Appendix 2: Policies and guidelines

Data Security and Protection Toolkit

The Data Security and Protection Toolkit is an online self-assessment tool that all organisations must use if they have access to NHS patient data and systems.

The National Data Guardian (NDG)

The National Data Guardian (NDG) advises and challenges the health and care system to help ensure that citizens’ confidential information is safeguarded securely and used properly. The purpose is also to make sure that it is shared when appropriate to achieve better outcomes for patients. There are 10 standards which are clustered under leadership obligations to address people, process and technology aspects for which the quality of data forms a foundation

The Information Commissioner’s Office - ICO

The Information Commissioner’s Office - ICO is the UK's independent body set up to uphold information rights. Their role is to uphold information rights in the public interest with data quality impacting on record keeping and end-use. Their site holds many useful resources relating to data management.

General Data Protection Regulation - GDPR

The General Data Protection Regulation - GDPR reshapes the way in which sectors manage data, as well as redefines the roles for key leaders. Article 5 and Article 47 paragraph 2 (d) specifically set out the importance of data quality and processing within the Regulation.