Case Recording Practice Adults Services

Size: px
Start display at page:

Download "Case Recording Practice Adults Services"

Transcription

1 Case Recording Practice Adults Services Guidance on case recording practice and on document management Version: 3.3 Effective from: 1 st October 2014 Next review date: 1 st Nov 2015 Signed off by: Jenny Daniels Title: Head of Health and Social Care Practice Date: 6 th July 2012

2 Case recording and document management: guidance 2 Current issue: Status Amended existing policy Version number 3.3 Issue date 1 st October 2014 Owner Sharon Gogan, Head of Adult Social Care (from September 2013) Author Greg Slay Signed off by Jenny Daniels, Head of Health and Social Care Practice Date 6 th July 2012 Changes history: Issue Date Author Principal Changes number 3 July 2012 J Bickers, Greg Slay 3.1 January April October 2014 Greg Slay Greg Slay Greg Slay Addition of guidance relating to information security and the confidentiality of paper records used in the course of practice away from the office environment Addition of information relating to the management of documents with wet signatures Information added about West Sussex Connect to Support website Feedback: Our customers expect first class service and we aim to provide it. We therefore welcome feedback about our policies and procedures. If you have any comments about this document please socialcare@westsussex.gov.uk Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 2

3 Case recording and document management: guidance 3 Equality and diversity As part of our commitment to equality and diversity, and in line with the requirements of the Equality Act 2010, the county council will ensure that all customers of our services are treated with fairness, dignity and respect irrespective of any of the following protected characteristics: age, race, gender, disability, sexual orientation, gender reassignment, marriage or civil partnership status, pregnancy/maternity status or religion and belief. Contents 1. Introduction 4 Principles for document management 4 2. Confidentiality of records 5 3. Recording practice paper records 5 Security and confidentiality of paper records 6 Lost or mislaid handwritten case records 7 4. Recording practice electronic records 7 Computer security and confidentiality 7 5. Recording warnings on customer records 8 6. Storage of different types of records 9 Wet signature documents 9 7. Information-sharing principles Managers what you need to do 11 Lost or missing paper case files 12 Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 3

4 Case recording and document management: guidance 4 1. Introduction 1.1 The social care record brings together in one place all the relevant information about social care discussed with, and/or arranged by, Adults Services with customers and carers. 1.2 Staff are responsible for good quality recording and practice that is in line with the county council s various policies and protocols. Consequently this guidance must be shared and explained to all new staff, temporary staff, and students when they first commence working for, or on behalf of, Adults Services. 1.3 New approaches to the appropriateness and safety of sensitive records have been necessitated by the rapid development of electronic communication, mobile working, hot-desking, the widespread availability of memory sticks (encrypted and non-encrypted) and the security requirements and expectations of Government departments and of the Information Commissioner. Locally we have both corporate and directorate-specific approaches in the county council with regard to information security and management and these arrangements are frequently tested for effectiveness. Principles for document management Case records, whether electronic or paper format, are based on business requirements and: use the most efficient approach by minimising duplication of effort wherever possible; create a single view of the customer or carer; enable decision-making based on full current case information; rationalise processes that hitherto often been time-consuming and duplicated; maximise the opportunities to use technology - such as secure to best advantage. The expectation of the Adults Services Quality Assurance Management Board is that our approach to case records is consistently applied across all areas of the business, is in line with the latest data security guidance, and is underpinned and supported by training, policy and guidance. 1.4 This guidance forms part of a suite of documents for Adults Services relating to document management, information security and boundaries for care practice (visit: westsussexconnecttosupport/professionalzone). Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 4

5 Case recording and document management: guidance 5 2. Confidentiality of records 2.1 Any records containing personal data and sensitive information are strictly confidential. This means that paper files must be kept in a locked filing cabinet when in use - or transferred to the corporate File Store if not in use whilst electronic records must be password-protected (hence the security login process for access to Frameworki). 2.2 The contents of social care records relating to customers must not be available or disclosed to anyone without the consent of the person who is the subject of the case record other than to: the individual to whom the record relates (as appropriate); employees and partner professionals with appropriate permissions to access the record solely in order to provide a service, employees and partner professionals with appropriate permissions to access the record in order to facilitate the investigation of a potential or actual crime; managers who are undertaking a quality assurance exercise; HM Courts and Tribunals Service if directed to do so. 3. Recording practice paper records 3.1 Before making any record in long-hand, whether as rough notes of a meeting with a customer or in completing a template form downloaded from Frameworki, social care staff should always think about the purpose and content of the record and who may be interested in having access to it both now and/or in the future. Recording should be undertaken on the understanding that the information will be scanned and/or uploaded to Frameworki as soon as possible. The uploading should take place within 1 working day of the paper record being made. 3.2 Social care workers (or healthcare workers in integrated teams who are working on behalf of Adults Services) should ensure that they are as explicit as possible in writing case records, by either avoiding subjective terms or by offering an explanation where they are used. This is because the same term can have different meanings depending on who is using it. 3.3 It is expected practice that discussions and decisions made in professional supervision in relation to a customer are recorded on the customer s case record. Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 5

6 Case recording and document management: guidance 6 Security and confidentiality of paper records - reminder Ensure that members of the public cannot view any notes you have made about them or about other customers or carers whom you have visited earlier in the day. If visiting a customer in a public place, ensure that you are not discussing confidential matters or using identifying names where you may be overheard by others. Do not take papers concerning other customers with you on home visits as far as practicable: if unavoidable, leave them locked out of sight in your car. Do not leave hand-written case notes or template forms or pocketbooks unattended or lying around where anyone else can read them they contain information that should not be viewed or accessed by others. If you are working with handwritten notes whilst based in a county council building or at an NHS site, and you are away from the desk for some time, remember to make sure that the desk you are using is clear as this will enable another member of staff to use it if required. At the end of the working day clear away all files and personal belongings and lock them in your personal locker or take them home with you. If you take hand-written case notes or template forms or pocketbooks home with you, it is your responsibility to keep them safe at all times and to maintain confidentiality. Make sure that any handwritten notes are destroyed (use the confidential shredder if available) once the information has been transferred to the Frameworki record. 3.4 To be compliant with the Human Rights Act 1998, case recording should also: be written as soon as possible after an event has occurred; be brief and concise giving an account of work undertaken; be factual, consistent and accurate about the contacts made and services provided; include the customer s own contribution to assessments, plans, and review forms and other documentation - including disagreements or problems and their resolution; demonstrate the use of anti-discriminatory and anti-oppressive practice by using appropriate and respectful language when recording; be written in plain language without using jargon, irrelevant speculation, personal comments and discriminatory subjective statements; Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 6

7 Case recording and document management: guidance 7 Be clear in differentiating between opinion and fact (if opinions are to be recorded they should be identified as such and the reasons given for reaching them); state why a decision has been made and what evidence and/or advice has been considered in reaching the decision; and be signed and dated by the person making the entry. Lost or mislaid handwritten case records If you lose or mislay information - or have a near miss (for example, you remembered when you finished an appointment with a customer that you had left some handwritten notes or other papers behind so you went back straightaway and collected them) - you must report this to your line manager. Line managers will be expected to complete the corporate Security Incident checklist and send it to the corporate IT Policy and Planning Security lead officer based at County Hall. 4. Recording practice electronic records 4.1 Before creating an electronic record, social care staff (and healthcare staff where relevant) should always think about the purpose and content of the record and who may have access to it. Computer security and confidentiality - reminder Ensure that members of the public cannot view your computer screen. Do not move a desktop computer to a new location without gaining approval. Do not allow other members of staff to use your User Identification and password. Do not leave your computer (laptop or desktop) unattended without first ensuring that confidential information cannot be viewed or accessed by others. Close your computer down properly when you have finished each session. Make sure that you have collected all output from the printer and ensure that all documents are either stored securely or disposed of in a confidential manner. Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 7

8 Case recording and document management: guidance Care workers should ensure that they are as explicit as possible, by either avoiding subjective terms or by offering an explanation where they are used. This is because the same term can have different meanings depending on who is using it. 4.3 To be compliant with the Human Rights Act 1998, electronic case recording should also: be written as soon as possible after an event has occurred; be brief and concise giving an account of work undertaken; be factual, consistent and accurate about the contacts made and services provided; include the customer s own contribution to assessments, plans, and review forms and other documentation - including disagreements or problems and their resolution; demonstrate the use of anti-discriminatory and anti-oppressive practice by using appropriate and respectful language when recording; be written in plain language without using jargon, irrelevant speculation, personal comments and discriminatory subjective statements; Be clear in differentiating between opinion and fact (if opinions are to be recorded they should be identified as such and the reasons given for reaching them); state why a decision has been made and what evidence and/or advice has been considered in reaching the decision; and be signed and dated by the person making the entry. 5. Recording warnings on customer records 5.1 The latest guidance to staff on recording warning information on customer records should be accessed, read, and applied. The written guidance can be found on the internet (visit: westsussexconnecttosupport.org/professionalzone). 5.2 In particular, staff need to be extremely careful when recording Potentially Violent Person Warnings on Frameworki as some have been incorrectly recorded resulting in a serious breach of data quality. These must only be recorded for the person who is violent or potentially violent and not for their relatives. The alert function in Frameworki will send an automated red warning and an alert to the record of all those people linked to the subject. 5.3 To avoid warnings being used incorrectly and as a result, multiple alerts being generated with incorrect information being stored on the records of related people, only managers can now authorise the recording of warnings on Frameworki. Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 8

9 Case recording and document management: guidance 9 6. Storage of different types of records 6.1 In some circumstances it will be necessary to maintain a paper record in addition to a Frameworki record. Typically, these will be documents that have required a so-called wet signature. They are kept against the possibility of legal challenge. See the text box below for more information. Scanning and management of wet signature documents Documents with, for example, customer signatures signifying agreement or consent to share information should be scanned for general availability and kept in hard copy. This will ensure the highest level of integrity should the document be required in the event of legal challenge. (Courts do nevertheless accept scanned copies of original documents). Documents such as deeds, guarantees or certificates, which are not the property of the county council, can only be destroyed with the express written permission of the owner. Copies of such documents, when provided by the customer, can be scanned into Frameworki and the hard copy will then destroyed. This is in line with the advice in the British Standards Institution s BIP 0008 Code of Practice where it states that it is reasonably safe to destroy a document when its image has been captured and managed in accord with that Code of Practice. (BIP 0008 is a Code of Practice, originally introduced in 1996 and updated most recently in 2008, providing guidance to ensure, as far as possible, that electronic documents and scanned images are accepted as evidence by the courts. The process under which documents are managed is as important as the technology used: where a document is reproduced it has to accurately reproduce the contents of its original. For more information, visit: bsigroup.com/en-gb and use the search engine). 6.2 In cases where a paper record is kept there should be an entry on Frameworki on the customer s personal details screen, to identify the location of the record, and the person/team responsible for it. 6.3 In all other cases where a paper record is kept, such as in specialist day services, the case record needs to follow an agreed format and be in line with this guidance. Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 9

10 Case recording and document management: guidance Home (non-county council) computers can only be used for work purposes with the approval of line managers. If they are used, Documents should only be saved on an encrypted memory stick, supplied by the county council; Documents saved on an encrypted memory stick should be transferred to the main group network drive as soon as possible; All data from the memory stick should be deleted as soon as it has been transferred. 6.5 The West Sussex Deprivation of Liberty Safeguards Team is required to keep documentary records of all of its activity. These are kept on Frameworki as part of the customer record. Documents that require a wet signature (for example, copies of formal authorisations that have not been signed digitally) are routinely kept on the paper file. 6.6 Care homes operated by the county council, where one or more individual resident is subject to a Deprivation of Liberty Safeguards formal authorisation, are required to keep paper records of all activity relating to such decision-making under the Mental Capacity Act. These records need to be kept as part of the arrangements for compliance with Care Quality Commission requirements. 7. Information-sharing principles 7.1 This section of this guidance concerns information that is given by Adults Services to other people or agencies. It does not deal with a customer s access to information about his/her records. The latter is explained in detail in the Subject Access Policy Guidance available on the county council s website (visit: westsussex.gov.uk and type access to social care records in the search engine). 7.2 Adults Services has a duty to observe the confidentiality of customers, and there is an explicit requirement to obtain the consent of the user prior to information being shared with another agency or third party. 7.3 Telephone requests for access to customer data from other professionals should be challenged, and appropriate enquiries conducted to confirm the legitimacy of such enquiries. It should, however, be remembered that there is a responsibility to act where there are concerns of a safeguarding nature, and to share all relevant information for promoting the safety and well- being of a vulnerable person. A decision to share information in these circumstances should be proportionate to the presenting concern. Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 10

11 Case recording and document management: guidance We do not share information with a third party until we have established that the customer has given consent to share or that the person requesting information is doing so in a legal capacity, for example, has a Lasting Power of Attorney, for those who lack mental capacity to make specific decisions about their care. Information about the status of the third party should be found on Frameworki but if not further enquiries may be needed to establish the legitimacy of such enquiries. Our duty to treat a customer s information as confidential should be explained and any follow up enquiries should be completed in a timely manner so as not to add delay or cause undue distress. 7.5 If consent has not been obtained from the customer for the disclosure of information this can happen only if one or more of the following conditions apply: Adults Services has to disclose the information to ensure that it undertakes its statutory functions for example, in the gathering of information in an adult safeguarding investigation. The disclosure of information is legally necessary for the administration of justice for example, where a crime may have been committed. Disclosure is necessary to protect the person, for example if the person requires medical assessment and treatment, as they are mentally unwell. The customer does not have the capacity to consent, and arrangements have not been made to legally delegate this to another responsible adult or to a person holding a relevant Power of Attorney or who is acting on behalf of the Court of Protection: in these circumstances, it must be in the customer s best interests for the personal information to be shared. 8. Managers what you need to do 8.1 Managers have key responsibilities in relation to case recording and access to information. On a routine basis you should undertake the following activities in terms of case records: Check that your staff (including any healthcare workers acting on behalf of Adults Services in integrated or co-located teams) are following the guidance set out here as well as any other relevant guidance documents such as on information security and on document management; Check that your staff are familiar with where to find relevant guidance documents on the internet and are using them to inform their practice on case recording; Check that your staff are familiar with where to find the relevant user guidance for Frameworki; Assess and evaluate the quality of work with customers and carers through supervision, observation, planning and decision-making processes; Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 11

12 Case recording and document management: guidance 12 Ensure that discussions and decisions made in supervision are recorded on the customer s Frameworki case record, when indicated; Audit case records in line with the requirements periodically specified by the Adults Services Quality Assurance Management Board; and Identify any training needs of your staff in terms of case recording and access to information. Lost or missing paper case files Having been notified by the member of staff who has lost or mislaid sensitive records concerning a customer or carer, the line manager is expected to complete the corporate Security Incident checklist and send it to the corporate Policy and Planning Security lead officer (Shantha Dickinson). A process, internal to Adults Services, in relation to paper case files that have gone missing en-route to or from the corporate File Store, was published by the Adults Services Quality Assurance Management Board in December This is available online at westsussexconnecttosupport.org/professionalzone Copyright 2014 West Sussex County Council / Version 3.3 / October 2014 Page 12

Information Security Adults Services. Practice guidance. Revised Version: 1.2 Effective from: August 2014 Next review date: August 2015

Information Security Adults Services. Practice guidance. Revised Version: 1.2 Effective from: August 2014 Next review date: August 2015 Information Security Adults Services Practice guidance Revised Version: 1.2 Effective from: August 2014 Next review date: August 2015 Sign off: Jenny Daniels Title: Head of Health and Social Care Practice

More information

Document Management. Children s Services. Guidance. Partner organisation logo Version: 3

Document Management. Children s Services. Guidance. Partner organisation logo Version: 3 Document Management Children s Services Guidance Partner organisation logo Version: 3 Effective from: 8 Aug 2010 Revised: January 2014 Next review date: January 2016 Signed off by: Stuart Gallimore Title:

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Issued by: Senior Information Risk Owner Policy Classification: Policy No: POLIG001 Information Governance Issue No: 1 Date Issued: 18/11/2013 Page No: 1 of 16 Review Date:

More information

A common sense guide to the Data Protection Act 1998 for volunteers

A common sense guide to the Data Protection Act 1998 for volunteers A common sense guide to the Data Protection Act 1998 for volunteers Why is it necessary? The Data Protection Act 1998 is a law introduced to control the way information held about individuals is handled

More information

Scottish Rowing Data Protection Policy

Scottish Rowing Data Protection Policy Revision Approved by the Board August 2010 1. Introduction As individuals, we want to know that personal information about ourselves is handled properly, and we and others have specific rights in this

More information

Out of county placement notifications Adults Services. Policy and Procedures

Out of county placement notifications Adults Services. Policy and Procedures Out of county placement notifications Adults Services Policy and Procedures Version: 1.1 Effective from: August 2012 Next review date: October 2015 Signed off by: Jenny Daniels Title: Head of Health and

More information

Information Governance Policy

Information Governance Policy Information Governance Policy 1 Introduction Healthwatch Rutland (HWR) needs to collect and use certain types of information about the Data Subjects who come into contact with it in order to carry on its

More information

Information Management Policy CCG Policy Reference: IG 2 v4.1

Information Management Policy CCG Policy Reference: IG 2 v4.1 Information Management Policy CCG Policy Reference: IG 2 v4.1 Document Title: Policy Information Management Document Status: Final Page 1 of 15 Issue date: Nov-2015 Review date: Nov-2016 Document control

More information

IM&T POLICY & PROCEDURE (IM&TPP 01) Anti-Virus Policy. Notification of Policy Release: Distribution by Communication Managers

IM&T POLICY & PROCEDURE (IM&TPP 01) Anti-Virus Policy. Notification of Policy Release: Distribution by Communication Managers IM&T POLICY & PROCEDURE (IM&TPP 01) Anti-Virus Policy DOCUMENT INFORMATION Author: Vince Weldon Associate Director of IM&T Approval: Executive This document replaces: IM&T Policy No. 1 Anti Virus Version

More information

Data Protection and Information Security. Data Security - Guidelines for the use of Personal Data

Data Protection and Information Security. Data Security - Guidelines for the use of Personal Data Data Protection and Information Data - Guidelines for the use of Personal Data Page 1 of 10 Created on: 21/06/2013 Contents 1. Introduction... 3 2. Definitions... 3 4. Physical... 4 5 Electronic... 6 6

More information

NHS Commissioning Board: Information governance policy

NHS Commissioning Board: Information governance policy NHS Commissioning Board: Information governance policy DOCUMENT STATUS: To be approved / Approved DOCUMENT RATIFIED BY: DATE ISSUED: October 2012 DATE TO BE REVIEWED: April 2013 2 AMENDMENT HISTORY: VERSION

More information

CCG: IG06: Records Management Policy and Strategy

CCG: IG06: Records Management Policy and Strategy Corporate CCG: IG06: Records Management Policy and Strategy Version Number Date Issued Review Date V3 08/01/2016 01/01/2018 Prepared By: Consultation Process: Senior Governance Manager, NECS CCG Head of

More information

Policy: Remote Working and Mobile Devices Policy

Policy: Remote Working and Mobile Devices Policy Policy: Remote Working and Mobile Devices Policy Exec Director lead Author/ lead Feedback on implementation to Clive Clarke SHSC Information Manager SHSC Information Manager Date of draft 16 February 2014

More information

Information Security Policy September 2009 Newman University IT Services. Information Security Policy

Information Security Policy September 2009 Newman University IT Services. Information Security Policy Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 Terms

More information

Data Protection and Data security Policy

Data Protection and Data security Policy Data Protection and Data security Policy Statement of policy and purpose of Policy 1. Somer Valley Community Radio Ltd (the Employer) is committed to ensuring that all personal information handled by us

More information

So the security measures you put in place should seek to ensure that:

So the security measures you put in place should seek to ensure that: Guidelines This guideline offers an overview of what the Data Protection Act requires in terms of information security and aims to help you decide how to manage the security of the personal data you hold.

More information

All CCG staff. This policy is due for review on the latest date shown above. After this date, policy and process documents may become invalid.

All CCG staff. This policy is due for review on the latest date shown above. After this date, policy and process documents may become invalid. Policy Type Information Governance Corporate Standing Operating Procedure Human Resources X Policy Name CCG IG03 Information Governance & Information Risk Policy Status Committee approved by Final Governance,

More information

Best Interest Decision Making Checklist

Best Interest Decision Making Checklist This form has been developed to support your compliance with the Mental Capacity Act 2005 (MCA). There is a statutory requirement for anyone making a best interest decision to have regard to the Code of

More information

Professional Behaviour and Ethical Conduct. Code of Practice relating to:

Professional Behaviour and Ethical Conduct. Code of Practice relating to: Code of Practice relating to: Professional Behaviour and Ethical Conduct Promoting transparency and enhancing public confidence in the dental profession February 2012 Code of Practice relating to: Professional

More information

Merthyr Tydfil County Borough Council. Data Protection Policy

Merthyr Tydfil County Borough Council. Data Protection Policy Merthyr Tydfil County Borough Council Data Protection Policy 2014 Cyfarthfa High School is a Rights Respecting School, we recognise the importance of ensuring that the United Nations Convention of the

More information

Information Governance Policy

Information Governance Policy Author: Susan Hall, Information Governance Manager Owner: Fiona Jamieson, Assistant Director of Healthcare Governance Publisher: Compliance Unit Date of first issue: February 2005 Version: 5 Date of version

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Responsible Officer Author Date effective from July 2009 Ben Bennett, Business Planning & Resources Director Julian Lewis, Governance Manager Date last amended December 2012 Review

More information

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER 3 APPLIES TO: ALL STAFF 4 COMMITTEE & DATE APPROVED: AUDIT COMMITTEE

More information

BARNSLEY CLINICAL COMMISSIONING GROUP S REMOTE WORKING AND PORTABLE DEVICES POLICY

BARNSLEY CLINICAL COMMISSIONING GROUP S REMOTE WORKING AND PORTABLE DEVICES POLICY Putting Barnsley People First BARNSLE CLINICAL COMMISSIONING GROUP S REMOTE WORKING AND PORTABLE DEVICES POLIC Version: 2.0 Approved By: Governing Body Date Approved: Feb 2014 (initial approval), March

More information

INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK

INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK INFORMATION GOVERNANCE OPERATING POLICY & FRAMEWORK Log / Control Sheet Responsible Officer: Chief Finance Officer Clinical Lead: Dr J Parker, Caldicott Guardian Author: Associate IG Specialist, Yorkshire

More information

1. GENERAL INFORMATION Job Title: IT Support Assistant (2)

1. GENERAL INFORMATION Job Title: IT Support Assistant (2) 1. GENERAL INFORMATION Job Title: IT Support Assistant (2) Location: Longbow Responsible To: IT Manager Responsible For: Nil 2. JOB SUMMARY To provide initial technical support for the day to day provision

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Policy Summary This policy outlines the organisation s approach to the management of Information Governance and information handling. It explains the accountability and reporting

More information

Information Sharing Policy

Information Sharing Policy Information Sharing Policy REFERENCE NUMBER IG 010 / 0v3 February 2013 VERSION V1.0 APPROVING COMMITTEE & DATE Clinical Executive Committee 5.2.13 REVIEW DUE DATE February 2016 West Lancashire CCG is committed

More information

Research Governance Standard Operating Procedure

Research Governance Standard Operating Procedure Research Governance Standard Operating Procedure The Management and Use of Research Participant Data for Secondary Research Purposes SOP Reference: Version Number: 01 Date: 28/02/2014 Effective Date: Review

More information

Data and Information Security Policy

Data and Information Security Policy St. Giles School Inspire and achieve through creativity School Policy for: Date: February 2014 Data and Information Security Policy Legislation: Policy lead(s) The Data Protection Act 1998 (with consideration

More information

SCOTLAND S COMMISSIONER FOR CHILDREN AND YOUNG PEOPLE STANDARD CONDITIONS OF CONTRACT FOR SERVICES

SCOTLAND S COMMISSIONER FOR CHILDREN AND YOUNG PEOPLE STANDARD CONDITIONS OF CONTRACT FOR SERVICES SCOTLAND S COMMISSIONER FOR CHILDREN AND YOUNG PEOPLE STANDARD CONDITIONS OF CONTRACT FOR SERVICES 1 1 Definitions In these conditions:- We means Scotland s Commissioner for Children and Young People,

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Information Governance Policy Issue Date: June 2014 Document Number: POL_1008 Prepared by: Information Governance Senior Manager Insert heading depending on Insert line heading

More information

Record keeping. Guidance for nurses and midwives

Record keeping. Guidance for nurses and midwives Record keeping Guidance for nurses and midwives 1 We are the nursing and midwifery regulator for England, Wales, Scotland, Northern Ireland and the Islands. We exist to safeguard the health and wellbeing

More information

The Manitowoc Company, Inc.

The Manitowoc Company, Inc. The Manitowoc Company, Inc. DATA PROTECTION POLICY 11FitzPatrick & Associates 4/5/04 1 Proprietary Material Version 4.0 CONTENTS PART 1 - Policy Statement PART 2 - Processing Personal Data PART 3 - Organisational

More information

An Approach to Records Management Audit

An Approach to Records Management Audit An Approach to Records Management Audit DOCUMENT CONTROL Reference Number Version 1.0 Amendments Document objectives: Guidance to help establish Records Management audits Date of Issue 7 May 2007 INTRODUCTION

More information

Statement on CQC s roles and responsibilities for safeguarding children and adults

Statement on CQC s roles and responsibilities for safeguarding children and adults Statement on CQC s roles and responsibilities for safeguarding children and adults June 2015 Contents Introduction... 3 What is our vision for safeguarding?... 3 What is our role in safeguarding?... 4

More information

Data Protection Policy

Data Protection Policy Issue Date: June 2014 Document Number: POL_1006 Prepared by: Information Governance Senior Manager Insert heading depending on Insert line heading length; please depending delete other on line length;

More information

Version Number Date Issued Review Date V1 25/01/2013 25/01/2013 25/01/2014. NHS North of Tyne Information Governance Manager Consultation

Version Number Date Issued Review Date V1 25/01/2013 25/01/2013 25/01/2014. NHS North of Tyne Information Governance Manager Consultation Northumberland, Newcastle North and East, Newcastle West, Gateshead, South Tyneside, Sunderland, North Durham, Durham Dales, Easington and Sedgefield, Darlington, Hartlepool and Stockton on Tees and South

More information

Findings from ICO audits and reviews of community healthcare providers. June 2013 to December 2014

Findings from ICO audits and reviews of community healthcare providers. June 2013 to December 2014 Findings from ICO audits and reviews of community healthcare providers June 2013 to December 2014 Introduction The Information Commissioner s Office (ICO) is the regulator responsible for ensuring that

More information

INFORMATION SECURITY POLICY

INFORMATION SECURITY POLICY INFORMATION SECURITY POLICY Policy approved by: Audit and Governance Committee Date: 4 th December 2014 Next Review Date: December 2016 Version: 1 Information Security Policy Page 1 of 17 Review and Amendment

More information

DATA PROTECTION POLICY

DATA PROTECTION POLICY Title Author Approved By and Date Review Date Mike Pilling Latest Update- Corporation May 2008 1 Aug 2013 DATA PROTECTION ACT 1998 POLICY FOR ALL STAFF AND STUDENTS 1.0 Introduction 1.1 The Data Protection

More information

Index. Definitions. What is Data Protection? Rights of Individuals. The 8 Principles of Data Protection

Index. Definitions. What is Data Protection? Rights of Individuals. The 8 Principles of Data Protection Data Protection Awareness Based on DIT s Data Protection Policy, the Data Protection Acts, 1988 & 2003 and guidance from the Office of the Data Protection Commissioner Index Definitions What is Data Protection?

More information

The Newcastle upon Tyne Hospitals NHS Foundation Trust. Occupational Health Records Management and Retention Operational Policy

The Newcastle upon Tyne Hospitals NHS Foundation Trust. Occupational Health Records Management and Retention Operational Policy The Newcastle upon Tyne Hospitals NHS Foundation Trust Occupational Health Records Management and Retention Operational Policy Version No. 1.0 Effective From: 9 October 2013 Expiry Date: 30 September 2016

More information

Nursing Agencies. Minimum Standards

Nursing Agencies. Minimum Standards Nursing Agencies Minimum Standards 1 Contents Page Introduction 3 Values underpinning the standards 6 SECTION 1 - MINIMUM STANDARDS Management of the nursing agency 1. Management and control of operations

More information

Equality and Diversity Policy. Deputy Director of HR Version Number: V.2.00 Date: 27/01/11

Equality and Diversity Policy. Deputy Director of HR Version Number: V.2.00 Date: 27/01/11 Equality and Diversity Policy Author: Deputy Director of HR Version Number: V.2.00 Date: 27/01/11 Approval and Authorisation Completion of the following signature blocks signifies the review and approval

More information

Contents. Section/Paragraph Description Page Number

Contents. Section/Paragraph Description Page Number - NON CLINICAL NON CLINICAL NON CLINICAL NON CLINICAL NON CLINICAL NON CLINICAL NON CLINICAL NON CLINICA CLINICAL NON CLINICAL - CLINICAL CLINICAL Complaints Policy Incorporating Compliments, Comments,

More information

There are several tangible benefits in conducting equality analysis prior to making policy decisions, including:

There are several tangible benefits in conducting equality analysis prior to making policy decisions, including: EQUALITY ANALYSIS FORM Introduction CLCH has a legal requirement under the Equality Act to have due regard to eliminate discrimination. It is necessary to analysis the consequences of a policy, strategy,

More information

Data Security and Extranet

Data Security and Extranet Data Security and Extranet Derek Crabtree Schools ICT Support Manager derek.crabtree@merton.gov.uk Target Operating Model 2011 Merton Audit Organisation name: London Borough of Merton Periodic plan date:

More information

Information Management for Medical Revalidation in England

Information Management for Medical Revalidation in England Information Management for Medical Revalidation in England www.revalidationsupport.nhs.uk Contents Page 1. Introduction 3 2. Information flows 4 The doctor 5 The appraiser 5 The responsible officer 6 New

More information

Information Security Policy

Information Security Policy Document reference: Version 3.0 Date issued: April 2015 Contact: Matthew Jubb Information Security Policy Revision History Version Summary of changes Date V1.0 First version finalised. February 2006 V1.1

More information

INFORMATION SECURITY POLICY

INFORMATION SECURITY POLICY INFORMATION SECURITY POLICY Rev Date Purpose of Issue/ Description of Change Equality Impact Assessment Completed 1. June 2011 Initial Issue 2. 29 th March 2012 Second Version 3. 15 th April 2013 Third

More information

DATA PROTECTION IT S EVERYONE S RESPONSIBILITY. An Introductory Guide for Health Service Staff

DATA PROTECTION IT S EVERYONE S RESPONSIBILITY. An Introductory Guide for Health Service Staff DATA PROTECTION IT S EVERYONE S RESPONSIBILITY An Introductory Guide for Health Service Staff 1 Message from Director General Dear Colleagues The safeguarding of and access to personal information has

More information

How To Ensure Network Security

How To Ensure Network Security NETWORK SECURITY POLICY Policy approved by: Assurance Committee Date: 3 December 2014 Next Review Date: December 2016 Version: 1.0 Page 1 of 12 Review and Amendment Log/Control Sheet Responsible Officer:

More information

HIPAA and Privacy Policy Training

HIPAA and Privacy Policy Training HIPAA and Privacy Policy Training July 2015 1 This training addresses the requirements for maintaining the privacy of confidential information received from HFS and DHS (the Agencies). During this training

More information

Human Services Quality Framework. User Guide

Human Services Quality Framework. User Guide Human Services Quality Framework User Guide Purpose The purpose of the user guide is to assist in interpreting and applying the Human Services Quality Standards and associated indicators across all service

More information

Terms and Conditions of Use - Connectivity to MAGNET

Terms and Conditions of Use - Connectivity to MAGNET I, as the Client, declare to have read and accepted the terms and conditions set out below for the use of the network connectivity to the Malta Government Network (MAGNET) provided by the Malta Information

More information

University of Limerick Data Protection Compliance Regulations June 2015

University of Limerick Data Protection Compliance Regulations June 2015 University of Limerick Data Protection Compliance Regulations June 2015 1. Purpose of Data Protection Compliance Regulations 1.1 The purpose of these Compliance Regulations is to assist University of Limerick

More information

Governance. Information. Bulletin. Welcome to the nineteenth edition of the information governance bulletin

Governance. Information. Bulletin. Welcome to the nineteenth edition of the information governance bulletin Welcome to the nineteenth edition of the information governance bulletin Our regular bulletin about information governance and the work of the IG transition programme Publication Gateway Reference: 02465

More information

Internet, E-mail and SMS Texting Usage Policy Group Policy

Internet, E-mail and SMS Texting Usage Policy Group Policy Internet, E-mail and SMS Texting Usage Policy Group Policy Scope: This Orbit Housing Group Limited ( Group ) policy provides a set of guidelines for all users within the Group on the proper usage of the

More information

DATA PROTECTION AND DATA STORAGE POLICY

DATA PROTECTION AND DATA STORAGE POLICY DATA PROTECTION AND DATA STORAGE POLICY 1. Purpose and Scope 1.1 This Data Protection and Data Storage Policy (the Policy ) applies to all personal data collected and dealt with by Centre 404, whether

More information

Data Protection and Information Security Policy and Procedure

Data Protection and Information Security Policy and Procedure Data Protection and Information Security Policy and Procedure Document Detail Category: Data Protection Authorised By: Full Governing Body Author: School Business Manager Version: 1 Status: Approved May

More information

NETWORK SECURITY POLICY

NETWORK SECURITY POLICY NETWORK SECURITY POLICY Policy approved by: Governance and Corporate Affairs Committee Date: December 2014 Next Review Date: August 2016 Version: 0.2 Page 1 of 14 Review and Amendment Log / Control Sheet

More information

PERSONAL INJURIES ASSESSMENT BOARD DATA PROTECTION CODE OF PRACTICE

PERSONAL INJURIES ASSESSMENT BOARD DATA PROTECTION CODE OF PRACTICE PERSONAL INJURIES ASSESSMENT BOARD DATA PROTECTION CODE OF PRACTICE ADOPTED ON 9 th January 2008 TABLE OF CONTENTS Page No. 1 Introduction...3 2 Glossary...3 3 Types of Personal Data held by Us...3 4 Obligations

More information

Executive Board. Records Manager. Quality. Trustwide

Executive Board. Records Manager. Quality. Trustwide PROCEDURE REF. SABP/QUALITY/0035 NAME OF PROCEDURE REASON FOR PROCEDURE WHAT THE PROCEDURE WILL ACHIEVE? WHO NEEDS TO KNOW ABOUT IT? Integrated Paper and Electronic Health Records To ensure effective and

More information

WSIC Integrated Care Record FAQs

WSIC Integrated Care Record FAQs WSIC Integrated Care Record FAQs How your information is shared now Today, all the places where you receive care keep records about you. They can usually only share information from your records by letter,

More information

Information Governance. and what it means for you

Information Governance. and what it means for you Information Governance and what it means for you 1 Content Introduction 3 Who are we? 4 What is Information Governance? 4 Purpose of Holding Information 5 Confidentiality and Security 5 Accuracy of Information

More information

CCG Social Media Policy

CCG Social Media Policy Corporate CCG Social Media Policy Version Number Date Issued Review Date 2 25/03/2015 25/03/2017 Prepared By: Consultation Process: Formally Approved: Governance Manager, North of England Commissioning

More information

Our promise to you. Court Users Charter

Our promise to you. Court Users Charter Our promise to you Court Users Charter April 2015 Introduction Our Court Users Charter sets out our standards of service and our commitments to you. We recognise that attending court is an unfamiliar experience

More information

Bring Your Own Device (BYOD) Policy

Bring Your Own Device (BYOD) Policy Bring Your Own Device (BYOD) Policy Document History Document Reference: Document Purpose: Date Approved: Approving Committee: To set out the technical capabilities of the chosen security solution Airwatch

More information

Accessing Personal Information on Patients and Staff:

Accessing Personal Information on Patients and Staff: Accessing Personal Information on Patients and Staff: A Framework for NHSScotland Purpose: Enabling access to personal and business information is a key part of the NHSScotland Information Assurance Strategy

More information

Policy Document Control Page

Policy Document Control Page Policy Document Control Page Title Title: Data Protection Policy Version: 3 Reference Number: CO59 Keywords: Data, access, principles, protection, Act. Data Subject, Information Supersedes Supersedes:

More information

Access to Health Records

Access to Health Records Access to Health Records Crown Heights Medical Centre Procedure Access to Health Records ACCESS TO MEDICAL RECORDS (DATA PROTECTION) POLICY INTRODUCTION The Access to Health Records Act 1990 gave individuals

More information

Information sharing. Advice for practitioners providing safeguarding services to children, young people, parents and carers

Information sharing. Advice for practitioners providing safeguarding services to children, young people, parents and carers Information sharing Advice for practitioners providing safeguarding services to children, young people, parents and carers March 2015 Contents Summary 3 About this government advice 3 Who is this advice

More information

By the end of this course you will demonstrate:

By the end of this course you will demonstrate: 1 By the end of this course you will demonstrate: 1. that HIPAA privacy rules protect privacy and security of confidential information. 2. your responsibility for use and protection of protected health

More information

Type of change. V02 Review Feb 13. V02.1 Update Jun 14 Section 6 NPSAS Alerts

Type of change. V02 Review Feb 13. V02.1 Update Jun 14 Section 6 NPSAS Alerts Document Title Reference Number Lead Officer Author(s) (name and designation) Ratified By Central Alerting System (CAS) Policy NTW(O)17 Medical Director Tony Gray Head of Safety and Patient Experience

More information

INFORMATION TECHNOLOGY SECURITY POLICY COUNTY OF IMPERIAL

INFORMATION TECHNOLOGY SECURITY POLICY COUNTY OF IMPERIAL INFORMATION TECHNOLOGY SECURITY POLICY COUNTY OF IMPERIAL 1 INTRODUCTION The County of Imperial Information & Technical Services (ITS) Security Policy is the foundation of the County's electronic information

More information

Working Practices for Protecting Electronic Information

Working Practices for Protecting Electronic Information Information Security Framework Working Practices for Protecting Electronic Information 1. Purpose The following pages provide more information about the minimum working practices which seek to ensure that

More information

The Newcastle upon Tyne Hospitals NHS Foundation Trust

The Newcastle upon Tyne Hospitals NHS Foundation Trust The Newcastle upon Tyne Hospitals NHS Foundation Trust Procedure for Joint Management of Complaints and Safeguarding Concerns within the Newcastle upon Tyne Hospitals NHS Foundation Trust Version No.:

More information

Human Resources and Data Protection

Human Resources and Data Protection Human Resources and Data Protection Contents 1. Policy Statement... 1 2. Scope... 2 3. What is personal data?... 2 4. Processing data... 3 5. The eight principles of the Data Protection Act... 4 6. Council

More information

Information Handling Policy

Information Handling Policy Information Handling Policy 10 December 2015 Information Handling Policy 1. Who We Are 1.1 In this Information Handling Policy, references to we, our, us and ClearView are to ClearView Wealth Limited and

More information

Information Security

Information Security Information Security A staff guide to the University's Information Systems Security Policy Issued by the IT Security Group on behalf of the University. Information Systems Security Guidelines for Staff

More information

Tenth Judicial Circuit of Florida Information Systems Acceptable Use Guidelines Polk, Hardee and Highlands Counties as of January 2014

Tenth Judicial Circuit of Florida Information Systems Acceptable Use Guidelines Polk, Hardee and Highlands Counties as of January 2014 Tenth Judicial Circuit of Florida Information Systems Acceptable Use s Polk, Hardee and Highlands Counties as of January 2014 The following guidelines define the acceptable use of information technology

More information

NHS Constitution. Access to health services:

NHS Constitution. Access to health services: NHS Constitution Patients and the public your rights and NHS pledges to you Everyone who uses the NHS should understand what legal rights they have. For this reason, important legal rights are summarised

More information

BUCKINGHAMSHIRE COUNTY COUNCIL SCHOOLS GRIEVANCE POLICY AND PROCEDURE

BUCKINGHAMSHIRE COUNTY COUNCIL SCHOOLS GRIEVANCE POLICY AND PROCEDURE BUCKINGHAMSHIRE COUNTY COUNCIL SCHOOLS GRIEVANCE POLICY AND PROCEDURE Version 2 Page 1 of 16 Revised June 2012 BUCKINGHAMSHIRE COUNTY COUNCIL GRIEVANCE POLICY AND PROCEDURE FOR SCHOOLS 1. Introduction

More information

The Bishop s Stortford High School Internet Use and Data Security Policy

The Bishop s Stortford High School Internet Use and Data Security Policy Internet Acceptance Use and Data Security Policy Last Updated: 08/10/2012 Date of Next Review: 08/10/2015 Approved by GB: 10/10/2012 Responsible Committee: Student Welfare and Development Internet Acceptable

More information

Information Circular

Information Circular Information Circular Enquiries to: Brooke Smith Senior Policy Officer IC number: 0177/14 Phone number: 9222 0268 Date: March 2014 Supersedes: File No: F-AA-23386 Subject: Practice Code for the Use of Personal

More information

INFORMATION SHARING AGREEMENT. Multi-Disciplinary Team (MDT): Service Information Sharing

INFORMATION SHARING AGREEMENT. Multi-Disciplinary Team (MDT): Service Information Sharing INFORMATION SHARING AGREEMENT Multi-Disciplinary Team (MDT): Service Information Sharing SCOPE NAME OF LEAD Multi-Disciplinary Team (MDT) for high risk people: this agreement is for the patient and management

More information

Human Resources Policy documents. Data Protection Policy

Human Resources Policy documents. Data Protection Policy Policy documents Aims of the Policy apetito is committed to meeting its obligations under data protection law. As a business, apetito handles a range of Personal Data relating to its customers, staff and

More information

SOCIAL MEDIA POLICY. Senior Governance Officer, NHS North of England Commissioning Support Unit Reference No

SOCIAL MEDIA POLICY. Senior Governance Officer, NHS North of England Commissioning Support Unit Reference No SOCIAL MEDIA POLICY Ratified Governance & Risk Committee 08/2015 Status Final Issued August 2015 Approved By Governance and Risk Committee Consultation Governance and Risk Committee Equality Impact Assessment

More information

Information & ICT Security Policy Framework

Information & ICT Security Policy Framework Information & ICT Security Framework Version: 1.1 Date: September 2012 Unclassified Version Control Date Version Comments November 2011 1.0 First draft for comments to IT & Regulation Group and IMG January

More information

How To Protect School Data From Harm

How To Protect School Data From Harm 43: DATA SECURITY POLICY DATE OF POLICY: FEBRUARY 2013 STAFF RESPONSIBLE: HEAD/DEPUTY HEAD STATUS: STATUTORY LEGISLATION: THE DATA PROTECTION ACT 1998 REVIEWED BY GOVERNING BODY: FEBRUARY 2013 EDITED:

More information

1. (a) Full name of proposer including trading names if any (if not a limited company include full names of partners) Date established

1. (a) Full name of proposer including trading names if any (if not a limited company include full names of partners) Date established Network Security ProPosal Form Important Please answer all questions from each section and complete in block capitals. Tick the appropriate boxes where necessary and supply any further information requested.

More information

Email Policy. Version: 1.1. Date ratified: February 2014 Name of originator /author (s): Responsible Committee / individual:

Email Policy. Version: 1.1. Date ratified: February 2014 Name of originator /author (s): Responsible Committee / individual: Version: 1.1 Ratified by: NHS Bury CCG IM&T Steering Group Date ratified: February 2014 Name of originator /author (s): Responsible Committee / individual: Greater Manchester CSU - IT Department NHS Bury

More information

Newcastle University Information Security Procedures Version 3

Newcastle University Information Security Procedures Version 3 Newcastle University Information Security Procedures Version 3 A Information Security Procedures 2 B Business Continuity 3 C Compliance 4 D Outsourcing and Third Party Access 5 E Personnel 6 F Operations

More information

UNESCO-IHE Code of Conduct regarding Information Technology (IT)

UNESCO-IHE Code of Conduct regarding Information Technology (IT) UNESCO-IHE Code of Conduct regarding Information Technology (IT) Introduction The use of computers within all the domains of UNESCO-IHE (education, research, administration, projects and marketing & communications)

More information

USE OF PERSONAL MOBILE DEVICES POLICY

USE OF PERSONAL MOBILE DEVICES POLICY Policies and Procedures USE OF PERSONAL MOBILE DEVICES POLICY Date Approved by Information Strategy Group Version Issue Date Review Date Executive Lead Information Asset Owner Author 15.04.2014 1.0 01/08/2014

More information

HERTSMERE BOROUGH COUNCIL

HERTSMERE BOROUGH COUNCIL HERTSMERE BOROUGH COUNCIL DATA PROTECTION POLICY October 2007 1 1. Introduction Hertsmere Borough Council ( the Council ) is fully committed to compliance with the requirements of the Data Protection Act

More information

Code of Professional Conduct and Ethics for Social Workers. Bord Clárchúcháin na noibrithe Sóisialta Social Workers Registration Board

Code of Professional Conduct and Ethics for Social Workers. Bord Clárchúcháin na noibrithe Sóisialta Social Workers Registration Board Code of Professional Conduct and Ethics for Social Workers Bord Clárchúcháin na noibrithe Sóisialta Social Workers Registration Board 1 Code of Professional Conduct and Ethics for Social Workers Contents

More information

Safe Haven Policy. Equality & Diversity Statement:

Safe Haven Policy. Equality & Diversity Statement: Title: Safe Haven Policy Reference No: 010/IT Owner: Deputy Chief Officer Author Information Governance Lead First Issued On: November 2012 Latest Issue Date: March 2015 Operational Date: March 2015 Review

More information