You do not appear to have javascript enabled.

This website requires javascript to be enabled.

Please contact the help desk if you are unable to re-instate the javascript option on your browser.

Hosted Secondary Use Team/Project Version 14.1 (2017-2018)

Requirements List

Printable version

Req No	Description	Action
Information Governance Management
14.1-120	Responsibility for Information Governance has been assigned to an appropriate member, or members, of staff
14.1-121	There is an information governance policy that addresses the overall requirements of information governance
14.1-122	All contracts (staff, contractor and third party) contain clauses that clearly identify information governance responsibilities.
14.1-123	All staff members are provided with appropriate training on information governance requirements.
Confidentiality and Data Protection Assurance
14.1-220	Personal information is only used in ways that do not directly contribute to the delivery of care services where there is a lawful basis to do so and objections to the disclosure of confidential personal information are appropriately respected
14.1-221	There are appropriate confidentiality audit procedures to monitor access to confidential personal information
14.1-222	All person identifiable data processed outside of the UK complies with the Data Protection Act 1998 and Department of Health guidelines
14.1-223	All transfers of personal and sensitive information are conducted in a secure and confidential manner
Information Security Assurance
14.1-330	Policy and procedures ensure that mobile computing and teleworking are secure
14.1-331	There is an information asset register that includes all key information, software, hardware and services
14.1-332	Unauthorised access to the premises, equipment, records and other assets is prevented
14.1-333	There are documented incident management and reporting procedures
14.1-334	The confidentiality of service user information is protected through use of pseudonymisation and anonymisation techniques where appropriate
14.1-335	There are adequate safeguards in place to ensure that all patient/client information is collected and used within a secure data processing environment (safe haven) distinct from other areas of organisational activity.

Page Processing Time: 0.09 seconds
Page Render Time: seconds

Supported By: