[Skip to content]

Positive
NHS Trust - Nottinghamshire Healthcare
Positive about mental health and learning disability
.

Section 7 - Confidentiality & Information Governance Policies

There are a range of complex legal and professional obligations that limit, or set conditions in respect of the management, security, use and disclosure of information along with a range of statues that permit or require information to be used or disclosed. 

Information Governance is a framework that integrates these separate but interrelated acts, directives and regulations within a single transparent package.  This framework currently encompasses; Records Management, Information Requests (clinical and non clinical), Security, Data Quality and Information Sharing although this list is not exhaustive. 

Each area has different legal and professional obligations which individuals need to consider on an individual basis.  The role of the Trusts Caldicott Guardian (Janet Sheard) and the Trusts Senior Information Risk Owner (Peter Miller) along with the Trusts Information Governance and IT Security Departments is to support colleagues in considering the varying aspects of governance, balancing the practicality and care of our patients whilst keeping the Trusts information assets safe and secure.

Safeguarding of Trust assets such as information, equipment, and Data networks is paramount in ensuring that we can provide sufficient assurance that information provided by Patients, their families, staff and sensitive corporate documentation will only be used for the purposes for which it was originally given, and not released to others without their consent.

7.01 - Information Systems Security Policy

7.02 - Corporate Records Policy

7.03 - RiO Access and Audit Policy & Procedure

7.04 - Safe & Secure Handling of Confidential Information

7.05 - Information Lifecycle Policy

7.06 - Clinical Records Management Policy & Procedure

7.07 - Operation of a Registration Authority Policy

7.08 - Information Services Data Quality Policy

7.09 - Policy deleted

7.10 - Information Technology Acceptable Use Policy and Procedure

7.11 - Mobile and Remote Access Working Security Policy and Procedure

7.12 - Digital Investigations Policy and Procedure

7.13 - Freedom of Information Act Policy

7.14 - Email / Internet Policy

7.15 - Information Governance Policy and Procedure

7.16 - Information Risk Policy