Transcript NHS England Presentation Template

NHS England
Interoperability
Programme
Workshop
Information
Governance
16th December 2014
www.england.nhs.uk
Information Governance
•
•
•
•
Richard Sewart, NHS England
Tony Shannon, Leeds Care Record
Alastair Gilchrist, North West London
Amir Mehrkar, Hampshire Care Record
www.england.nhs.uk
Purpose of workshop
• To present and capture information governance
issues relating to information sharing in integrated
environments
• To initiate contribution to developing guidance on
information sharing supported by a standard
information sharing agreement
www.england.nhs.uk
IG and Interoperability
1. Good IG practice creates an enabling environment for
interoperability in which information can be shared with
confidence:
• Legal requirements
• Controls
• Assurance processes
2. Interoperability layers support IG functionally and
technically e.g. through:
• Data structures
• Messaging
• Technical transport
www.england.nhs.uk
Information Sharing Agreements
• Why do organisations and health communities need
information sharing agreements?
• What should an information sharing agreement
include?
• What are the practical issues?
www.england.nhs.uk
Why do we need ISAs?
• To ensure that there are no obstacles to sharing
information arising from uncertainty or assumptions
about IG requirements
• To commit participating organisations to controls that
ensure that information is shared lawfully
• To give professionals confidence that they are
sharing information lawfully
www.england.nhs.uk
What should an ISA include?
• Description of the purposes of information sharing and the
data required to support these purposes – with reference
to different requirements of caring disciplines
• Statement of the legal basis that supports information
sharing for each of these purposes
• Controls that ensure information is shared lawfully for
these purposes
• Reference to operational procedures, guidance and data
controller / data processor contracts
www.england.nhs.uk
The Law and Information Sharing
• Common law duty of confidence
• Consent for disclosure of data held in confidence
• Data Protection Act 1998
• 8 Principles and rights
• Human Rights Act 1998
• Right to privacy
www.england.nhs.uk
IG and interoperability controls
• The law:
• Confidentiality and consent
• Interoperability controls:
• Recording and actioning of consent decisions
• Consent to share
• Consent to view
• Legitimate relationships
• Sealed envelopes
www.england.nhs.uk
IG and interoperability controls
• The law:
• Adequate relevant and not excessive
• Interoperability controls:
• Access levels
• Role based access control
www.england.nhs.uk
IG and interoperability controls
• The law:
• Accurate and up to date
• Interoperability controls:
• Data and messaging standards
• Currency / synchronisation
www.england.nhs.uk
IG and interoperability controls
• The Law:
• Technical and organisational measures to ensure
security
• Interoperability controls:
• Business processes / operational procedures
• Training
• System functionality
• Technical infrastructure
www.england.nhs.uk
IG and interoperability
Practical issues….
www.england.nhs.uk