Clinical Record Management Guidelines. For Pre-Hospital Health Information Records
|
|
|
- Gilbert Edwards
- 10 years ago
- Views:
Transcription
1 Clinical Record Management Guidelines For Pre-Hospital Health Information Records
2 First published in 2010 by the Pre-Hospital Emergency Care Council Abbey Moat House Abbey Street Naas Co. Kildare Pre-Hospital Emergency Care Council 2010 All rights reserved. Any part of this publication may be reproduced for educational purposes and quality improvement programmes subject to the inclusion of an acknowledgement of the source. It may not be used for commercial purposes. ISBN
3 Clinical Record Management Guidelines Introduction 2 Background 2 Types of reports covered in the PHECC Clinical Record 3 Management Guidelines Data protection and confidentiality 4 Legal considerations 5 Retention periods 5 Review of retained reports 6 Storage recommendations 6 Indexing of stored reports 8 Immediate filing process for completed patient reports 9 Recommendations for tracking the movements of active reports 9 Electronic storage of patient reports 10 Security of archived clinical records 11 Management responsibility 11 Patient information requests 11 Acknowledgements 12 Clinical Record Management Guidelines 1
4 Introduction Recording pre-hospital care, interventions and medications administered to patients is an essential clinical responsibility of all pre-hospital emergency care practitioners and responders. It is vital that each patient report provides accurate information as it relates to the health of the patient and the activity of the organisation. The patient report refers to all information collected, processed and held in both manual and electronic formats pertaining to the patient and patient care. These clinical record management guidelines define the storage requirements for the patient reports to ensure that they are maintained, managed and controlled effectively in accordance with the legal, operational and information needs of the pre-hospital emergency care practitioners, responders and services. Background The ambulance service records provide evidence of actions and decisions and represent a vital asset to support daily functions and operations. They support policy formation, management decision-making and protect the interests of the service and the rights of patients, staff and members of the public who have dealings with the ambulance service. Records management is the foundation layer of all information systems. Management of patient data, through the proper control of the content and the storage and retention of the records, reduces vulnerability to legal challenge or financial loss and promotes best practice through greater coordination of information. The management of pre-hospital patient reports pose challenges and these clinical record management guidelines are the first step in developing a standard for the storage of patient information. This is an evolving document as standards and practices in relation to management of healthcare records change over time and thus will be subject to regular review and will be updated as necessary. We spend most of our lives creating, collecting, recording information but each of these records is only as valuable as the information it contains, and that is only of value if it can be found when needed, and then used effectively. Accurate recording and knowledge of the whereabouts of all records is essential 2 Clinical Record Management Guidelines
5 if the information they contain is to be located quickly and efficiently. One of the main reasons why records get misplaced or lost is because the destination is not recorded. The quality of records maintained by pre-hospital emergency care practitioners and responders is a reflection of the quality of care provided by them to their patients. Pre-hospital emergency care practitioners and responders are legally accountable for the standard of practice which they deliver and to which they contribute. Good practice in record management is an integral part of quality pre-hospital care. Types of reports covered in the PHECC Clinical Record Management Guidelines These guidelines apply to all patient reports regardless of the medium in which they are held. Report types currently consist of the following but this list is not exhaustive: Patient Care Report paper copy (PCR) Patient Care Report electronic (epcr) Patient Care Report scanned images Patient Care Report paper copy of scanned image Patient Transport Reports (PTR) Cardiac First Response Report (CFR Report) Records of patients who are not transported Records of patients who have deceased while in the care of the practitioner ECG tracing Other images/photographs Clinical Record Management Guidelines 3
6 Data protection and confidentiality Data protection applies to all personal information regardless of the holder. It combines the three concepts of privacy, confidentiality and security. The Data Protection (Amendment) Act (2003), was brought in to ensure compliance with EU Data Protection Directive (95/46/EC), strengthens and makes explicit almost every aspect of the existing protections under Data Protection Act (1988). The Data Protection Acts, 1988 and Amendment Acts 2003 apply to both manual and computer files. It affects everyday practice and record management standards, maintaining confidentiality from initial collection to secure disposal. The Eight Rules of Data Protection You must: 1. Obtain and process information fairly 2. Keep it only for one or more specified, explicit and lawful purposes 3. Use and disclose it only in ways compatible with these purposes 4. Keep it safe and secure 5. Keep it accurate, complete and up-to-date 6. Ensure that it is adequate, relevant and not excessive 7. Retain it for no longer than is necessary for the purpose or purposes 8. Give a copy of his/her personal data to an individual, on request All patient reports, regardless of whether they are paper based or on a computer in electronic format are confidential patient information and must be treated as such. Practitioners and responders should ensure that the patient reports cannot be viewed or accessed inappropriately. This tradition of confidentiality is in line with the requirements of the Data Protection Acts 1988 & 2003, under which personal data must be obtained for a specific purpose and must not be disclosed to any third party, except, in a manner compatible with that purpose and must not be kept for longer than is necessary, for the purpose or purposes for which it was obtained. 4 Clinical Record Management Guidelines
7 Confidentiality concerning the patient record is an expression of the trust inherent in the pre-hospital emergency care practitioner and responders relationship with the patient. The confidentiality of patient records form part of the ancient Hippocratic Oath, and is central to the ethical tradition of medicine and health care. Legal considerations All patient reports are legal documents. There is no limit to the range of records that may be required to aid the legal process. Healthcare records should be retained as long as there is a possibility of legal action being brought by the patient or on behalf of the patient. Retention periods The minimum recommended retention period for pre-hospital patient reports is: Pre-hospital emergency care reports Adult Maternity Children and young persons Homicide / serious untoward incidents Deceased patients, both adult and child Clinical audit records Record of destruction of individual patient reports Recommended retention period 8 years after conclusion of treatment or death 25 years after birth of last child Until 25th birthday or 26th birthday if young person was 17 at the conclusion of treatment, or 8 years after death. If there is potential relevance to adult conditions or genetic implications, advice should be sought as whether to retain the patient reports for a longer period 30 years 8 years after death 5 years Permanently If under investigation or if litigation is likely it is recommended that the original report be held indefinitely. Clinical Record Management Guidelines 5
8 Review of Retained Reports Pre-hospital patient reports which have reached their official retention period should be reviewed so that ill-considered disposal is avoided. If a report, due for disposal, is known to be the subject of an access request, then this contact with the report will be regarded as the last contact date. Recommended retention periods should be calculated from the end of the calendar month following the last entry on the report. Review of retention periods also applies to electronic records, regardless of the medium in which they are stored. A designated person should carry out patient report reviews in line with the retention schedule and records should not be kept any longer than the appropriate period. If you wish to retain records for a longer period for audit or research purposes you must obtain clear consent from the relevant patient. A record should be kept in perpetuity of all patient reports destroyed outlining patients name, home address, DOB, incident number, date of call, date of disposal, by whom the authority was given to destroy the record and name of person who carried out the disposal. The record of disposal should be filed and stored in a secure location. Storage recommendations The provision of optimum storage conditions for storage of reports is of the utmost importance in ensuring their long-term preservation. Priority should be given to providing optimum environmental conditions within the storage area as follows: Patient reports must be stored in a secure storage cabinet/area with access restrictions Records should be stored on steel shelving units or in steel cabinets If using shelving units they should be properly braced and the bottom shelf should be at least 1 inch off the floor When a room containing records is left unattended, it should be locked at all times Continued overleaf 6 Clinical Record Management Guidelines
9 The storage cabinet/unit should be constructed of fire resistant materials, timber is not recommended. It is extremely difficult to salvage burnt records The storage cabinet/area should be located in an area where it is not at risk from flooding (natural or man-made), rising damp or poor drainage The storage area should be rapidly accessible for ease of retrieval of records The storage area should not be located close to atmospheric pollutants The storage area should be a self contained cabinet/unit or self contained unit within an existing building The building must restrict the entry of water, rodents, insects and birds If storage area is a separate building, it should not have windows and should be locked at all times The facility must be lockable in such a way to exclude unauthorised staff Designated key holder should be appointed Access to records must be restricted to designated persons only; this is particularly important if the storage facility is shared Ambulance services who employ other organisations or services who record patient data are the legal owners of those records. This does not mean, however, that anyone in the organisation has an automatic right of access to the records or the information contained in them. Clinical Record Management Guidelines 7
10 Indexing of stored records All patient reports must be filed according to a standard filing convention. Filing convention options are as follows: Option 1: station PIN followed by month followed by year followed by first digit of surname * Option 2: practitioner PIN followed by month followed by year followed by first digit of patient surname * * If patient surname is prefixed by O as in O Neill record is filed under O. * If patient surname is prefixed by Mc/Mac as in McDonagh/Mac Carthy, patient reports are filed as M. 8 Clinical Record Management Guidelines
11 Immediate filing process for completed patient reports (including loose information) After each call the patient report, including loose information, for example ECG record, will be placed in a secure daily desk file/storage box The practitioner or responder who initiates the patient record is responsible for the secure filing of the report at the end of each call/ shift as appropriate At the end of the shift or day end a designated person will place the patient records in clinical record storage cabinet and file according to convention or return to the ambulance headquarters in his/her region for filing and storage according to convention It is preferred that reports are stored flat as this will assist in scanning of documents if this method of storage is adopted at a future time Remove paper clips and staples before filing as they can damage the paper record and ensure that loose patient related documents have the necessary identifiable data recorded for future retrieval Recommendations for tracking the movements of active reports The patient report tracking system should meet all ambulance service needs and provide easily accessible movement history and audit trail. The success of any tracking system depends on the people using it and therefore all staff must be made aware of its importance. Clinical Record Management Guidelines 9
12 Cycle of the transfer of a patient record from record storage to another party Locate patient record according to convention Replace with tracer card Record the following on the tracer card: o Patient surname/name or unique identifier as appropriate o Date of incident o Date of transfer to another party o Name of person/unit/department record is being forwarded to o Expected date of return o Name of person removing report If the patient report is removed on more than one occasion, the tracer card must be re-used as this will build up a report history. Store tracer cards separately. Electronic storage of patient reports Patient data is no longer stored on the tablet PC following the closing of the patient record and practitioner log off. All patient data is stored in a secure data centre and the highest level of data encryption and security standards are applied to both the data and the data centre. The same retention and disposal schedule of rules apply to this electronic method of data storage as well as to alternative methods of storage, for example scanned images. The Data Protection Acts, 1988 & 2003 apply to both manual and computer files but it does not prescribe that files should be kept/stored in both formats. The organisation s data controller must ensure that the quality of a record stored in an alternative medium is a true reflection of the original record by means of an intensive validation process. It is also important that appropriate back up procedures are in place for all electronic data. 10 Clinical Record Management Guidelines
13 Security of archived clinical records Due to the irreplaceable nature of archived documents, they require maximum protection against theft, vandalism, unauthorised alteration and careless handling, particularly as they may be stored in non-current facilities, due to the fact that they are retrieved infrequently. Management responsibility It is the responsibility of senior organisational management to ensure the following: Staff are informed of the importance of the confidentiality of the patient health care information Confidentiality of patient reports is maintained at all times A record is maintained of all personnel who have access to stored data No patient report should be made available for unauthorised use Patient information requests Under Section 4 of the Data Protection Acts, 1988 and 2003, a patient has a right, by written request, to obtain a copy of any information relating to them, which is kept on computer, in a structured manual filing system or intended for such a system. Clinical Record Management Guidelines 11
14 Acknowledgements National Hospitals Office Code of Practice for Health Records Management, Data Protection Acts, 1988, Amendment Acts 2003 and related materials. Health Information, A National Strategy, An As Is Analysis of Information Governance in Health and Social Care Settings in Ireland, NSAI, The National Standards Authority of Ireland. Pre-Hospital Emergency Care Council (PHECC) Patient Care Report Guidebook, Edition 1 & Edition Clinical Record Management Guidelines
15
16 Pre-Hospital Emergency Care Council Abbey Moat House, Abbey Street Naas, Co. Kildare T: +353 (0) F: +353 (0) E: W: An Chomhairle Um Chúram Éigeandála Réamh-Ospidéal Teach Mainistir Dún, Sráid Mainistir Nás na Rí, Co Chill Dara T: +353 (0) F: +353 (0) R: W:
Protection. Code of Practice. of Personal Data RPC001147_EN_WB_L_1
Protection of Personal Data RPC001147_EN_WB_L_1 Table of Contents Data Protection Rules Foreword From the Data Protection Commissioner Introduction From the Chairman Data Protection Responsibility of Employees
University of Limerick Data Protection Compliance Regulations June 2015
University of Limerick Data Protection Compliance Regulations June 2015 1. Purpose of Data Protection Compliance Regulations 1.1 The purpose of these Compliance Regulations is to assist University of Limerick
CCG: IG06: Records Management Policy and Strategy
Corporate CCG: IG06: Records Management Policy and Strategy Version Number Date Issued Review Date V3 08/01/2016 01/01/2018 Prepared By: Consultation Process: Senior Governance Manager, NECS CCG Head of
Protection. Code of Practice. of Personal Data RPC001147_EN_D_19
Protection of Personal Data RPC001147_EN_D_19 Table of Contents Data Protection Rules Foreword From the Data Protection Commissioner Introduction From the Chairman Data Protection Rules Responsibility
Information Governance Framework. June 2015
Information Governance Framework June 2015 Information Security Framework Janice McNay June 2015 1 Company Thirteen Group Lead Manager Janice McNay Date of Final Draft and Version Number June 2015 Review
CORK INSTITUTE OF TECHNOLOGY
CORK INSTITUTE OF TECHNOLOGY DATA PROTECTION POLICY APPROVED BY GOVERNING BODY ON 30 APRIL 2009 INTRODUCTION Cork Institute of Technology is committed to a policy of protecting the rights and privacy of
POLICY STATEMENT 5.17
POLICY STATEMENT 5.17 DENTAL RECORDS 1 (Including ADA Guidelines for Dental Records) 1. Introduction 1.1 Dentists have a professional and a legal obligation to maintain clinically relevant, accurate and
Information Security Policy September 2009 Newman University IT Services. Information Security Policy
Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 Terms
Policy and Procedure Title: Maintaining Secure Learner Records Policy No: CCTP1001 Version: 1.0
PROVIDER NAME: POLICY AREA: College of Computing Technology (CCT) Standard 10: Information Management, Student Information System & Data Protection Policy and Procedure Title: Maintaining Secure Learner
Scottish Rowing Data Protection Policy
Revision Approved by the Board August 2010 1. Introduction As individuals, we want to know that personal information about ourselves is handled properly, and we and others have specific rights in this
Information and Compliance Management Information Management Policy
Aurora Energy Group Information Management Policy Information and Compliance Management Information Management Policy Version History REV NO. DATE REVISION DESCRIPTION APPROVAL 1 11/03/2011 Revision and
THE ROYAL COLLEGE OF RADIOLOGISTS
THE ROYAL COLLEGE OF RADIOLOGISTS TEL: 020-7636-4432 FAX: 020-7323-3100 38 PORTLAND PLACE LONDON W1B 1JQ BFCR(06)4 (updated February 2008) Retention and Storage of Images and Radiological Patient Data
Lord Chancellor s Code of Practice on the management of records issued under section 46 of the Freedom of Information Act 2000
Lord Chancellor s Code of Practice on the management of records issued under section 46 of the Freedom of Information Act 2000 Lord Chancellor s Code of Practice on the management of records issued under
DATA PROTECTION IT S EVERYONE S RESPONSIBILITY. An Introductory Guide for Health Service Staff
DATA PROTECTION IT S EVERYONE S RESPONSIBILITY An Introductory Guide for Health Service Staff 1 Message from Director General Dear Colleagues The safeguarding of and access to personal information has
RECORDS MANAGEMENT POLICY
[Type text] RECORDS MANAGEMENT POLICY POLICY TITLE Academic Year: 2013/14 onwards Target Audience: Governing Body All Staff and Students Stakeholders Final approval by: CMT - 1 October 2014 Governing Body
Record Keeping. Guide to the Standard for Professional Practice. 2013 College of Physiotherapists of Ontario
Record Keeping Guide to the Standard for Professional Practice 2013 College of Physiotherapists of Ontario March 7, 2013 Record Keeping Records tell a patient s story. The record should document for the
Data Protection for the Guidance Counsellor. Issues To Plan For
Data Protection for the Guidance Counsellor Issues To Plan For Author: Hugh Jones Data Protection Specialist Longstone Management Ltd. Published by the National Centre for Guidance in Education (NCGE)
Records Management Policy.doc
INDEX Pages 1. DESCRIPTORS... 1 2. KEY ROLE PLAYERS... 1 3. CORE FUNCTIONS OF THE RECORDS MANAGER... 1 4. CORE FUNCTIONS OF THE HEAD OF REGISTRIES... 1 5. PURPOSE... 2 6. OBJECTIVES... 2 7. POLICY... 2
Human Resources Policy documents. Data Protection Policy
Policy documents Aims of the Policy apetito is committed to meeting its obligations under data protection law. As a business, apetito handles a range of Personal Data relating to its customers, staff and
NHS LANARKSHIRE HEALTH RECORDS POLICY Management and Maintenance, Security, Storage, Distribution and Retention of Health Records
NHS LANARKSHIRE HEALTH RECORDS POLICY Management and Maintenance, Security, Storage, Distribution and Retention of Health Records Author: Responsible Lead Executive Director: Endorsing Body: Governance
WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY. Data Label: Public
WEST LOTHIAN COUNCIL RECORDS MANAGEMENT POLICY RECORDS MANAGEMENT POLICY CONTENTS 1. POLICY STATEMENT... 3 2. PRINCIPLES... 3 DEFINITIONS... 4 3. OBJECTIVES... 4 4. SCOPE... 4 5. OWNERSHIP & RESPONSIBILITIES...
UNIVERSITY OF NAIROBI POLICY ON RECORDS MANAGEMENT
UNIVERSITY OF NAIROBI POLICY ON RECORDS MANAGEMENT APRIL 2011 POLICY ON RECORDS MANAGEMENT TABLE OF CONTENTS DEFINITION OF TERMS AND ACRONYMS... 5 1.0 BACKGROUND... 5 1.1 RATIONALE... 5 1.2 VISION... 5
Records and Information Management. General Manager Corporate Services
Title: Records and Information Management Policy No: 057 Adopted By: Chief Officers Group Next Review Date: 08/06/2014 Responsibility: General Manager Corporate Services Document Number: 2120044 Version
Scotland s Commissioner for Children and Young People Records Management Policy
Scotland s Commissioner for Children and Young People Records Management Policy 1 RECORDS MANAGEMENT POLICY OVERVIEW 2 Policy Statement 2 Scope 2 Relevant Legislation and Regulations 2 Policy Objectives
INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY
INSTITUTE OF TECHNOLOGY TALLAGHT RECORD MANAGEMENT & RETENTION POLICY INTRODUCTION Under the Freedom of Information Acts, 1997 and 2003 the Institute is obliged to comply with legislation and publish a
FINAL May 2005. Guideline on Security Systems for Safeguarding Customer Information
FINAL May 2005 Guideline on Security Systems for Safeguarding Customer Information Table of Contents 1 Introduction 1 1.1 Purpose of Guideline 1 2 Definitions 2 3 Internal Controls and Procedures 2 3.1
IT ACCESS CONTROL POLICY
Reference number Approved by Information Management and Technology Board Date approved 30 April 2013 Version 1.0 Last revised Review date March 2014 Category Owner Target audience Information Assurance
Ministry of Children and Family Development (MCFD) Contractor s Information Management Guidelines
(This document supersedes the document previously entitled MCFD Contractor Records Guidelines) Ministry of Children and Family Development (MCFD) Contractor s Information Management Guidelines November
How To Protect Decd Information From Harm
Policy ICT Security Please note this policy is mandatory and staff are required to adhere to the content Summary DECD is committed to ensuring its information is appropriately managed according to the
Guide to Identifying Personal Information Banks
Guide to Identifying Personal Information Banks Revised April 2004 ISBN 0-7785-2089-7 Produced by: Access and Privacy Service Alberta 3rd Floor, 10155-102 Street Edmonton, Alberta, Canada T5J 4L4 Office
FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT
FREEDOM OF INFORMATION (SCOTLAND) ACT 2002 CODE OF PRACTICE ON RECORDS MANAGEMENT November 2003 Laid before the Scottish Parliament on 10th November 2003 pursuant to section 61(6) of the Freedom of Information
Section 12 Setting up a Mission Records Storage Facility
Section 12 Setting up a Mission Records Storage Facility Contents Main things to Remember about Setting up a Mission Records Storage Facility Introduction Minimum Standard for Semi-active Records Storage
Policy Document. IT Infrastructure Security Policy
Policy Document IT Infrastructure Security Policy [23/08/2011] Page 1 of 10 Document Control Organisation Redditch Borough Council Title IT Infrastructure Security Policy Author Mark Hanwell Filename IT
CORK INSTITUTE OF TECHNOLOGY
CORK INSTITUTE OF TECHNOLOGY RECORDS MANAGEMENT POLICY APPROVED BY GOVERNING BODY ON 2 APRIL 2009 INTRODUCTION What are Records? Records are documents created, used and maintained for business reasons.
Information Governance and Management Standards for the Health Identifiers Operator in Ireland
Information Governance and Management Standards for the Health Identifiers Operator in Ireland 30 July 2015 About the The (the Authority or HIQA) is the independent Authority established to drive high
Montclair State University. HIPAA Security Policy
Montclair State University HIPAA Security Policy Effective: June 25, 2015 HIPAA Security Policy and Procedures Montclair State University is a hybrid entity and has designated Healthcare Components that
RECORDS AND INFORMATION MANAGEMENT AND RETENTION
RECORDS AND INFORMATION MANAGEMENT AND RETENTION Policy The Health Science Center recognizes the need for orderly management and retrieval of all official records and a documented records retention and
The potential legal consequences of a personal data breach
The potential legal consequences of a personal data breach Tue Goldschmieding, Partner 16 April 2015 The potential legal consequences of a personal data breach 15 April 2015 Contents 1. Definitions 2.
Data Compliance. And. Your Obligations
Information Booklet Data Compliance And Your Obligations What is Data Protection? It is the safeguarding of the privacy rights of individuals in relation to the processing of personal data. The Data Protection
Montana Local Government Records Management Guidelines
Montana Local Government Records Management Guidelines Prepared and Published by the Montana Local Government Records Committee Rev 3.0 Sep 2010 TABLE OF CONTENTS Introduction i Authority...ii Definitions...
September 2015 TO THE BOARDS OF MANAGEMENT AND PRINCIPAL TEACHERS OF PRIMARY SCHOOLS
September 2015 TO THE BOARDS OF MANAGEMENT AND PRINCIPAL TEACHERS OF PRIMARY SCHOOLS Fair Processing Notice to explain how the personal data of pupils in primary schools on the Primary Online Database
University of Brighton School and Departmental Information Security Policy
University of Brighton School and Departmental Information Security Policy This Policy establishes and states the minimum standards expected. These policies define The University of Brighton business objectives
So the security measures you put in place should seek to ensure that:
Guidelines This guideline offers an overview of what the Data Protection Act requires in terms of information security and aims to help you decide how to manage the security of the personal data you hold.
The Manitowoc Company, Inc.
The Manitowoc Company, Inc. DATA PROTECTION POLICY 11FitzPatrick & Associates 4/5/04 1 Proprietary Material Version 4.0 CONTENTS PART 1 - Policy Statement PART 2 - Processing Personal Data PART 3 - Organisational
COMPLIANCE WITH THIS DOCUMENT IS MANDATORY
COVER SHEET NAME OF DOCUMENT TYPE OF DOCUMENT DOCUMENT NUMBER Procedure DATE OF PUBLICATION Published: October 2002 Revised: October 2004 Revised: September 2005 Revised: February 2011 Revised: November
Information and records management. Purpose. Scope. Policy
Information and records management NZQA Quality Management System Policy Purpose The purpose of this policy is to establish a framework for the management of corporate information and records within NZQA.
University of Liverpool
University of Liverpool Information Security Policy Reference Number Title CSD-003 Information Security Policy Version Number 3.0 Document Status Document Classification Active Open Effective Date 01 October
<Choose> Addendum Windows Azure Data Processing Agreement Amendment ID M129
Addendum Amendment ID Proposal ID Enrollment number Microsoft to complete This addendum ( Windows Azure Addendum ) is entered into between the parties identified on the signature form for the
The Manchester College
The Manchester College The Manchester College Produced by TMC Prin DataProtect pol v1 11/2010 All rights reserved; no part of this publication may be photocopied, recorded or otherwise reproduced, stored
CONTROLLED DOCUMENT. Uncontrolled Copy. RDS014 Research Related Archiving. University Hospitals Birmingham NHS Foundation Trust
University Hospitals Birmingham NHS Foundation Trust CONTROLLED DOCUMENT RDS014 Research Related Archiving CATEGORY: CLASSIFICATION: PURPOSE Controlled Document Number: Version Number: 1 Controlled Document
DATA PROTECTION AND DATA STORAGE POLICY
DATA PROTECTION AND DATA STORAGE POLICY 1. Purpose and Scope 1.1 This Data Protection and Data Storage Policy (the Policy ) applies to all personal data collected and dealt with by Centre 404, whether
Data Protection Guidance
53 September 2010 Management Circular No. 53 Glasgow City Council Education Services Wheatley House 25 Cochrane Street Merchant City GLASGOW G1 1HL To Heads of all Educational Establishments Data Protection
Information Security Awareness Training Gramm-Leach-Bliley Act (GLB Act)
Information Security Awareness Training Gramm-Leach-Bliley Act (GLB Act) The GLB Act training packet is part of the Information Security Awareness Training that must be completed by employees. Please visit
PERSONAL INJURIES ASSESSMENT BOARD DATA PROTECTION CODE OF PRACTICE
PERSONAL INJURIES ASSESSMENT BOARD DATA PROTECTION CODE OF PRACTICE ADOPTED ON 9 th January 2008 TABLE OF CONTENTS Page No. 1 Introduction...3 2 Glossary...3 3 Types of Personal Data held by Us...3 4 Obligations
INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER
INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER 3 APPLIES TO: ALL STAFF 4 COMMITTEE & DATE APPROVED: AUDIT COMMITTEE
Records Management - Council Policy Version 2-28 April 2014. Council Policy. Records Management. Table of Contents. Table of Contents... 1 Policy...
Council Policy Records Management Table of Contents Table of Contents... 1 Policy... 2 Policy Objectives... 2 Policy Statement... 2 Records Management Program... 2 Accountability Requirements... 3 General
Policy Document RECORDS MANAGEMENT POLICY
The District Council Of Elliston Policy Document RECORDS MANAGEMENT POLICY Date Adopted: 16 th December 2005 Review Date: Ongoing, as necessary Minute Number: 300. 2005 E:\WPData\Jodie\My Documents\policies
Records Management - Risk Assessment Tool
Introduction This Risk Assessment Tool is designed to: - Provide business units with a quick reference to identify obvious risks to their records and recordkeeping systems - Assess additional risks within
Newcastle University Information Security Procedures Version 3
Newcastle University Information Security Procedures Version 3 A Information Security Procedures 2 B Business Continuity 3 C Compliance 4 D Outsourcing and Third Party Access 5 E Personnel 6 F Operations
Council Policy. Records & Information Management
Council Policy Records & Information Management COUNCIL POLICY RECORDS AND INFORMATION MANAGEMENT Policy Number: GOV-13 Responsible Department(s): Information Systems Relevant Delegations: None Other Relevant
Information Circular
Information Circular Enquiries to: Brooke Smith Senior Policy Officer IC number: 0177/14 Phone number: 9222 0268 Date: March 2014 Supersedes: File No: F-AA-23386 Subject: Practice Code for the Use of Personal
Research Governance Standard Operating Procedure
Research Governance Standard Operating Procedure The Management and Use of Research Participant Data for Secondary Research Purposes SOP Reference: Version Number: 01 Date: 28/02/2014 Effective Date: Review
California State University, Sacramento INFORMATION SECURITY PROGRAM
California State University, Sacramento INFORMATION SECURITY PROGRAM 1 I. Preamble... 3 II. Scope... 3 III. Definitions... 4 IV. Roles and Responsibilities... 5 A. Vice President for Academic Affairs...
Appendix 4-2: Sample HIPAA Security Risk Assessment For a Small Physician Practice
Appendix 4-2: Administrative, Physical, and Technical Safeguards Breach Notification Rule How Use this Assessment The following sample risk assessment provides you with a series of sample questions help
ROEHAMPTON UNIVERSITY DATA PROTECTION POLICY
ROEHAMPTON UNIVERSITY DATA PROTECTION POLICY Originated by: Data Protection Working Group: November 2008 Impact Assessment: (to be confirmed) Recommended by Senate: 28 January 2009 Approved by Council:
Data Protection in Ireland
Data Protection in Ireland 0 Contents Data Protection in Ireland Introduction Page 2 Appointment of a Data Processor Page 2 Security Measures (onus on a data controller) Page 3 8 Principles Page 3 Fair
Site visit inspection report on compliance with HTA minimum standards. London School of Hygiene & Tropical Medicine. HTA licensing number 12066
Site visit inspection report on compliance with HTA minimum standards London School of Hygiene & Tropical Medicine HTA licensing number 12066 Licensed under the Human Tissue Act 2004 for the storage of
Code of Practice on Data Protection for the Insurance Sector
Code of Practice on Data Protection for the Insurance Sector (Approved by the Data Protection Commissioner under Section 13 (2) of the Data Protection Acts, 1988 and 2003) Forward I am very happy to be
Human Resources Policy No. HR46
Human Resources Policy No. HR46 Maintaining Personal Files and ESR Records Additionally refer to HR04 Verification of Professional Registration HR33 Recruitment and Selection HR34 Policy for Carrying Out
Scope and Explanation
The Moray Council Retention & Disposal Schedule for documents and records [paper and electronic] Scope and Explanation 1 Document Control Sheet Name of Document: The Moray Council Records Retention Schedule
9/11 Heroes Stamp Act of 2001 File System
for the 9/11 Heroes Stamp Act of 2001 File System Contact Point Elizabeth Edge US Fire Administration Federal Emergency Management Agency (202) 646-3675 Reviewing Official Nuala O Connor Kelly Chief Privacy
Index. Definitions. What is Data Protection? Rights of Individuals. The 8 Principles of Data Protection
Data Protection Awareness Based on DIT s Data Protection Policy, the Data Protection Acts, 1988 & 2003 and guidance from the Office of the Data Protection Commissioner Index Definitions What is Data Protection?
1. Each employee is responsible for managing college records in a responsible and professional manner.
Policy O-6.2 Approved By: College Executive Team Approval Date: February 26, 2003 Amendment Date: November 25, 2009 Policy Holder: VP Administration & CFO Purpose / Rationale RECORD MANAGEMENT The purpose
4.01. Archives of Ontario and Information Storage and Retrieval Services. Chapter 4 Section. Background
Chapter 4 Section 4.01 Ministry of Government Services Archives of Ontario and Information Storage and Retrieval Services Follow-up on VFM Section 3.01, 2007 Annual Report Background The Archives of Ontario
RECORDS MANAGEMENT POLICY
Reference number RM001 Approved by Information Management and Technology Board Date approved 23 rd November 2012 Version 1.1 Last revised July 2013 Review date May 2015 Category Records Management Owner
INTERNATIONAL SOS. Data Protection Policy. Version 1.05
INTERNATIONAL SOS Data Protection Policy Document Owner: LCIS Division Document Manager: Group General Counsel Effective: December 2008 Revised: 2015 All copyright in these materials are reserved to AEA
The Newcastle upon Tyne Hospitals NHS Foundation Trust. Occupational Health Records Management and Retention Operational Policy
The Newcastle upon Tyne Hospitals NHS Foundation Trust Occupational Health Records Management and Retention Operational Policy Version No. 1.0 Effective From: 9 October 2013 Expiry Date: 30 September 2016
Information Security Incident Management Policy September 2013
Information Security Incident Management Policy September 2013 Approving authority: University Executive Consultation via: Secretary's Board REALISM Project Board Approval date: September 2013 Effective
HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA): FACT SHEET FOR NEUROPSYCHOLOGISTS Division 40, American Psychological Association
HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA): FACT SHEET FOR NEUROPSYCHOLOGISTS Division 40, American Psychological Association DISCLAIMER This general information fact sheet is made available
PRINCIPLE IV: THE SOCIAL WORK AND SOCIAL SERVICE WORK RECORD
PRINCIPLE IV: THE SOCIAL WORK AND SOCIAL SERVICE WORK RECORD The creation and maintenance of records by social workers and social service workers is an essential component of professional practice. The
How To Save Money On Health Care Through A Computer System
Save time, save money, save lives BETTER DOCUMENT AND DATA MANAGEMENT FOR THE NHS At a time when funds are scarce, investment in new and improved data management systems can actually create significant
DATA RETENTION POLICY
DATA RETENTION POLICY Contents 1. Key Principles... 3 2. Introduction to the Policy and Guidelines... 3 3. Policy and Guidelines... 4 4. Scottish Ministers Requirements... 5 5. Access to information...
PRESIDENT S DECISION No. 40. of 27 August 2013. Regarding Data Protection at the European University Institute. (EUI Data Protection Policy)
PRESIDENT S DECISION No. 40 of 27 August 2013 Regarding Data Protection at the European University Institute (EUI Data Protection Policy) THE PRESIDENT OF THE EUROPEAN UNIVERSITY INSTITUTE, Having regard
Office of the Data Protection Commissioner of The Bahamas. Data Protection (Privacy of Personal Information) Act, 2003. A Guide for Data Controllers
Office of the Data Protection Commissioner of The Bahamas Data Protection (Privacy of Personal Information) Act, 2003 A Guide for Data Controllers 1 Acknowledgement Some of the information contained in
Records Management plan
Records Management plan Prepared for 31 October 2013 Audit Scotland is a statutory body set up in April 2000 under the Finance and Accountability (Scotland) Act 2000. We help the Auditor General for Scotland
07/14/2014 REVIEWED/REVISED: DATE TO BE REVIEWED: 01/31/2016 EMERGENCY MEDICAL SERVICES ELECTRONIC PATIENT CARE REPORT DOCUMENTATION - EPCR
POLICY NO: 701 DATE ISSUED: 08/2000 DATE 07/14/2014 REVIEWED/REVISED: DATE TO BE REVIEWED: 01/31/2016 EMERGENCY MEDICAL SERVICES I. PURPOSE: To define the use of standardized records to be used by Emergency
Portable Devices and Removable Media Acceptable Use Policy v1.0
Portable Devices and Removable Media Acceptable Use Policy v1.0 Organisation Title Creator Oxford Brookes University Portable Devices and Removable Media Acceptable Use Policy Information Security Working
Data and Information Security Policy
St. Giles School Inspire and achieve through creativity School Policy for: Date: February 2014 Data and Information Security Policy Legislation: Policy lead(s) The Data Protection Act 1998 (with consideration
