London Information Governance Guidance

Consent and for use of secure Within the NHS side, consent is implicit along the carepathway (with some exceptions e.g. Sexual Health) For NHS to Social Care the expectation is that consent is required and that this should be part of the conversation with the patient For Social Care to NHS the rule is that consent is discussed with the client on most occasions and would inform whether the is sent

Is an Information Sharing Agreement required? Communication for one client / patient does not require such an Agreement Information Sharing Agreement are required where personal consent is not possible or to provide and additional level of assurance (e.g. use of a shared system such as CP24) for examples see Data Share London

Saving content or attachments onto the local drive? When NHSmail is used outside of N3 it is possible to save onto the local or shared drive of information within an or an attachment This possibility (user configuration) must be considered & covered if NHSmail access is enabled for a non-NHS organisation and hosted by an NHS organisation

NHS organisation providing access for staff in another organisation to NHSmail? There are risks for the NHS organisation in this position Each user signs an Acceptable Use Policy as part of starting to use an NHSmail account A partnership or 3 rd party agreement may be relevant, for examples see Data Share London