Appendix 2: policies and guidelines

Data Security and Protection Toolkit

The Data Security and Protection Toolkit is an online self-assessment tool that all organisations must use if they have access to NHS patient data and systems.

National Data Guardian (NDG)

The NDG advises and challenges the health and care system to help ensure that citizens’ confidential information is safeguarded securely and used properly. The purpose is also to make sure that it is shared when appropriate to achieve better outcomes for patients. There are 10 standards which are clustered under leadership obligations to address people, process and technology aspects for which the quality of data forms a foundation.

Information Commissioner’s Office (ICO)

The ICO is is the UK's independent body set up to uphold information rights. Their role is to uphold information rights in the public interest with data quality impacting on record keeping and end-use. Their site holds many useful resources relating to data management.

General Data Protection Regulation (GDPR)

The GDPR reshapes the way in which sectors manage data, as well as redefines the roles for key leaders. Article 5 and Article 47 paragraph 2 (d) specifically set out the importance of data quality and processing within the Regulation.