Minutes Tuesday 24 May 2022

Welcome and introductions

The Deputy Chair welcomed members to the meeting and the apologies were noted.

Minutes and actions from the previous meeting

Minutes - paper 01a

The Panel members and Deputy Chair agreed and signed off the minutes.

Actions - paper 01b

The action log was noted by Panel members.

Agenda items for next meeting

Panel members were asked to forward any agenda items for the next meeting on to TG.

Secure data environments (SDEs)

NBR explained the current use of NHS data for analysis and research, and some of the current issues which have given rise to the need for Secure Data Environments (SDEs). SDEs are secure digital spaces that enable authorised users to view or analyse data without them being allowed to remove the identifiable data from the environment. NBR described the benefits of data access versus data sharing, the plan to switch to the SDE approach, the timeline for SDE implementation and the documentation which will support the change. NBR also explained the Goldacre report and its recommendations, including how they would factor into the plan for SDE implementation.

AH asked about when local government and social care would be integrated into the SDE plan and asked for a timeline if possible. NBR agreed to follow up.

NBR agreed to provide a further update on SDEs to the Panel in September.

De-identification

DM explained that due to additional comments received on the de-identification guidance, it would not be reviewed at today’s panel meeting.

Data strategy - Building Trust and Transparency

RK presented an update on the Data Strategy. Following a consultation on the draft the Data Strategy had been refined to address feedback and would shortly be published. One theme from the consultation was boosting public confidence in how data was shared and used, which had been elaborated in the final version. The Panel supported further engagement with the public and initiatives to support this.

Transformation of IG

DM explained that commitments in the Data Strategy and recommendations of the Goldacre review link to the plan to transform information governance. DM highlighted the need to better integrate IG professionals into organisations so that they were integral to processes rather than isolated departments. The focus of IG needed to be problem-solving, good judgement and the importance of collaboration as a team rather than form filling and paper work. In addition, there were plans to upskill IG professionals and ensure that they had a clear career path. DM explained the need for advocates of the culture change in IG, which Panel members should be part of.

JG highlighted the need to be careful about the words concerning governance, as compliance with legal regs and demonstrating accountability was still paramount. However, JG agreed that there was a role to be played from the centre to ensure the right outcomes were being targeted. JG highlighted that a common issue was knowledge gaps between Cyber / Tech specialists and IG specialists, and raised the possibility of show and tell opportunities and case studies between the different teams.

IG national standards

DM explained that the Panel previously discussed what needs to be mandated as a standard, and which standards were possibly missing. DM raised that the Panel had discussed Codes of Practice in the past but that work had not been progressed. Perhaps it would be helpful for the working group to identify areas which may require a formal standard rather than just guidance or advice. Panel members felt this would be useful and it would also be worthwhile considering other levers which can be used to improve IG.

Routine items

Guidance log

The guidance log was noted by Panel members.

Risk register

The risk register was also noted by Panel members.

A.O.B

There was no other business.

The next meeting date is July 19th, 2022.