Information governance guidance

We hope that you find the guidance on these pages useful. Have we done a good job? Let us know through our feedback form, or alternatively contact us

New elearning - Information sharing for frontline health and adult social care staff, this module is designed to empower staff to share information for individual care

Take the 'information sharing' module

Available now - our free elearning provides practical tips and real life scenarios to enhance your understanding of the principles for sharing information securely for individual care, research and planning.

View all Integrated care Sharing with other sectors Communications tools Consent Individual rights Sharing preferences COVID-19 Sharing with colleagues Research Enabling remote working Template Confidentiality Personal health records Comms with patients or service users Social care Common law UK GDPR and data protection

Managing information

What is and isn’t direct marketing?

The ICO has produced wider guidance on direct marketing for the public sector. This guidance, produced by the panel, specifically considers the rules on direct marketing in the context of health and care communications.

Communications tools Individual rights Sharing preferences Research Comms with patients or service users UK GDPR and data protection

Understanding Health Data Access (UHDA)

A suite of short films and resources explaining the rules that govern how health and social care data is shared beyond the treatment of individuals.

Sharing with other sectors Research Confidentiality

Access to the health and care records of deceased people

This guidance provides advice on access to health and care records following the death of an individual.

Consent Individual rights Sharing preferences Research Confidentiality Personal health records Social care Common law

New technology

Artificial Intelligence

This guidance focuses on the IG implications of using AI in health and care settings, and should help support the lawful and safe use of data for AI innovations.

Integrated care Consent Individual rights Research Common law UK GDPR and data protection

External Guidance

Legal requirements for using health and care data in data-driven technologies

This guidance gives an overview of the legal requirements for using health and care data in the development and deployment of data-driven technologies.

Sharing with other sectors Communications tools Research Confidentiality Common law UK GDPR and data protection

External Guidance

Accessing health and care data for research on data-driven technology

This guidance gives a step-by-step overview of the process for accessing health and social care data for research of data-driven technologies.

Sharing with other sectors Communications tools Research Confidentiality Common law UK GDPR and data protection

Research

External Guidance

Guidance for CAG Applicants

Detailed guidance from the Health Research Authority on submitting an application to Confidentiality Advisory Group (CAG) for both research and non-research purposes.

Consent Research

External Guidance

Information governance in local quality improvement

This guide by Healthcare Quality Improvement Partnership (HQIP), describes how information governance (IG) laws and principles apply to the use of personal data in multi-agency healthcare quality improvement studies.

Research UK GDPR and data protection