Information governance guidance

This website is closing soon

From April 2026, you can find all updates to IG portal content at digital.nhs.uk

View all Integrated care Sharing with other sectors Communications tools Consent Individual rights Sharing preferences COVID-19 Sharing with colleagues Research Enabling remote working Template Confidentiality Personal health records Comms with patients or service users Social care Common law UK GDPR and data protection

Joining up and supporting care

Information Governance Framework: Shared Care Records

The Information Governance Framework for Integrated Health and Care: Part 1 - Shared Care Records has been developed to provide a structured approach to ensure Shared Care Records meet their legal obligations.

Integrated care Sharing with other sectors Sharing with colleagues Personal health records Social care

Use and share information with confidence

This guidance will support you to use and share information with confidence when caring for patients and service users.

Sharing preferences Sharing with colleagues Confidentiality Social care Common law UK GDPR and data protection

Information sharing in Multidisciplinary Teams (MDTs)

A MDT is a group of health and care staff from different organisations and professions that together make decisions regarding the treatment of individual patients and service users. There are some IG considerations when working as part of an MDT.

Integrated care Sharing preferences Sharing with colleagues Template Social care

Sharing information with unpaid carers

This guidance aims to advise those being cared for, carers and health and care professionals about how to share confidential information about an individual to support their care.

Integrated care Sharing with other sectors Sharing preferences Sharing with colleagues Comms with patients or service users Social care

Integrated care systems (ICSs), integrated care boards (ICBs) and integrated care partnerships (ICPs) - a quick guide

Advice for information governance professionals on sharing information between organisations within different collaborative systems, as well as determining controllership arrangements.

Integrated care Sharing with colleagues UK GDPR and data protection

Universal information governance templates and FAQs

NHS England has produced a suite of universal IG templates to support health organisations’ lawful collection, processing and sharing of information.

Integrated care Sharing with other sectors Sharing preferences Sharing with colleagues Template UK GDPR and data protection

HIV and Sexually Transmitted Infections (STIs)

A guide to how HIV and STI information is kept confidential, used and shared.

Integrated care Sharing with other sectors Consent Individual rights Sharing preferences Sharing with colleagues Confidentiality Personal health records

Child Protection Information Sharing (CP-IS) system template DPIA

This data protection impact assessment (DPIA) template is for professionals in health and care organisations who are responsible for managing their organisation’s access to and use of the Child Protection Information Sharing (CP-IS) system.

Integrated care Sharing with other sectors Sharing with colleagues Template Social care Common law UK GDPR and data protection

Managing information

Consent and confidential patient information

This guidance is about consent and what it means when sharing Confidential Patient Information.

Integrated care Sharing with other sectors Consent Individual rights Sharing with colleagues Comms with patients or service users Common law UK GDPR and data protection

External Guidance

Caldicott principles

Eight principles to ensure people's information is kept confidential and used appropriately.

Individual rights Sharing with colleagues Confidentiality Personal health records

Preparing for the UK COVID-19 Inquiry

This guidance does not constitute legal advice. It is for each individual organisation to ensure they are appropriately prepared to respond to any request from the inquiry and seek independent legal advice where required.

Sharing with other sectors COVID-19 Sharing with colleagues Personal health records Common law

Freedom to Speak Up

This guidance helps patients and staff of NHS organisations understand the Freedom to Speak Up (FTSU) process, and FTSU guardians and information governance professionals to manage information raised in a safe and appropriate way.

Individual rights Sharing with colleagues Confidentiality

Sharing information during major incidents and emergencies

This guidance provides advice to patients and service users on how information may be shared in emergencies and also provides advice to health and care organisations of considerations that need to be made when sharing information during major incidents and emergencies.

Sharing with other sectors Individual rights Sharing with colleagues Confidentiality Common law UK GDPR and data protection

Information risk and impacts to individuals following personal data breaches

This guidance provides detailed information on the potential negative impacts or risks associated with the breach of certain types of information and actions that may need to be taken.

Sharing with colleagues Confidentiality Personal health records Comms with patients or service users UK GDPR and data protection

Sharing information relating to Infected Blood Compensation Authority claims

This guidance provides advice on information sharing with the Infected Blood Compensation Authority (IBCA) to support claims from those who have been impacted.

Sharing with other sectors Consent Individual rights Sharing with colleagues Confidentiality Personal health records Common law UK GDPR and data protection

Information sharing with the Department for Work and Pensions (DWP)

This guidance provides advice on information sharing with the Department for Work and Pensions (DWP) to support the assessment of benefits claims.

Sharing with other sectors Consent Individual rights Sharing with colleagues Confidentiality Personal health records Common law UK GDPR and data protection

Using information for reflective practice

This guidance provides advice on how patients’ and service users’ information should be used for reflective practice.

Consent Sharing preferences Sharing with colleagues Research Confidentiality Personal health records Comms with patients or service users Social care Common law UK GDPR and data protection

Identifying controllers and processors in health and care

Guidance to help IG professionals identify whether health and care organisations are acting as a controller, joint controller or processor in relation to processing of personal data.

Sharing with other sectors Sharing with colleagues Research Confidentiality Personal health records Social care UK GDPR and data protection