Information governance guidance

Use of mobile devices by patients in hospitals

This guidance provides advice for patients using mobile devices such as phones, tablets and cameras in acute hospitals.

COVID-19 information for volunteers

This guidance provides information governance (IG) advice to support organisations who are working with volunteers during the COVID-19 period. It also provides some advice which can be provided to the volunteers.

Personal data breaches

This guidance will help health and care organisations deal with personal data breaches, for example, losing personal information. It provides advice on what a personal data breach is and the steps that need to be taken if a breach occurs.

Records Management Code of Practice

The Records Management Code of Practice 2021 sets out how records relating to health and care should be managed.

Sharing information with the police

This guidance is about disclosure of information by health and care organisations to the police.

What is and isn’t direct marketing?

The ICO has produced wider guidance on direct marketing for the public sector. This guidance, produced by the panel, specifically considers the rules on direct marketing in the context of health and care communications.

Flu vaccines and the COVID-19 response

This guidance describes how data is being used to help ensure that those who are entitled to a flu vaccine receive one. This is very important during the pandemic. This guidance covers data relating to both health and care staff and patients.

Data sharing agreement template

A data sharing agreement template and accompanying guide which can be used by local organisations.

Subject Access Requests

This guidance will help you understand what a Subject Access Request is and how they are responded to.

Consent and confidential patient information

This guidance is about consent and what it means when sharing Confidential Patient Information.

Email and text message communications

This guidance is about how you can safely use email and text messages to communicate with patients and service users.

Access to NHS staff COVID-19 test results

This guidance provides advice on employers accessing the COVID-19 test results of NHS staff.

Access to care home staff COVID-19 test results

This guidance is to assist care home managers when dealing with information relating to staff testing for COVID-19.

Caldicott principles

Eight principles to ensure people's information is kept confidential and used appropriately.

Amending patient and service user records

This guidance provides advice on patients and service users requesting changes to their health and care records. It also covers how staff should amend records.