Records Management and Information Lifecycle Strategy

Size: px
Start display at page:

Download "Records Management and Information Lifecycle Strategy"

Transcription

1 LINCOLNSHIRE PARTNERSHIP NHS FOUNDATION TRUST Records Management and Information Lifecycle Strategy DOCUMENT VERSION CONTROL Document Type and Title: Strategy New or Replacing: Revised/Updated Version No: 3 Date Policy First Written: April 2010 Date Policy First Implemented: June 2010 Date Policy Last Reviewed and Updated: August 2014 Implementation Date: October 2014 Author: Records Management and Information Governance Approving Body: Board of Directors Approval Date: 23 September 2014 Review Date: May

2 Contents Section Title Page No. 1. Introduction 3 2. Purpose and Scope 3 3. Aims 4 4. Key Elements 6 5. Implementation 8 6 Review 8 7 References 8 App A Implementation Work Plan 9 2

3 1. Introduction 1.1 Information Lifecycle Management relates to the policies, processes, practices, services and tools used by an organisation to manage its information through every phase of its existence, from creation through to destruction 1.2 This document sets out an overarching framework for integrating current records management initiatives, as well as recommending new ones. It defines a strategy for improving the quality, availability and effective use of records in the Trust and provides a strategic framework for all records management activities. This will enable overall coordination of all records management activities and ensure alignment with the Trust s Integrated Business Plan and Quality Strategy. 1.3 The Trust has made clear its intention to enhance the electronic patient record into a fully integrated clinical system that covers all aspects of the patient s journey which will represent a significant step forward for the Trust by providing a mechanism for integrating the legacy paperwork with the current and emerging electronic healthcare record. 1.4 The Trust also intends to continue to develop the electronic document management system for Corporate and non-clinical records again providing a mechanism for integrating historical paper based systems with a mechanism for creating and storing electronic information. 1.5 This Strategy should be read in conjunction with the Records Lifecycle Management and Policy. (Policy 08). 2. Purpose and Scope 2.1 This Strategy relates to all clinical and non-clinical records held in any format by the Trust in all phases of the life of information: creation, retention, maintenance, use and eventual disposal or transfer into public archives, i.e.: all administrative records (e.g. human resources, estates, financial and accounting records, notes associated with complaints etc); and all service users health records for all specialties and including records for private patients treated on NHS premises. all research and audit data 2.2 These include records held in all formats, for example: paper records, reports, diaries and registers etc; electronic records; s x-rays and other images; microform (ie microfiche and microfilm); and audio and video tapes, including CD and DVD s artwork 3

4 2.3 An organisation wide Information Lifecycle Strategy is necessary for identifying the resources needed to ensure that records of all types are properly controlled, tracked, accessible and available for use and eventually archived or otherwise disposed of in line with the principles contained within the NHS Records Management Code of Practice. 3. Aims 3.1 The aims of the Trust s Records Management and Information Lifecycle Strategy are to ensure: a systematic and planned approach to records management covering records from creation to eventual disposal; development of records in a digital format to meet the NHS England directive of paper-free patient records by 2018 efficiency and best value through improvements in the quality and flow of information, and greater coordination of records and storage systems; compliance with statutory requirements; provision of staff training for record keeping standards awareness of the importance of records management and the need for responsibility and accountability at all levels; formal procedures for closure, disposal and retention of records; archiving of the Trust s important records or records with an historical value. 4. Key Elements 4.1 The records management and information lifecycle strategy comprises the following key elements: Responsibility and Accountability To provide a clear system of accountability and responsibility for record keeping and use It is important that all individuals in the Trust appreciate the need for responsibility and accountability in the creation, amendment, management, storage of and access to all Trust records. A major target is therefore to have a clear chain of managerial responsibility and accountability for all records created by the Trust. This is the prerequisite for an effectively coordinated records management strategy. This is defined within the Records Lifecycle Management and Policy Record Quality To create and keep records which are adequate, consistent, and relevant for statutory, legal and business requirements Trust records should be accurate and complete, in order to facilitate audit, fulfil the Trust s responsibilities, and protect its legal and other rights. Records should show proof of their validity and authenticity so that any evidence derived from them is clearly credible and authoritative. 4

5 To support the Trust Quality Strategy priorities there also needs to be a focus on the CQC Essential Standard of Quality and Safety Outcome 21. The Trust has committed to progress the ability to audit records electronically and monitor care and record keeping compliance remotely with the introduction of electronic patient records. To be able to provide prompts for staff within the systems to ensure compliance with pathways of care and support complete and timely record keeping through mobile and offline working. To provide compliance reports for staff and managers to support continuous improvement Management To achieve systematic, orderly and consistent creation, retention, appraisal and disposal procedures for records throughout their life cycle Record-keeping systems should be easy to understand, clear, and efficient in terms of minimising staff time and optimising the use of space for storage. Records Management is a discipline which utilises an administrative system to direct and control the creation, version control, distribution, filing, retention, storage and disposal of records, in a way that is administratively and legally sound, whilst at the same time serving the operational needs of the Trust and preserving an appropriate historical record. The future for clinical records involves health and social care services using digital technology to ensure that vital patient related information and clinical decision and support tools can be viewed by an authorised user in a joined up manner in any single instance Security To provide systems which maintain appropriate confidentiality, security and integrity for records in their storage and use Records must be kept securely to protect the confidentiality and authenticity of their contents, and to provide further evidence of their validity in the event of a legal challenge. Records must be held securely to protect them from unauthorised or inadvertent alteration or erasure, access and disclosure are properly controlled and audit trails will track all use and changes. To ensure that records are held in a robust format which remains readable for as long as records are required Access To provide clear and efficient access for employees and others who have a legitimate right of access to Trust records, and ensure compliance with Access to Health Records, Data Protection and Freedom of Information legislation Access is a key part of any records management strategy. Fast, efficient access to records unlocks the information and knowledge they contain. In line with the Francis Inquiry Report patients need to be granted user friendly, real time and retrospective access to read their records and a facility to enter comments. They should be enabled to have a copy of records in a form useable by them, if they wish to have one. 5

6 4.1.6 Audit To audit and measure the implementation of the records management strategy against agreed standards The records of the organisation must be regularly checked against agreed standards to ensure that the records management systems and processes are robust and properly applied within the organisation to ensure that we can be certain our records are fit for purpose and legally sound Training To provide training and guidance on legal and ethical responsibilities and operational good practice for all staff involved in records management Effective records management involves staff at all levels. Training and guidance enables staff to understand and implement policies, and facilitates the efficient implementation of good record keeping practices. Records Management training is mandated for all staff every three years and training is an annual refresh requirement. 5. Implementation 5.1 The action points, in the table below, have been developed from the Trust s Records Lifecycle Management and Policy which requires the following fundamentals to be present: existence of an overall policy statement on how records (including electronic records) are to be managed; endorsement of policy by senior management; dissemination of policy to staff at all levels; provision of corporate mandate for the performance of all records and information functions; organisational commitment to create, keep and manage records which document activities; definition of roles and responsibilities; definition of responsibility of personnel to document actions and decisions in the records and to dispose of obsolete records; provision of framework for supporting appropriate standards, procedures and guidelines; provision of monitoring mechanisms to ascertain compliance with appropriate standards, procedures and guidelines; and review of policy at regular intervals. 6. Review 6.1 This strategy will be reviewed every two years (or sooner if new legislation, codes of practice or national standards are to be introduced). 7. References Records Management: NHS Code of Practice Lincolnshire Partnership NHS Foundation Trust Records Lifecycle Management and Policy (Policy 08) 6

7 LPFT Clinical Strategy LPFT Strategic Objectives Safer Hospitals Safer Wards Achieving an Integrated Digital Care Record. NHS England July

8 APPENDIX A RECORDS MANAGEMENT WORK STRATEGY 2014/15 Strategic Goal Objective Action Responsibility & Progress 1 Responsibility and Accountability Target Date 1.1 To provide a clear system of accountability and responsibility for records 1.2 Review resource for records function Establish a records management strategy with processes for ongoing monitoring and review Allocate appropriate resources across the Trust to enable the maintenance of the records management function. Records Manager and Services to determine if resources are adequate for records management. Risk to be assessed through datix incidents. Records team to support where issues identified. 18/11/2013 to be addressed as part of 1.10 (see above) Due for Review in May 2014 work commenced July 2014 to be sent to September IM&T for ratification Ongoing 8

9 2 Record Quality 12/5/14 Issues continue to be experienced with resource in the records management team due to the ever expanding role of subject access. Added to risk register. 2.1 Review and reduce the use of paper records to ensure that the organisation can achieve the aim of digitalised patient records by Reduce the duplication of records to improve information sharing, reduce cost and save space. Develop processes for centralising all paper notes into Records libraries from team locations as part of the digitalisation of records project (Scanning). X-ref 3.7 and create workplan to deliver scanning bureau function and remove historical paper notes from team locations. To commence March Management of records 3.1 Ensure that the Trust holds robust and up to date information on records held, their format, location to comply with national standards and achieve compliance with the Toolkit. Undertake an inventory of all Trust records, both health and corporate records held in either hard copy or electronic formats. (This is to ensure that all record collections/information sets are identified along with the volume of records held, the type of media on which they are held, their physical condition, their location, the environmental conditions in which they are stored and the responsible manager. See Records Management Roadmap: Records Inventory Guidance ) Deputy Records Manager/ Officer Data to be captured from Data Flow mapping work commenced August 2014 and then to be further interrogated to achieve level 3 compliance for IG Toolkit Commenced August 2014 to be delivered by 31 December

10 Further work to be undertaken during 2014/15 to finalise audit of corporate records as part of Corporate Records project X-reference to item Ensure that the Trust can manage the creation and use of records in a systematic and planned approach. Establish procedures for the continuous monitoring of the records management process to ensure that legal and statutory requirements are met and new types of records have a lifecycle determined at the point of creation. Development of an archive function on Silverlink for electronic records which are no longer current but which need to be accessed in accordance with retention schedules. Records Manager and to review existing process to ensure non-clinical records are included. X-reference item 3.5. Records Manager and /Head of Informatics Commenced to be delivered by 31 March 2015 To be progressed during Ensure that the Trust can demonstrate that it manages records through the Records lifecycle. Establish procedures for the closure of records when no longer current; arrange secure storage of archived records, and effective disposal, as soon as appropriate. Review archiving arrangements and ensure value for money and Statutory obligations are met by approved contractor. During 2013/14 work will need to be commenced on the reduction of microfiche Records Manager and Records schedules of information held at TNT now being reviewed to identify records which are ready for destruction. 31 March

11 held in archive which is beyond DPA retention requirements and can be transferred to historical archive. The same will apply to information held on the archive database and CD Roms. 12/5/14 work incomplete due to resource issues. Placed on risk register 3.4 To develop the functionality of the electronic patient record to enable the move towards a paper-light health records system and further progress to paper free records by To develop the functionality of Sharepoint (SHARON) to offer the Trust an electronic document management system for non-clinical records to progress the move towards a paper-light organisation. The Trust intends to further develop the electronic patient records (Silverlink, IAPTus, SystmOne and WebBomic) into fully integrated clinical systems that cover all aspects of the patient s journey which will represent a significant step forward for the Trust by providing a mechanism for integrating the legacy paperwork with the current and emerging electronic healthcare record. The Trust intends to continue to develop the electronic document management system for Corporate and non-clinical records again providing a mechanism for integrating historical paper based systems with a new mechanism for creating and storing electronic information utilising the functionality of Sharepoint. Records Management and and Head of Informatics The final trust system which needs capacity for scanning and attaching documentation and creation of letters is WebBomic. Functionality is now available and the project needs to be launched in September 2014 IM& T Programme Development Manager Records Manager and / /Deputy Records Manager System went live 22 October 2010 but now needs a thorough review Partially completed In progress to be delivered by March

12 Further work to be undertaken to progress to during 2014/ To develop the Electronic Staff Record to enable scanning and attaching of documentation to enable the trust to move towards paper light payroll and human resources records. To ensure that any functionality implemented complies with BIP 0008 and Trust policy. Head of Payroll Services Human Manager Resources 18/11/2013 Further work being progressed between IM&T Programme Development manager/head of Payroll and Workforce Lead in respect of travel claims and employment documentation. 12/5/14 Excellent progress made in 2013/14 with HR records moving to an electronic medium. Payroll records moved to electronic from in respect of starter, change and termination forms. Work to be continued in respect of remaining forms which will require investment in esr and e- rostering for timesheets Already Met Part delivered in 2012/13. Further development progressing November 2013 also achieved. Ongoing 12

13 3.7 To deliver a scanning bureau functionality for the Trust to commence the move of historical legacy paper healthcare records into a digitalised format which can be appended to the electronic patient record. Scale of project to be scoped during August/September 2014 and business case to be produced for discussion at IM&T Committee with funding streams identified. and travel claims. Records Manager and Commence August 2014 for implementation by 31 March Develop functionality for electronic signatures on patient administration systems Business case to be developed for project to implement electronic signatures functionality in line with Electronic Communications Act 2000 and Electronic Signatures Regulations 2002 Deputy Records Manager 18/11/2013 Position paper on functionality required prepared to be presented to IM&T Committee January /5/14 Business case sits with PMO, functionality rests with the implementation of the Single Sign on project being managed by the IM&T Programme Development Manager which is anticipated in 2014 and will see access to all computers being through smartcards which December

14 3.9 Implement project to review clinic letters functionality on Silverlink and streamline the document centre in line with feedback from users 4 Access to Records Business case to be developed to review letters available on Silverlink and update in line with current requirements following liaison with services. To include aspects from green group. Review to also look at design of the document centre and possible streamlining. will authenticate all system entries and enable digital signatures. Records Manager and 18/11/2013 Position paper on functionality required prepared to be presented to IM&T Committee January /5/14 part met with existing letters on silverlink being reviewed with medical secretaries. Next version of silverlink will bring function to develop individualised clinic letters which meets this requirement and expected Summer December To provide clear and efficient access for patients and their representatives who have a legitimate right of access to Trust records, and ensure compliance with current Access to Health Records Act 1990, Data Protection Act 1998 and Freedom of Implement policies and procedures to ensure that the Trust has a robust Access to Healthcare records function which enables service users and their representatives to access information in accordance with provisions of the Data Protection Act Ensure access requests are met within statutory timeframes and in accordance Records Management and Deputy Records Manager 12/5/14 Placed on risk register in respect of resource available to meet demand. New processes likely to 14

15 Information Act 2000 legislation 4.2 Patients need to be granted user friendly, real time and retrospective access to read their records and a facility to enter comments. They should be enabled to have a copy of records in a form useable by them, if they wish to have one 6 Audit of Records with confidentiality principles. Implement new ways of working to reduce amount of paper records being copied and processed within the team and move to a digitalised process to improve lean working and reduce costs. The Trust IM&T strategy outlines the plan to develop this functionality between 2016 and There will need to be strong links with Records Management to ensure that the final product meets the requirements for layered access and user authentication. Head of Informatics Records Management and mitigate this risk to be reviewed To be delivered Review clinical content of patient records for all teams to ensure that Trust Records Management standards are being adhered to. Raise action plans for areas which need improvement. To produce an annual audit programme for the review and check of healthcare records against Trust Policy to ensure that compliance is achieved for IG Toolkit, CQC and NHSLA standards. Develop standard audit tools for the measuring of key records management standards. Develop action plans for implementation of audit outcomes by teams. Report audit outcomes to RMG for sharing with IM&T Committee and the Board. Monitor compliance with audit action plans and subsequent implementation. Records Manager and Bespoke audit tools now created for each clinical system in use by the Trust. Programme set to deliver records audit for 2014/15 and additional support to be provided for Mock CQC audits to enable Trust to achieve level 3 IG Toolkit. Part completed. To achieve by 28 February

16 7 Training 7.1 To provide training and guidance on responsibilities and good practice for all staff involved with records. Develop training programmes and packages on records management and information governance to be targeted at new staff to ensure they are aware of basic standards for records management. Produce and deliver annual refresh packages to ensure that staff achieve compliance with mandatory training requirements. Develop and deliver more specialised training packages for specific target groups where for instance audit outcomes have highlighted concerns or there are enhanced requirements for training. Records Management and Packages are reviewed annually for mandatory training sessions to ensure that local messages from incidents can be built into the training. On-going Revised and updated August 2014 Signed Date Director of Finance 16

SOMERSET PARTNERSHIP NHS FOUNDATION TRUST RECORDS MANAGEMENT STRATEGY. Report to the Trust Board 22 September 2015. Information Governance Manager

SOMERSET PARTNERSHIP NHS FOUNDATION TRUST RECORDS MANAGEMENT STRATEGY. Report to the Trust Board 22 September 2015. Information Governance Manager SOMERSET PARTNERSHIP NHS FOUNDATION TRUST RECORDS MANAGEMENT STRATEGY Report to the Trust Board 22 September 2015 Sponsoring Director: Author: Purpose of the report: Key Issues and Recommendations: Director

More information

Records Management Policy

Records Management Policy Once printed off, this is an uncontrolled document. Please check the Intranet for the most up to date copy Author Freedom of Information Lead Version 5.0 Issue Issue Date October 2011 Review Date October

More information

What NHS staff need to know

What NHS staff need to know St George s Healthcare NHS NHS Trust Surrey Health Informatics Service Sussex Health Informatics Service Records Management Explained What NHS staff need to know A guide to Records Management Contents

More information

Scotland s Commissioner for Children and Young People Records Management Policy

Scotland s Commissioner for Children and Young People Records Management Policy Scotland s Commissioner for Children and Young People Records Management Policy 1 RECORDS MANAGEMENT POLICY OVERVIEW 2 Policy Statement 2 Scope 2 Relevant Legislation and Regulations 2 Policy Objectives

More information

CCG: IG06: Records Management Policy and Strategy

CCG: IG06: Records Management Policy and Strategy Corporate CCG: IG06: Records Management Policy and Strategy Version Number Date Issued Review Date V3 08/01/2016 01/01/2018 Prepared By: Consultation Process: Senior Governance Manager, NECS CCG Head of

More information

An Approach to Records Management Audit

An Approach to Records Management Audit An Approach to Records Management Audit DOCUMENT CONTROL Reference Number Version 1.0 Amendments Document objectives: Guidance to help establish Records Management audits Date of Issue 7 May 2007 INTRODUCTION

More information

RECORDS MANAGEMENT POLICY

RECORDS MANAGEMENT POLICY RECORDS MANAGEMENT POLICY Version 8.0 Purpose: For use by: This document is compliant with /supports compliance with: To outline the lifecycle of a record and to provide guidance on retention and disposal

More information

RECORDS MANAGEMENT POLICY

RECORDS MANAGEMENT POLICY Reference number RM001 Approved by Information Management and Technology Board Date approved 23 rd November 2012 Version 1.1 Last revised July 2013 Review date May 2015 Category Records Management Owner

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Name of Policy Author: Name of Review/Development Body: Ratification Body: Ruth Drewett Information Governance Steering Group Committee Trust Board : April 2015 Review date:

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version: 4 Bodies consulted: Caldicott Guardian, IM&T Directors Approved by: MT Date Approved: 27/10/2015 Lead Manager: Governance Manager Responsible Director: SIRO Date

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Primary Intranet Location Information Management & Governance Version Number Next Review Year Next Review Month 7.0 2018 January Current Author Phil Cottis Author s Job Title

More information

Records Management Plan. April 2015

Records Management Plan. April 2015 Records Management Plan April 2015 Prepared in accordance with the Public Records (Scotland) Act 2011 and submitted to the Keeper of the Records of Scotland for their agreement on 28 April 2015 (Revised

More information

INFORMATION LIFECYCLE & RECORDS MANAGEMENT POLICY

INFORMATION LIFECYCLE & RECORDS MANAGEMENT POLICY INFORMATION LIFECYCLE & RECORDS MANAGEMENT POLICY Unique Reference / Version Primary Intranet Location Information Management & Governance Secondary Intranet Location Policy Name Information Lifecycle

More information

Records Management Policy

Records Management Policy Records Management Policy Document information Document type: Operational Policy Document title: Records Management Policy Document date: November 2014 Author: NHS South Commissioning Support Unit, Information

More information

Policy Document Control Page

Policy Document Control Page Policy Document Control Page Title Title: Information Governance Policy Version: 5 Reference Number: CO44 Keywords: Information Governance Supersedes Supersedes: Version 4 Description of Amendment(s):

More information

Information Governance Strategy. Version No 2.0

Information Governance Strategy. Version No 2.0 Plymouth Community Healthcare CIC Information Governance Strategy Version No 2.0 Notice to staff using a paper copy of this guidance. The policies and procedures page of PCH Intranet holds the most recent

More information

Date of review: Information Governance Group January 2016. Policy Category: CONTENT SECTION DESCRIPTION PAGE

Date of review: Information Governance Group January 2016. Policy Category: CONTENT SECTION DESCRIPTION PAGE Title: Date Approved: January 2015 Division/Department: Corporate Services Corporate Records Policy Approved by: Date of review: Information Governance Group January 2016 Author (post-holder): Interim

More information

A Question of Balance

A Question of Balance A Question of Balance Independent Assurance of Information Governance Returns Audit Requirement Sheets Contents Scope 4 How to use the audit requirement sheets 4 Evidence 5 Sources of assurance 5 What

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY Directorate of Performance Assurance INFORMATION GOVERNANCE POLICY Reference: DCP074 Version: 2.5 This version issued: 27/03/15 Result of last review: Minor changes Date approved by owner (if applicable):

More information

Information Governance Strategy & Policy

Information Governance Strategy & Policy Information Governance Strategy & Policy March 2014 CONTENT Page 1 Introduction 1 2 Strategic Aims 1 3 Policy 2 4 Responsibilities 3 5 Information Governance Reporting Structure 4 6 Managing Information

More information

NHS SCOTLAND PERSONAL HEALTH RECORDS MANAGEMENT POLICY FOR NHS BOARDS

NHS SCOTLAND PERSONAL HEALTH RECORDS MANAGEMENT POLICY FOR NHS BOARDS INFORMATION GOVERNANCE RECORDS MANAGEMENT GUIDANCE NOTE NUMBER 002 NHS SCOTLAND PERSONAL HEALTH RECORDS MANAGEMENT POLICY FOR NHS BOARDS Guidance Note 002 1 1 HEALTH RECORDS MANAGEMENT POLICY 1.1 Introduction

More information

RECORDS MANAGEMENT POLICY

RECORDS MANAGEMENT POLICY RECORDS MANAGEMENT POLICY October 2015 1 Subject and version number of document: Serial Number: Records Management Policy COR/010/V2.00 Operative date: October 2015 Author: CCG Owner: Links to Other Policies:

More information

Information Governance Strategy and Policy. OFFICIAL Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2.

Information Governance Strategy and Policy. OFFICIAL Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2. Information Governance Strategy and Policy Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2.0 Status: Final Revision and Signoff Sheet Change Record Date Author Version Comments

More information

RECORDS MANAGEMENT FRAMEWORK

RECORDS MANAGEMENT FRAMEWORK RECORDS MANAGEMENT FRAMEWORK Policy Number: 253 Supersedes: Standards For Healthcare Services No/s 1, 19, 20 Version No: Date Of Review: Reviewer Name: 1.1 Nov 2011 Alison Gittins 1.2 Mar 2015 Alison Gittins

More information

Information Governance Strategy. Version No 2.1

Information Governance Strategy. Version No 2.1 Livewell Southwest Information Governance Strategy Version No 2.1 Notice to staff using a paper copy of this guidance. The policies and procedures page of LSW Intranet holds the most recent version of

More information

RECORD MANAGEMENT AND LIFE CYCLE POLICY AND STRATEGY. Dr Caroline Yates. Information Governance team

RECORD MANAGEMENT AND LIFE CYCLE POLICY AND STRATEGY. Dr Caroline Yates. Information Governance team RECORD MANAGEMENT AND LIFE CYCLE POLICY AND STRATEGY Document Owner: Developed in Consultation With: Document type: Version: Requirement: Date of ratification: Ratified By: Date to be reviewed: Dr Caroline

More information

Information Management Policy

Information Management Policy Title Information Management Policy Document ID Director Mark Reynolds Status FINAL Owner Neil McCrirrick Version 1.0 Author Deborah Raven Version Date 26 January 2011 Information Management Policy Crown

More information

Information Governance Framework

Information Governance Framework Information Governance Framework March 2014 CONTENT Page 1 Introduction 1 2 Strategic Aim 2 3 Purpose, Values and Principles 2 4 Scope 3 5 Roles and Responsibilities 3 6 Review 5 Appendix 1 - Information

More information

Information Governance Policy

Information Governance Policy Policy Policy Number / Version: v2.0 Ratified by: Audit Committee Date ratified: 25 th February 2015 Review date: 24 th February 2016 Name of originator/author: Name of responsible committee/individual:

More information

Information Governance Strategy :

Information Governance Strategy : Item 11 Strategy Strategy : Date Issued: Date To Be Reviewed: VOY xx Annually 1 Policy Title: Strategy Supersedes: All previous Strategies 18/12/13: Initial draft Description of Amendments 19/12/13: Update

More information

2. Scope 2.1 This policy covers all the activities and processes of the University that uses personal information in whatever format.

2. Scope 2.1 This policy covers all the activities and processes of the University that uses personal information in whatever format. University of Westminster Personal Data Protection Policy For Compliance with the Data Protection Act 1998 1. Background 1.1 The Data Protection Act 1998 (DPA) defines personal data as data and information

More information

WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY. Data Label: Public

WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY. Data Label: Public WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY RECORDS MANAGEMENT POLICY CONTENTS 1. POLICY STATEMENT... 3 2. PRINCIPLES... 3 DEFINITIONS... 4 3. OBJECTIVES... 4 4. SCOPE... 4 5. OWNERSHIP & RESPONSIBILITIES...

More information

Information Management Policy CCG Policy Reference: IG 2 v4.1

Information Management Policy CCG Policy Reference: IG 2 v4.1 Information Management Policy CCG Policy Reference: IG 2 v4.1 Document Title: Policy Information Management Document Status: Final Page 1 of 15 Issue date: Nov-2015 Review date: Nov-2016 Document control

More information

LORD CHANCELLOR S CODE OF PRACTICE ON THE MANAGEMENT OF RECORDS UNDER

LORD CHANCELLOR S CODE OF PRACTICE ON THE MANAGEMENT OF RECORDS UNDER LORD CHANCELLOR S CODE OF PRACTICE ON THE MANAGEMENT OF RECORDS UNDER SECTION 46 OF THE FREEDOM OF INFORMATION ACT 2000 NOVEMBER 2002 Presented to Parliament by the Lord Chancellor Pursuant to section

More information

Council Policy. Records & Information Management

Council Policy. Records & Information Management Council Policy Records & Information Management COUNCIL POLICY RECORDS AND INFORMATION MANAGEMENT Policy Number: GOV-13 Responsible Department(s): Information Systems Relevant Delegations: None Other Relevant

More information

Lancashire County Council Information Governance Framework

Lancashire County Council Information Governance Framework Appendix 'A' Lancashire County Council Information Governance Framework Introduction Information Governance provides a framework for bringing together all of the requirements, standards and best practice

More information

Information Governance Policy

Information Governance Policy Author: Susan Hall, Information Governance Manager Owner: Fiona Jamieson, Assistant Director of Healthcare Governance Publisher: Compliance Unit Date of first issue: February 2005 Version: 5 Date of version

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version 1.1 Responsible Person Information Governance Manager Lead Director Head of Corporate Services Consultation Route Information Governance Steering Group Approval Route

More information

INFORMATION MANAGEMENT POLICY (RECORDS QUALITY) POLICY

INFORMATION MANAGEMENT POLICY (RECORDS QUALITY) POLICY BARNET CLINICAL COMMISSIONING GROUP INFORMATION MANAGEMENT POLICY (RECORDS QUALITY) POLICY PLEASE DESTROY ALL PREVIOUS VERSIONS OF THIS DOCUMENT Page 1 Responsible Person: Accountable Director: Ratifying

More information

Information Governance Policy (incorporating IM&T Security)

Information Governance Policy (incorporating IM&T Security) (incorporating IM&T Security) ONCE PRINTED OFF, THIS IS AN UNCONTROLLED DOCUMENT. PLEASE CHECK THE INTRANET FOR THE MOST UP TO DATE COPY Target Audience: All staff employed or working on behalf of the

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Version Version 1 Ratified By Date Ratified PROPOSED FOR APPROVAL 15/11/12 Author(s) Responsible Committee / Officers Date Issue November 2012 Review Date November 2013 Intended

More information

FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT

FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT November 2003 Laid before the Scottish Parliament on 10th November 2003 pursuant to section 61(6) of the Freedom of Information

More information

West Midlands Police and Crime Commissioner Records Management Policy 1 Contents

West Midlands Police and Crime Commissioner Records Management Policy 1 Contents West Midlands Police and Crime Commissioner Records Management Policy 1 Contents 1 CONTENTS...2 2 INTRODUCTION...3 2.1 SCOPE...3 2.2 OVERVIEW & PURPOSE...3 2.3 ROLES AND RESPONSIBILITIES...5 COMMISSIONED

More information

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER 3 APPLIES TO: ALL STAFF 4 COMMITTEE & DATE APPROVED: AUDIT COMMITTEE

More information

Information Security Policy September 2009 Newman University IT Services. Information Security Policy

Information Security Policy September 2009 Newman University IT Services. Information Security Policy Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 Terms

More information

INFORMATION GOVERNANCE POLICY & FRAMEWORK

INFORMATION GOVERNANCE POLICY & FRAMEWORK INFORMATION GOVERNANCE POLICY & FRAMEWORK Version 1.2 Committee Approved by Audit Committee Date Approved 5 March 2015 Author: Responsible Lead: Associate IG Specialist, YHCS Corporate & Governance Manger

More information

JOB DESCRIPTION. Tatchbury Mount base and other Southern Health Sites as required

JOB DESCRIPTION. Tatchbury Mount base and other Southern Health Sites as required JOB DESCRIPTION Job Title: Band: Hours: Location: Accountable to: Lead Manager for Workforce Planning & Resourcing 8a 37.5 per week Tatchbury Mount base and other Southern Health Sites as required Deputy

More information

Policies, Procedures, Guidelines and Protocols

Policies, Procedures, Guidelines and Protocols Title Trust Ref No 1545/17322 Local Ref (optional) Main points the document covers Who is the document aimed at? Author Approved by (Committee/Director) Policies, Procedures, Guidelines and Protocols Document

More information

Applicability: All Employees Effective Date: December 6, 2005; revised January 27, 2009 Source(s):

Applicability: All Employees Effective Date: December 6, 2005; revised January 27, 2009 Source(s): Title: Category: Administration Information Management Policy No.: B5010 Replaces: B5010 Applicability: All Employees Effective Date: December 6, 2005; revised January 27, 2009 Source(s): Approval: (President

More information

Corporate Records Management Policy

Corporate Records Management Policy Corporate Records Management Policy Introduction Part 1 Records Management Policy Statement. February 2011 Part 2 Records Management Strategy. February 2011 Norfolk County Council Information Management

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Including the Information Governance Strategy Framework and associated Information Governance Procedures Last Review Date Approving Body N/A Governing Body Date of Approval

More information

NHS Business Services Authority Records Management Audit Framework

NHS Business Services Authority Records Management Audit Framework NHS Business Services Authority Records Management Audit Framework NHS Business Services Authority Corporate Secretariat NHSBSARM019 Issue Sheet Document Reference Document Location Title Author Issued

More information

INFORMATION GOVERNANCE STRATEGY

INFORMATION GOVERNANCE STRATEGY INFORMATION GOVERNANCE STRATEGY Page 1 of 10 Strategy Owner Valerie Penn, Head of Governance Strategy Author Caroline Law, Information Governance Project Manager Directorate Corporate Governance Ratifying

More information

INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK

INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK Log / Control Sheet Responsible Officer: Chief Finance Officer Clinical Lead: Dr J Parker, Caldicott Guardian Author: Associate IG Specialist, Yorkshire

More information

IS INFORMATION SECURITY POLICY

IS INFORMATION SECURITY POLICY IS INFORMATION SECURITY POLICY Version: Version 1.0 Ratified by: Trust Executive Committee Approved by responsible committee(s) IS Business Continuity and Security Group Name/title of originator/policy

More information

Policy to Manage. Information and Records V2.0

Policy to Manage. Information and Records V2.0 Policy to Manage Information and Records V2.0 May 2014 Table of Contents 1. Introduction... 4 2. Purpose of this Policy/Procedure... 4 3. Scope... 5 4. Definitions / Glossary... 6 5. Ownership and Responsibilities...

More information

University of Sunderland Business Assurance Information Security Policy

University of Sunderland Business Assurance Information Security Policy University of Sunderland Business Assurance Information Security Policy Document Classification: Public Policy Reference Central Register Policy Reference Faculty / Service IG 003 Policy Owner Assistant

More information

Life Cycle of Records

Life Cycle of Records Discard Create Inactive Life Cycle of Records Current Retain Use Semi-current Records Management Policy April 2014 Document title Records Management Policy April 2014 Document author and department Responsible

More information

Records Management: NHS Code of Practice. Part 1

Records Management: NHS Code of Practice. Part 1 Records Management: NHS Code of Practice Part 1 DH INFORMATION READER BOX Policy HR/Workforce Management Planning Clinical Document Purpose Estates Performance IM & T Finance Partnership Working Best Practice

More information

Record Management Policy

Record Management Policy Record Management Policy Author: Kate Ayres, Governance Facilitator Owner: Fiona Jamieson, Assistant Director of Healthcare Governance Publisher: Compliance Unit Date of first issue: March 2006 Version:

More information

Public Records (Scotland) Act 2011. Healthcare Improvement Scotland and Scottish Health Council Assessment Report

Public Records (Scotland) Act 2011. Healthcare Improvement Scotland and Scottish Health Council Assessment Report Public Records (Scotland) Act 2011 Healthcare Improvement Scotland and Scottish Health Council Assessment Report The Keeper of the Records of Scotland 30 October 2015 Contents 1. Public Records (Scotland)

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Issued by: Senior Information Risk Owner Policy Classification: Policy No: POLIG001 Information Governance Issue No: 1 Date Issued: 18/11/2013 Page No: 1 of 16 Review Date:

More information

INFORMATION GOVERNANCE STRATEGIC VISION, POLICY AND FRAMEWORK

INFORMATION GOVERNANCE STRATEGIC VISION, POLICY AND FRAMEWORK INFORMATION GOVERNANCE STRATEGIC VISION, POLICY AND FRAMEWORK Policy approved by: Assurance Committee Date: 3 December 2014 Next Review Date: December 2016 Version: 1.0 Information Governance Strategic

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY POLICY NO IM&T 011 DATE RATIFIED January 2012 NEXT REVIEW DATE January 2015 POLICY STATEMENT/KEY OBJECTIVE: To provide an overarching framework through which Information Governance

More information

Data Quality Policy SH NCP 2. Version: 5. Summary:

Data Quality Policy SH NCP 2. Version: 5. Summary: SH NCP 2 Summary: Keywords (minimum of 5): (To assist policy search engine) Target Audience: The Trust provides a framework to ensure all data that is recorded by the Trust is accurate and complies to

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Document Number 01 Version Number 2.0 Approved by / Date approved Effective Authority Customer Services & ICT Authorised by Assistant Director Customer Services & ICT Contact

More information

Risk Management Strategy

Risk Management Strategy Risk Management Strategy A Summary for Patients & Visitors This leaflet has been designed to provide information on the Trust s Risk Management Strategy and how we involve patients and the public in reducing

More information

SCOTTISH GOVERNMENT RECORDS MANAGEMENT: NHS CODE OF PRACTICE (SCOTLAND) Version 2.1 January 2012

SCOTTISH GOVERNMENT RECORDS MANAGEMENT: NHS CODE OF PRACTICE (SCOTLAND) Version 2.1 January 2012 SCOTTISH GOVERNMENT RECORDS MANAGEMENT: NHS CODE OF PRACTICE (SCOTLAND) Version 2.1 January 2012 Records Management: NHS Code of Practice (Scotland) The Scottish Government, Edinburgh 2012 Crown copyright

More information

Information Governance Strategy

Information Governance Strategy Information Governance Strategy Document Status Draft Version: V2.1 DOCUMENT CHANGE HISTORY Initiated by Date Author Information Governance Requirements September 2007 Information Governance Group Version

More information

INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY

INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY INTRODUCTION Under the Freedom of Information Acts, 1997 and 2003 the Institute is obliged to comply with legislation and publish a

More information

SCOTTISH GOVERNMENT RECORDS MANAGEMENT: NHS CODE OF PRACTICE

SCOTTISH GOVERNMENT RECORDS MANAGEMENT: NHS CODE OF PRACTICE SCOTTISH GOVERNMENT RECORDS MANAGEMENT: NHS CODE OF PRACTICE (SCOTLAND) Version 1.0 June 2008 SECTION 1 FOREWORD... 5 Background... 5 Aims... 5 Types of Record covered by the Code of Practice... 6 SECTION

More information

PARLIAMENTARY AND HEALTH SERVICE OMBUDSMAN. Records Management Policy. Version 4.0. Page 1 of 11 Policy PHSO Records Management Policy v4.

PARLIAMENTARY AND HEALTH SERVICE OMBUDSMAN. Records Management Policy. Version 4.0. Page 1 of 11 Policy PHSO Records Management Policy v4. PARLIAMENTARY AND HEALTH SERVICE OMBUDSMAN Records Management Policy Version 4.0 Page 1 of 11 Document Control Title: Original Author(s): Owner: Reviewed by: Quality Assured by: File Location: Approval

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Version: 3.2 Authorisation Committee: Date of Authorisation: May 2014 Ratification Committee Level 1 documents): Date of Ratification Level 1 documents): Signature of ratifying

More information

IM&T Infrastructure Security Policy. Document author Assured by Review cycle. 1. Introduction...3. 2. Policy Statement...3. 3. Purpose...

IM&T Infrastructure Security Policy. Document author Assured by Review cycle. 1. Introduction...3. 2. Policy Statement...3. 3. Purpose... IM&T Infrastructure Security Policy Board library reference Document author Assured by Review cycle P070 Information Security and Technical Assurance Manager Finance and Planning Committee 3 Years This

More information

Findings from ICO audits and reviews of community healthcare providers. June 2013 to December 2014

Findings from ICO audits and reviews of community healthcare providers. June 2013 to December 2014 Findings from ICO audits and reviews of community healthcare providers June 2013 to December 2014 Introduction The Information Commissioner s Office (ICO) is the regulator responsible for ensuring that

More information

9. GOVERNANCE. Policy 9.8 RECORDS MANAGEMENT POLICY. Version 4

9. GOVERNANCE. Policy 9.8 RECORDS MANAGEMENT POLICY. Version 4 9. GOVERNANCE Policy 9.8 RECORDS MANAGEMENT POLICY Version 4 9. GOVERNANCE 9.8 RECORDS MANAGEMENT POLICY OBJECTIVES: To establish the framework for, and accountabilities of, Lithgow City Council s Records

More information

Records Management Policy

Records Management Policy Records Management Policy Document Number SOP2006-073 File No. 07/7 Date issued 1 September 2006 Author Branch Records and Mail Services Unit Branch contact 9320.7722 Division Finance & Data Services Summary

More information

RISK MANAGEMENT STRATEGY 2014-17

RISK MANAGEMENT STRATEGY 2014-17 RISK MANAGEMENT STRATEGY 2014-17 DOCUMENT NO: Lead author/initiator(s): Contact email address: Developed by: Approved by: DN128 Head of Quality Performance Julia.sirett@ccs.nhs.uk Quality Performance Team

More information

Central London Community Healthcare NHS Trust. Data protection audit report

Central London Community Healthcare NHS Trust. Data protection audit report Central London Community Healthcare NHS Trust Data protection audit report Executive Summary July 2014 1. Background The Information Commissioner is responsible for enforcing and promoting compliance with

More information

Policy: D9 Data Quality Policy

Policy: D9 Data Quality Policy Policy: D9 Data Quality Policy Version: D9/02 Ratified by: Trust Management Team Date ratified: 16 th October 2013 Title of Author: Head of Knowledge Management Title of responsible Director Director of

More information

INFORMATION GOVERNANCE STRATEGY NO.CG02

INFORMATION GOVERNANCE STRATEGY NO.CG02 INFORMATION GOVERNANCE STRATEGY NO.CG02 Applies to: All NHS LA employees, Non-Executive Directors, secondees and consultants, and/or any other parties who will carry out duties on behalf of the NHS LA.

More information

Claims Management Policy

Claims Management Policy Claims Management Policy GOV 08 October 2007 GOV 08 Claims Management Policy 3.doc Page 1 of 12 Document Management Title of document Claims Management Policy Type of document Policy GOV 08 Description

More information

IT SECURITY POLICY (ISMS 01)

IT SECURITY POLICY (ISMS 01) IT SECURITY POLICY (ISMS 01) NWAS IM&T Security Policy Page: Page 1 of 14 Date of Approval: 12.01.2015 Status: Final Date of Review Recommended by Approved by Information Governance Management Group Trust

More information

Information Governance Strategy 2015/16

Information Governance Strategy 2015/16 Information Governance Strategy 2015/16 Ratified Governing Body (November 2015) Status Final Issued November 2015 Approved By Executive Committee (August 2015) Consultation Equality Impact Assessment Internal

More information

Information Governance and Data Protection Policy

Information Governance and Data Protection Policy Information Governance and Data Protection Policy Page 1 of 21 Document Control Sheet Name of document: Version: Owner: File location / Filename: Information Governance and Data Protection Policy Final

More information

Information and records management. Purpose. Scope. Policy

Information and records management. Purpose. Scope. Policy Information and records management NZQA Quality Management System Policy Purpose The purpose of this policy is to establish a framework for the management of corporate information and records within NZQA.

More information

General Register Office for Scotland information about Scotland s people. Paper NHSCR GB 1/08. NHSCR Scotland Information Governance Standards

General Register Office for Scotland information about Scotland s people. Paper NHSCR GB 1/08. NHSCR Scotland Information Governance Standards General Register Office for Scotland information about Scotland s people Paper NHSCR GB 1/08 NHSCR Scotland Information Governance s This is a draft on which the Board s comments would be welcome. Contents

More information

1) To manage the Operational and Project Management duties of the Health Records Services of the Trust.

1) To manage the Operational and Project Management duties of the Health Records Services of the Trust. Job Description Job Details Job Title: Health Records Library Service Manager Hours of Work: 37.5 Department/Ward: Division: Base: Health Care Operations Clinical Support Services Multiple Reporting Arrangements

More information

Records Management - Council Policy Version 2-28 April 2014. Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy...

Records Management - Council Policy Version 2-28 April 2014. Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy... Council Policy Records Management Table of Contents Table of Contents... 1 Policy... 2 Policy Objectives... 2 Policy Statement... 2 Records Management Program... 2 Accountability Requirements... 3 General

More information

AS/NZS 4801:2001. Safety Management Systems (SMS) Self-Assessment Checklist. Revision 1 (January 2014)

AS/NZS 4801:2001. Safety Management Systems (SMS) Self-Assessment Checklist. Revision 1 (January 2014) AS/NZS 4801:2001 Safety Management Systems (SMS) Self-Assessment Checklist This document restates the requirements of AS/NZS 4801:2001 for Safety Management Systems (SMS) and has been developed to assist

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Policy Summary This policy outlines the organisation s approach to the management of Information Governance and information handling. It explains the accountability and reporting

More information

Records Management plan

Records Management plan Records Management plan Prepared for 31 October 2013 Audit Scotland is a statutory body set up in April 2000 under the Finance and Accountability (Scotland) Act 2000. We help the Auditor General for Scotland

More information

Informatics Policy. Information Governance. Network Account and Password Management Policy

Informatics Policy. Information Governance. Network Account and Password Management Policy Informatics Policy Information Governance Policy Ref: 3589 Document Title Author/Contact Document Reference 3589 Document Control Network Account Management and Password Policy Pauline Nordoff-Tate, Information

More information

How To Manage Risk In Ancient Health Trust

How To Manage Risk In Ancient Health Trust SharePoint Location Non-clinical Policies and Guidelines SharePoint Index Directory 3.0 Corporate Sub Area 3.1 Risk and Health & Safety Documents Key words (for search purposes) Risk, Risk Management,

More information

University of Aberdeen Information Security Policy

University of Aberdeen Information Security Policy University of Aberdeen Information Security Policy Contents Introduction to Information Security... 1 How can information be protected?... 1 1. Information Security Policy... 3 Subsidiary Policy details:...

More information

Records Management - Department of Health

Records Management - Department of Health Policy Directive Records Management - Department of Health Document Number PD2009_057 Publication date 24-Sep-2009 Functional Sub group Corporate Administration - Records Ministry of Health, NSW 73 Miller

More information

Information Sharing Protocol

Information Sharing Protocol Information Sharing Protocol South Central PCTs, General Practices and Tribal Consulting Limited Commissioning Enablement Service (Analytics) Document Control Date Version Author Comment 08/02/10 0.1 A.

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version: Revised: Consultation: Ratified by: 1.0 Information Governance Committee Governance Committee Date ratified: 19 March 2008 Name of originator/author: David McGrath

More information

Information Governance Strategy

Information Governance Strategy Information Governance Strategy ONCE PRINTED OFF, THIS IS AN UNCONTROLLED DOCUMENT. PLEASE CHECK THE INTRANET FOR THE MOST UP TO DATE COPY Target Audience: All staff employed or working on behalf of the

More information

Informatics: The future. An organisational summary

Informatics: The future. An organisational summary Informatics: The future An organisational summary DH INFORMATION READER BOX Policy HR/Workforce Management Planning/Performance Clinical Document Purpose Commissioner Development Provider Development Improvement

More information