Information governance guidance

If you can't find the guidance you need, tell us

Did you find the guidance you were looking for? If not, let us know what else we can help you with
View all Integrated care Sharing with other sectors Communications tools Consent Individual rights Sharing preferences COVID-19 Sharing with colleagues Research Enabling remote working Template Confidentiality Personal health records GDPR and data protection Comms with patients or service users Social care

Joining up and supporting care

Template

COVID-19 privacy notice

An example supplementary privacy notice which can be used by organisations to inform patients and service users about the ways information is being used as a result of COVID-19

COVID-19 Template GDPR and data protection Comms with patients or service users

Managing information

Panel Guidance

Personal data breaches

This guidance will help health and care organisations deal with personal data breaches, for example, losing personal information. It provides advice on what a personal data breach is and the steps that need to be taken if a breach occurs.

Comms with patients or service users Individual rights GDPR and data protection
Panel Guidance

What is and isn’t direct marketing?

The ICO has produced wider guidance on direct marketing for the public sector. This guidance, produced by the panel, specifically considers the rules on direct marketing in the context of health and care communications.

GDPR and data protection Comms with patients or service users
Panel Guidance

Subject Access Requests

This guidance will help you understand what a Subject Access Request is and how they are responded to.

Individual rights GDPR and data protection
Panel Guidance

Consent and confidential patient information

This guidance is about consent and what it means when sharing Confidential Patient Information.

Consent GDPR and data protection

Research

External Guidance

GDPR guidance for researchers and study coordinators

This operational guidance has been produced by the Health Research Authority for researchers and study coordinators on the implications of the GDPR for the delivery of research in the UK.

Research GDPR and data protection