Back to Information governance
NHS England - Transformation Directorate
We hope that you find the guidance on these pages useful. Have we done a good job? Let us know through our feedback form, or alternatively contact us
Available now - our free elearning provides practical tips and real life scenarios to enhance your understanding of the principles for sharing information securely for individual care, research and planning.
Use of mobile devices by patients in hospitals
This guidance provides advice for patients using mobile devices such as phones, tablets and cameras in acute hospitals.
Personal data breaches
This guidance will help health and care organisations deal with personal data breaches, for example, losing personal information. It provides advice on what a personal data breach is and the steps that need to be taken if a breach occurs.
Records Management Code of Practice
The Records Management Code of Practice sets out how records relating to health and care should be managed.
Sharing information with the police
This guidance is about disclosure of information by health and care organisations to the police.
What is and isn’t direct marketing?
The ICO has produced wider guidance on direct marketing for the public sector. This guidance, produced by the panel, specifically considers the rules on direct marketing in the context of health and care communications.
Subject Access Requests
This guidance will help you understand what a Subject Access Request is and how they are responded to.
Consent and confidential patient information
This guidance is about consent and what it means when sharing Confidential Patient Information.
Email and text message communications
This guidance is about how you can safely use email and text messages to communicate with patients and service users.
Eight principles to ensure people's information is kept confidential and used appropriately.
Amending patient and service user records
This guidance provides advice on patients and service users requesting changes to their health and care records. It also covers how staff should amend records.
Access to the health and care records of deceased people
This guidance provides advice on access to health and care records following the death of an individual.
This guidance focuses on the IG implications of using AI in health and care settings, and should help support the lawful and safe use of data for AI innovations.