Information governance guidance

Information Governance Framework: Shared Care Records

The Information Governance Framework for Integrated Health and Care: Part 1 - Shared Care Records has been developed to provide a structured approach to ensure Shared Care Records meet their legal obligations.

Sharing information with the voluntary sector

This guidance provides information to health and care organisations on how information about patients and service users can be shared safely with the voluntary sector

Sharing information with unpaid carers

This guidance aims to advise those being cared for, carers and health and care professionals about how to share confidential information about an individual to support their care.

Universal information governance templates and FAQs

NHS England has produced a suite of universal IG templates to support health organisations’ lawful collection, processing and sharing of information.

HIV and Sexually Transmitted Infections (STIs)

A guide to how HIV and STI information is kept confidential, used and shared.

Child Protection Information Sharing (CP-IS) system template DPIA

This data protection impact assessment (DPIA) template is for professionals in health and care organisations who are responsible for managing their organisation’s access to and use of the Child Protection Information Sharing (CP-IS) system.

Sharing information with the police

This guidance is about disclosure of information by health and care organisations to the police.

Subject Access Requests

This guidance will help you understand what a Subject Access Request is and how they are responded to.

Consent and confidential patient information

This guidance is about consent and what it means when sharing Confidential Patient Information.

Preparing for the UK COVID-19 Inquiry

This guidance does not constitute legal advice. It is for each individual organisation to ensure they are appropriately prepared to respond to any request from the inquiry and seek independent legal advice where required.

Inquiries, reviews, investigations and court orders in health and social care services

This guidance is aimed at providing health and care services with IG advice on how to deal with requests for records from statutory public enquiries, non-statutory public enquiries, and courts.

Sharing information during major incidents and emergencies

This guidance provides advice to patients and service users on how information may be shared in emergencies and also provides advice to health and care organisations of considerations that need to be made when sharing information during major incidents and emergencies.

Sharing information relating to Infected Blood Compensation Authority claims

This guidance provides advice on information sharing with the Infected Blood Compensation Authority (IBCA) to support claims from those who have been impacted.

Information sharing with the Department for Work and Pensions (DWP)

This guidance provides advice on information sharing with the Department for Work and Pensions (DWP) to support the assessment of benefits claims.

Subject Access Request (SAR) form

This form can be used by patients and service users to make a SAR to a health or care organisation.

Information sharing between private healthcare services and NHS England

Guidance about NHS England requesting information from private health and care organisations and services to meet its legal obligations.

Identifying controllers and processors in health and care

Guidance to help IG professionals identify whether health and care organisations are acting as a controller, joint controller or processor in relation to processing of personal data.

Virtual wards

Virtual wards support people, who would otherwise be in hospital, to receive the care and treatment they need in their own home or usual place of residence. Virtual wards are suitable for a range of conditions that can be safely and effectively monitored at home including respiratory conditions, heart failure and COVID-19.

Legal requirements for using health and care data in data-driven technologies

This guidance gives an overview of the legal requirements for using health and care data in the development and deployment of data-driven technologies.

Accessing health and care data for research on data-driven technology

This guidance gives a step-by-step overview of the process for accessing health and social care data for research of data-driven technologies.