Scanning of Physical Documentation Policy

Transcription

1 Scanning of Physical Documentation Policy DOCUMENT CONTROL: Version: 1 Ratified by: Risk Management Sub Group Date ratified: 17 February 2016 Name of originator/author: Records Manager Name of responsible Risk Management Sub Group committee/individual: Date issued: 4 March 2016 Review date: January 2019 Target Audience All staff

2 CONTENTS SECTION PAGE NO 1. INTRODUCTION 3 2. PURPOSE 3 3. SCOPE 3 4. RESPONSIBILITIES, ACCOUNTABILITIES AND DUTIES 3 5. PROCEDURE/IMPLEMENTATION What to Scan When to Scan How to Scan 5 6. TRAINING IMPLICATIONS 8 7 MONITORING ARRANGEMENTS 8 8. EQUALITY IMPACT ASSESSMENT SCREENING Privacy, Dignity and Respect Mental Capacity Act 9 9. LINKS TO ANY ASSOCIATED DOCUMENTS 9 10 REFERENCES 9 Page 2 of 9

3 1. INTRODUCTION 1.1 Rotherham Doncaster & South Humber NHS Foundation Trust, (the Trust), is moving towards a society in which the use of paper is significantly reduced in favour of a more digital way of working. In order for this to be achieved the Trust acknowledges that the scanning of physical documents will greatly increase and become part of the Records Management process. 1.2 This policy sets out the necessary guidelines to assist all employees on the responsibilities and practices in place, in relation to the scanning process. 1.3 The scanning of physical documents raises questions relating to the disposal of original papers and the legal admissibility of an electronic image. At present there is no definitive law regarding the legal admissibility of scanned documents over paper originals. Certain guidelines have been developed to aid the ever-growing number of government departments, public authorities and private companies that are working towards a more digital future. 1.4 This policy adheres to the guidelines set out in BIP 0008:2008 to the British Standard on legal admissibility and evidential weight on scanned records. This code of practice provides guidance on the use of electronic images as evidence in legal situations. 2. PURPOSE 3. SCOPE The aim of this policy is to create clear guidelines to all staff when scanning any paper documentation. The trust aims to implement a process which will improve staff time in terms of accessibility to records, and to also reduce the amount of physical filing which is produced and duplicated. 3.1 This policy relates to all information handled by staff when scanning into a digital format. Any physical filing that is transferred onto an electronic system must follow this policy according to the procedures set out. 3.2 This policy will apply to any persons that have access to paper documents belonging to the Trust, and considers scanning to be the most constructive way forward when working in a paper light environment. 4. RESPONSIBILITIES, ACCOUNTABILITIES AND DUTIES 4.1 The Trust has a Duty of Confidentiality to ensure that all aspects of records management are properly managed. The Trust is subject to a number of legal, statutory and good practice guidance requirements, covering health records. In order to meet these requirements and to be Page 3 of 9

4 able to demonstrate sound management within the constraints of the existing legislation, it is necessary to have clear operational policy and procedures. 4.2 The Chief Executive has overall accountability and responsibility for Records Management within the trust and this function is delegated to the Director of Finance, who will be responsible for encouraging a paper light way of working. 4.3 The Trust s Medical Director is the Caldicott Guardian who plays a key role in ensuring that NHS and partner organisations satisfy the highest practical standards for handling patient information. Acting as the conscience of an organisation, the Guardian should also actively support work to facilitate and enable information sharing, advising on options for lawful and ethical processing of information as required. However, this post is advisory in nature, rather than accountable, as the SIRO is. The Caldicott Guardian is supported by the Information Governance Manager and the Information Governance Team. 4.4 Senior Information Risk Officer (SIRO) is responsible for reporting to the Board all aspects of information risk. This will include any risks relating to records or data. These risks will be identified, assessed and reported using the established organisational risk management process and overseen by the Information Communication Technology (ICT) Board. The SIRO is supported by the Information Governance Manager, the Information Governance Team and the Records Manager 4.5 The Information Governance Manager will be responsible for ensuring that the Trust meets its Information Governance requirements through the continued submission of the annual Information Governance Toolkit submission (IGTK) 4.6 The Records Manager has responsibility for document and records management throughout the Trust. They are also the trusted custodian who will manage the Trusts inactive records in both paper and electronic formats. The Records Manager will provide advice and guidance on the handling of records and information and will offer assistance in considering a records storage location. They will be responsible for the implementation of a paper light strategy throughout the Trust, ensuring all staff are aware of their responsibilities in regards to physical records. 4.7 Information Technology is responsible for providing further advice and guidance to staff when required in relation to the use of scanners and shared drives. 4.8 All Staff are responsible for ensuring that the information scanned is in Page 4 of 9

5 line with the guidance of this policy. Staff must help to achieve the paperless strategy by using less paper documents and implementing more electronic methods where possible. 5. PROCEDURE/IMPLEMENTATION 5.1 What To Scan Any physical documentation that would be deemed necessary and/or noteworthy to a patient s health and well-being or treatment, will need to be scanned. If the physical item is essential information that would be stored on a physical file, this must be scanned into the relevant system. Any documents that can be created electronically in the first instance must be completed online and not duplicated in a physical document and scanned. Any physical documentation that does not belong to the Trust must be kept in its original format and not scanned. This can include deeds, guarantees or certificates which are not the property of the Trust. These can only be scanned and destroyed with written consent from the owner. Any document that requires a signature of consent can be scanned but must also be kept in its original format until such time that electronic signatures become available. Do not scan any duplicate documents that are already on a system used by staff. Once a document is scanned it should not be re-printed with the exception of outside agencies (If no electronic transfer method is available) or a subject access request. 5.2 When To Scan Any physical documentation that falls into the guidelines stated in 5.1 must be scanned and stored onto an NHS system within 72 hours of write up. This includes a quality check of the scanned image, noting of activity carried out and the confidential destruction of the original physical document. 5.3 How To Scan Preparing Documents for Scanning Before scanning of a document can take place, the following actions should be carried out: Assess the condition of the document to ensure that it is not too fragile for scanning, pages are not stuck together or inserts such as post-it notes are not attached to any sheets. Any notes attached to the document must be placed on a blank sheet of paper for scanning. Remove any staples or paperclips. Page 5 of 9

6 Ensure all pages are in chronological order. For patient or staff files, ensure the front page has the following details: Full Name Date Of Birth NHS Number/Employee Reference Number Date of Document Any blank pages within a file must not be removed and must be scanned in the order they appear within the original document. Remove any poly pockets / plastic wallets Check that all the information in the document pertains to the same patient (NHS number, name and date of birth). If misfiled information is found it must be removed and relocated in the appropriate record. Scanning Equipment All scanning should be carried out using a Trust approved machine. Do not scan any images from a machine that does not belong to RDaSH. All scanning should be carried out to the following resolution settings: Black and White images 200 DPI (Dots Per Inch) Coloured Images 300 DPI Photographs 300 DPI Quality Control The quality check of a scanned image must be carried out as soon as the scanning has taken place. To ensure all documents are scanned to a satisfactory quality, staff must ensure: Every piece of a document is scanned, including blank pages and double-sided documents. Any scanned document is unchanged from its original format. Any amendments or additions made to a document must be made prior to scanning. All aspects of the scanned document are legible. Pages should be positioned correctly and not at an angle. Indexing All service areas within the Trust will index scanned documents in a different way depending on the different needs for information. However, all scanned documents must include a specific set of metadata. This must include: Title of Document This should be a meaningful title which accurately reflects the document. Page 6 of 9

7 Date the document was scanned Initials of the staff member who carried out the scanning The document should then be immediately placed within the appropriate system ensuring the correct electronic record has been identified. Good practice would also indicate that further notes are added to the system such as information regarding the scanning of the document and that the original document has now been destroyed. Security and Protection Records that contain Personal Identifiable Data should only be scanned by staff who are authorised to handle the information. The scanned images should be immediately quality checked and stored within the correct system. No scanned document should be stored on a shared or personal drive, and/or desktop. The original document should be confidentially destroyed as soon as possible after storing the scanned document. No persons should keep the paper version for their own needs. If you are unsure about destroying a document, do not scan it. Contact the Trusts Records Manager for advice first. There should never be two versions of a document. Scanning of records should take place in a secure environment where only authorised personnel have access. Document Retention All physical documentation should be kept until sufficient quality checks have been carried out on a scanned image. A scanned document must be securely stored and correctly indexed before destroying a physical record. A scanned document must be destroyed from the area in to which it was originally scanned once it has been appropriately stored. Original Physical Documents can be destroyed once: The scanned image is securely stored The scanned Document is correctly indexed and noted The scanned Document has been thoroughly quality checked to ensure the electronic version is a true and accurate copy of the original. Once these checks have been carried out, the original document can now be destroyed. This must be marked alongside the scanned document. Page 7 of 9

8 Legal Admissibility Any scanned document will be managed in accordance with the Trusts Records Management Policy and Records Retention policy. The scanned copy will, for legal purposes, become the definitive record and will then be subject to correct records management and retention policies set in place for digital documentation. Scanned documents are admissible in court but can differ depending on the court action. In Criminal cases a certified scanned copy can be used with proper authentication including how it was scanned and notations declaring it unaltered. In civil action cases, scanned copies can be produced with the court deciding on the evidential weight issued to the document. These principles arise from the Civil Evidence Act 1995 and the Policy and Criminal Evidence Act TRAINING IMPLICATIONS As a Trust policy, all staff need to be aware of the key points that it covers. Staff can be made aware through a variety of means such as: Local Induction Records Management Training Team Meetings One to one meetings / Supervision 7. MONITORING ARRANGEMENTS Area for Monitoring How Who by Reported to Frequency Policy Incidents Review policy practices through feedback and auditing Review of all Scanning Incidents Records Manager, I.T, and Admin Leads Records Manager, Security Advisor Risk Management Sub-Group, Information Governance and Records Management Group Risk Management Sub-Group Annually Annually 8. EQUALITY IMPACT ASSESSMENT SCREENING - The completed Equality Impact Assessment for this Policy has been published on the Equality and Diversity webpage of the RDaSH website click here 8.1 Privacy, Dignity and Respect The NHS Constitution states that all patients should feel that their privacy and dignity are respected while they are in hospital. High Quality Care for All (2008), Lord Darzi s review Indicate how this will be met Page 8 of 9

9 of the NHS, identifies the need to organise care around the individual, not just clinically but in terms of dignity and respect. As a consequence the Trust is required to articulate its intent to deliver care with privacy and dignity that treats all service users with respect. Therefore, all procedural documents will be considered, if relevant, to reflect the requirement to treat everyone with privacy, dignity and respect, (when appropriate this should also include how same sex accommodation is provided). All staff must follow the guidelines stipulated within this policy. All staff must also follow the Information Governance Policy in terms of confidentiality. 8.2 Mental Capacity Act Central to any aspect of care delivered to adults and young people aged 16 years or over will be the consideration of the individuals capacity to participate in the decision making process. Consequently, no intervention should be carried out without either the individuals informed consent, or the powers included in a legal framework, or by order of the Court Therefore, the Trust is required to make sure that all staff working with individuals who use our service are familiar with the provisions within the Mental Capacity Act. For this reason all procedural documents will be considered, if relevant to reflect the provisions of the Mental Capacity Act 2005 to ensure that the interests of an individual whose capacity is in question can continue to make as many decisions for themselves as possible. Indicate How This Will Be Achieved. All individuals involved in the implementation of this policy should do so in accordance with the Guiding Principles of the Mental Capacity Act LINKS TO ANY ASSOCIATED DOCUMENTS Records Management Policy Information Governance Policy Security Policy and Procedure Incident Reporting Policy Informatics Security Policy Access to Health Records Trust Acceptable Use Policy 10 REFERENCES Department of Health Informatics Directorate - Information Governance Policy. NHS Information Governance: Records Management Guidance on Digital Document Scanning (2011) Digitisation at The National Archives (2015) British Standard BS 10008:2008 (2008) The Civil Evidence Act (1995) Policy and Criminal Evidence Act (1984) Page 9 of 9