Information governance guidance

Using video conferencing and consultation tools

This guidance sets out how video conferencing and consultation tools can be used safely and securely.

Use of mobile devices by patients in hospitals

This guidance provides advice for patients using mobile devices such as phones, tablets and cameras in acute hospitals.

Access to patient records through the NHS App

The NHS App is changing to make it easier for patients to read new entries in their GP record. This guidance covers the key things that patients, GPs and IG professionals should know.

Sharing information with unpaid carers

This guidance aims to advise those being cared for, carers and health and care professionals about how to share confidential information about an individual to support their care.

Personal data breaches and related incidents

This guidance provides advice to patients and service users on what a personal data breach is and to help health and care organisations deal with personal data breaches.

What is and isn’t direct marketing?

The ICO has produced wider guidance on direct marketing for the public sector. This guidance, produced by the panel, specifically considers the rules on direct marketing in the context of health and care communications.

Subject Access Requests

This guidance will help you understand what a Subject Access Request is and how they are responded to.

Consent and confidential patient information

This guidance is about consent and what it means when sharing Confidential Patient Information.

Information risk and impacts to individuals following personal data breaches

This guidance provides detailed information on the potential negative impacts or risks associated with the breach of certain types of information and actions that may need to be taken.

Cyber incident IG checklist and template notification letter

NHS England has produced two templates for information governance (IG) professionals in health and care organisations to use when managing and supporting a cyber incident.

Subject Access Request (SAR) form

This form can be used by patients and service users to make a SAR to a health or care organisation.

Using information for reflective practice

This guidance provides advice on how patients’ and service users’ information should be used for reflective practice.

Texting, emailing and messaging patients and service users

This guidance covers information governance (IG) topics you need to think about when sending or receiving messages about health and care services by text, email or other types of messaging.

Virtual wards

Virtual wards support people, who would otherwise be in hospital, to receive the care and treatment they need in their own home or usual place of residence. Virtual wards are suitable for a range of conditions that can be safely and effectively monitored at home including respiratory conditions, heart failure and COVID-19.