Skip to main content

Current Chapter

Current chapter – Section 17: Information security management


Information security is essential for all types of confidential records, whether manual or electronic. Organisations must ensure staff take basic precautions against information security breaches, such as not leaving portable computers, medical notes or files in unattended cars or in easily accessible areas. All files and portable equipment should be stored under lock and key when not actually being used. Staff should not normally take patient/service user records home, and where this cannot be avoided, procedures for safeguarding the information effectively should be locally agreed.

Guidance on information security is provided in the DH publication Information Security: NHS Code of Practice

Detailed information security assurance requirements are set out in the Information Governance Toolkit


Last edited: 17 January 2022 1:48 pm