Security) ONCE PRINTED OFF, THIS IS AN UNCONTROLLED DOCUMENT. PLEASE CHECK THE INTRANET FOR THE MOST UP TO DATE COPY Target Audience: All staff employed or working on behalf of the

More information

NHS Hartlepool and Stockton-on-Tees Clinical Commissioning Group. Information Governance Strategy 2015/16

NHS Hartlepool and Stockton-on-Tees Clinical Commissioning Group. Information Governance Strategy 2015/16 NHS Hartlepool and Stockton-on-Tees Clinical Commissioning Group Information Governance Strategy 2015/16 Document Status Equality Impact Assessment Final No impact Document Ratified/Approved By Hartlepool

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY POLICY NO IM&T 011 DATE RATIFIED January 2012 NEXT REVIEW DATE January 2015 POLICY STATEMENT/KEY OBJECTIVE: To provide an overarching framework through which Information Governance

More information

Information Governance Policy

Information Governance Policy Author: Susan Hall, Information Governance Manager Owner: Fiona Jamieson, Assistant Director of Healthcare Governance Publisher: Compliance Unit Date of first issue: February 2005 Version: 5 Date of version

More information

Informatics: The future. An organisational summary

Informatics: The future. An organisational summary Informatics: The future An organisational summary DH INFORMATION READER BOX Policy HR/Workforce Management Planning/Performance Clinical Document Purpose Commissioner Development Provider Development Improvement

More information

Network Security Policy

Network Security Policy Department / Service: IM&T Originator: Ian McGregor Deputy Director of ICT Accountable Director: Jonathan Rex Interim Director of ICT Approved by: County and Organisation IG Steering Groups and their relevant

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY ENFIELD CLINICAL COMMISSIONING GROUP INFORMATION GOVERNANCE POLICY PLEASE DESTROY ALL PREVIOUS VERSIONS OF THIS DOCUMENT Enfield CCG Information Governance Policy Information Governance Policy (Policy

More information

NHS DORSET CLINICAL COMMISSIONING GROUP GOVERNING BODY INFORMATION GOVERNANCE TOOLKIT REPORT

NHS DORSET CLINICAL COMMISSIONING GROUP GOVERNING BODY INFORMATION GOVERNANCE TOOLKIT REPORT NHS DORSET CLINICAL COMMISSIONING GROUP GOVERNING BODY INFORMATION GOVERNANCE TOOLKIT REPORT 9.7 Date of the meeting 15/07/2015 Author Sponsoring Clinician Purpose of Report Recommendation J Green - Head

More information

Procedures. Issue Date: June 2014 Version Number: 2.0. Document Number: POL_1009. Status: Approved Next Review Date: April 2017 Page 1 of 17

Procedures. Issue Date: June 2014 Version Number: 2.0. Document Number: POL_1009. Status: Approved Next Review Date: April 2017 Page 1 of 17 Proforma: Information Policy Security & Corporate Policy Procedures Status: Approved Next Review Date: April 2017 Page 1 of 17 Issue Date: June 2014 Prepared by: Information Governance Senior Manager Status:

More information

NETWORK SECURITY POLICY

NETWORK SECURITY POLICY NETWORK SECURITY POLICY Policy approved by: Governance and Corporate Affairs Committee Date: December 2014 Next Review Date: August 2016 Version: 0.2 Page 1 of 14 Review and Amendment Log / Control Sheet

More information

BEFORE USING THIS GUIDANCE, MAKE SURE YOU HAVE THE MOST UP TO DATE VERSION GUIDANCE 2 POLICY AREA: INFORMATION GOVERNANCE

BEFORE USING THIS GUIDANCE, MAKE SURE YOU HAVE THE MOST UP TO DATE VERSION GUIDANCE 2 POLICY AREA: INFORMATION GOVERNANCE GUIDANCE 1 TITLE: INFORMATION GOVERNANCE FRAMEWORK 2 POLICY AREA: INFORMATION GOVERNANCE 3 ACCOUNTABLE DIRECTOR FOR POLICY AREA: DIRECTOR OF QUALITY AND GOVERNANCE 4 GUIDANCE DRAFTED BY: INTEGRATED GOVERNANCE

More information

NHS Waltham Forest Clinical Commissioning Group Information Governance Strategy

NHS Waltham Forest Clinical Commissioning Group Information Governance Strategy NHS Waltham Forest Clinical Commissioning Group Governance Strategy Author: Zeb Alam, CCG IG Lead, (NELCSU) David Pearce, Head of Governance, WFCCG Version 3.0 Amendments to Version 2.1 Annual Review Reference

More information

Lancashire County Council Information Governance Framework

Lancashire County Council Information Governance Framework Appendix 'A' Lancashire County Council Information Governance Framework Introduction Information Governance provides a framework for bringing together all of the requirements, standards and best practice

More information

INFORMATION GOVERNANCE STRATEGY NO.CG02

INFORMATION GOVERNANCE STRATEGY NO.CG02 INFORMATION GOVERNANCE STRATEGY NO.CG02 Applies to: All NHS LA employees, Non-Executive Directors, secondees and consultants, and/or any other parties who will carry out duties on behalf of the NHS LA.

More information

Information Incident Management and Reporting Procedures

Information Incident Management and Reporting Procedures ` Information Incident Management and Reporting Procedures Compliance with all CCG policies, procedures, protocols, guidelines, guidance and standards is a condition of employment. Breach of policy may

More information

TERMS OF REFERENCE: REVIEW OF THE INFORMATION GOVERNANCE TOOLKIT

TERMS OF REFERENCE: REVIEW OF THE INFORMATION GOVERNANCE TOOLKIT TERMS OF REFERENCE: REVIEW OF THE INFORMATION GOVERNANCE TOOLKIT The Information Governance Professional Leadership Group hosted by the NHS Commissioning Board is committed to conducting a strategic review

More information

Trust Informatics Policy. Information Governance. Information Governance Policy

Trust Informatics Policy. Information Governance. Information Governance Policy Trust Informatics Policy Information Governance Policy Reference: TIP/IG/IGP I:\IG\IGM\IGT\March 2011\Document Library\Policies\Approved/ - 1 Document Control Policy Title Author/Contact Document Reference

More information

Information governance strategy 2014-16

Information governance strategy 2014-16 Information Commissioner s Office Information governance strategy 2014-16 Page 1 of 16 Contents 1.0 Executive summary 2.0 Introduction 3.0 ICO s corporate plan 2014-17 4.0 Regulatory environment 5.0 Scope

More information

Information Governance Strategy

Information Governance Strategy Information Governance Strategy THCCGCG9 Version: 01 The information governance strategy outlines the CCG governance aims and the key objectives of its governance policies. The Chief officer has the overarching

More information

Information Governance Strategy & Policy

Information Governance Strategy & Policy Information Governance Strategy & Policy March 2014 CONTENT Page 1 Introduction 1 2 Strategic Aims 1 3 Policy 2 4 Responsibilities 3 5 Information Governance Reporting Structure 4 6 Managing Information

More information

NETWORK SECURITY POLICY

NETWORK SECURITY POLICY NETWORK SECURITY POLICY Policy approved by: Assurance Committee Date: 3 December 2014 Next Review Date: December 2016 Version: 1.0 Page 1 of 12 Review and Amendment Log/Control Sheet Responsible Officer:

More information

Information Management Policy CCG Policy Reference: IG 2 v4.1

Information Management Policy CCG Policy Reference: IG 2 v4.1 Information Management Policy CCG Policy Reference: IG 2 v4.1 Document Title: Policy Information Management Document Status: Final Page 1 of 15 Issue date: Nov-2015 Review date: Nov-2016 Document control

More information

Governance. Information. Bulletin. Welcome to the nineteenth edition of the information governance bulletin

Governance. Information. Bulletin. Welcome to the nineteenth edition of the information governance bulletin Welcome to the nineteenth edition of the information governance bulletin Our regular bulletin about information governance and the work of the IG transition programme Publication Gateway Reference: 02465

More information

Information Governance Training Plan v13

Information Governance Training Plan v13 Information Governance Training Plan To meet requirements of IGT v13 Lincolnshire East Clinical Commissioning Group Page 1 of 17 Contents Introduction Page 3 Training Provision Page 4 Staff Induction Awareness

More information

Information Governance Strategy and Policy. OFFICIAL Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2.

Information Governance Strategy and Policy. OFFICIAL Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2. Information Governance Strategy and Policy Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2.0 Status: Final Revision and Signoff Sheet Change Record Date Author Version Comments

More information

JOB DESCRIPTION. Information Governance Manager

JOB DESCRIPTION. Information Governance Manager JOB DESCRIPTION POST TITLE: Information Governance Manager DIRECTORATE: ACCOUNTABLE TO: BAND: LOCATION: CSS Head of Information Governance 8a CSS Job Purpose The Information Governance Manager will ensure

More information

INFORMATION GOVERNANCE POLICY (INCORPORATING INFORMATION GOVERNANCE MANAGEMENT FRAMEWORK)

INFORMATION GOVERNANCE POLICY (INCORPORATING INFORMATION GOVERNANCE MANAGEMENT FRAMEWORK) Ref No: IN-101 INFORMATION GOVERNANCE POLICY (INCORPORATING INFORMATION GOVERNANCE MANAGEMENT FRAMEWORK) AREA: POLICY SPONSOR: Trust Wide Director of Finance IMPLEMENTED: October 2009 REVISED: June 2011

More information

SOMERSET PARTNERSHIP NHS FOUNDATION TRUST RECORDS MANAGEMENT STRATEGY. Report to the Trust Board 22 September 2015. Information Governance Manager

SOMERSET PARTNERSHIP NHS FOUNDATION TRUST RECORDS MANAGEMENT STRATEGY. Report to the Trust Board 22 September 2015. Information Governance Manager SOMERSET PARTNERSHIP NHS FOUNDATION TRUST RECORDS MANAGEMENT STRATEGY Report to the Trust Board 22 September 2015 Sponsoring Director: Author: Purpose of the report: Key Issues and Recommendations: Director

More information

INFORMATION SECURITY POLICY

INFORMATION SECURITY POLICY INFORMATION SECURITY POLICY Policy approved by: Audit and Governance Committee Date: 4 th December 2014 Next Review Date: December 2016 Version: 1 Information Security Policy Page 1 of 17 Review and Amendment

More information

Date: 30 th May 2013. Agenda Item: 5.5. Ian Mackenzie Director of Information and Estates REPORT AUTHOR:

Date: 30 th May 2013. Agenda Item: 5.5. Ian Mackenzie Director of Information and Estates REPORT AUTHOR: TRUST BOARD IN PUBLIC Date: 30 th May 2013 Agenda Item: 5.5 REPORT TITLE: Information Governance Annual Report EXECUTIVE SPONSOR: Ian Mackenzie Director of Information and Estates REPORT AUTHOR: Sarah

More information

Information Governance Toolkit Assessment 2009/10

Information Governance Toolkit Assessment 2009/10 Information Governance Toolkit Assessment 2009/10 Document Reference: Version: Ratified by: Date ratified: Name of originator/author: Name of responsible committee/individual: Document owner: Document

More information

Date of review: January 2016 Policy Category: Corporate Sponsor (Director): Chief Executive CONTENT SECTION DESCRIPTION PAGE.

Date of review: January 2016 Policy Category: Corporate Sponsor (Director): Chief Executive CONTENT SECTION DESCRIPTION PAGE. Title: Information Governance Policy Date Approved: Approved by: Date of review: Policy Ref: Issue: January 2015 Information Governance Group Division/Department: January 2016 Policy Category: ISP-04 5

More information

Information Governance Framework

Information Governance Framework Information Governance Framework March 2014 CONTENT Page 1 Introduction 1 2 Strategic Aim 2 3 Purpose, Values and Principles 2 4 Scope 3 5 Roles and Responsibilities 3 6 Review 5 Appendix 1 - Information

More information

MOORLAND SURGICAL SUPPLIES LTD INFORMATION GOVERNANCE POLICY

MOORLAND SURGICAL SUPPLIES LTD INFORMATION GOVERNANCE POLICY MOORLAND SURGICAL SUPPLIES LTD INFORMATION GOVERNANCE POLICY Moorland is committed to ensuring that, as far as it is reasonably practicable, the way we provide services to the public and the way we treat

More information

Standard Operating Procedure for the Management of Information Governance Serious Incidents Requiring Investigation (IG SIRI)

Standard Operating Procedure for the Management of Information Governance Serious Incidents Requiring Investigation (IG SIRI) Standard Operating Procedure for the Management of Information Governance Serious Incidents Requiring Investigation (IG SIRI) DOCUMENT CONTROL: Version: V1 Ratified by: Risk Management Sub Group Date ratified:

More information

D-CRIS Information Governance Assurance

D-CRIS Information Governance Assurance D-CRIS Information Governance Assurance Date: 05 08 2013 Version: 1.0 Author: Murat Soncul Contents 1. Introduction... 3 2. CRIS Security Model... 3 3. SLaM Information Governance Framework... 4 4. Roles

More information

Information Security and Governance Policy

Information Security and Governance Policy Information Security and Governance Policy Version: 1.0 Ratified by: Information Governance Group Date ratified: 19 th October 2012 Name of organisation / author: Derek Wilkinson Name of responsible Information

More information

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction LEEDS BECKETT UNIVERSITY Information Security Policy 1.0 Introduction 1.1 Information in all of its forms is crucial to the effective functioning and good governance of our University. We are committed

More information

INFORMATION GOVERNANCE

INFORMATION GOVERNANCE This document is uncontrolled once printed. Please refer to the Trusts Intranet site (Procedural Documents) for the most up to date version INFORMATION GOVERNANCE NGH-PO-233 Ratified By: Procedural Document

More information

CCG: IG06: Records Management Policy and Strategy

CCG: IG06: Records Management Policy and Strategy Corporate CCG: IG06: Records Management Policy and Strategy Version Number Date Issued Review Date V3 08/01/2016 01/01/2018 Prepared By: Consultation Process: Senior Governance Manager, NECS CCG Head of

More information

SALISBURY NHS FOUNDATIONTRUST

SALISBURY NHS FOUNDATIONTRUST SALISBURY NHS FOUNDATIONTRUST PAPER SHC 1738 TITLE Information Governance Policy PURPOSE OF PAPER The Information Governance Policy was first approved in April 2005. It is currently due for review to ensure

More information

Information Governance Strategy

Information Governance Strategy Policy No: IG01 Version: 3.0 Name of Policy: Information Governance Strategy Effective From: 02/06/2015 Date Ratified 06/05/2015 Ratified Health Informatics Assurance Group (HIAG) Review Date 01/05/2017

More information

Information Management Strategy. July 2012

Information Management Strategy. July 2012 Information Management Strategy July 2012 Contents Executive summary 6 Introduction 9 Corporate context 10 Objective one: An appropriate IM structure 11 Objective two: An effective policy framework 13

More information

Information Incident Management and Reporting Procedures

Information Incident Management and Reporting Procedures Information Incident Management and Reporting Procedures Compliance with all policies, procedures, protocols, guidelines, guidance and standards is a condition of employment. Breach of policy may result

More information