Information Sharing Gateway Helen Speed & Nicola Briggs LPRES / ISG Project Team

The original concept – late 2013 L&C IG group workshop Dec 13 found difficulty of maintaining an up to date register of agreements and signatories the requirement to support smaller organisations with a common platform of supporting IG documentation Plethora of PIA / ISA templates and formats the bureaucratic burden of obtaining signatures from sharing partners - time consuming the administrative overheads of regular review of sharing agreements (and consequences if you don’t) not well suited to interoperable / integrated systems

Build trust - know your risks A system built around IG Assurance Adherence to robust process (as recommended by ICO) i.e. risk assessment of dataflows Deployed at scale Shared approaches – sector agnostic ‘Good enough’ We wanted a solution to Provide more than an electronic register of assets or flows streamline the process of developing agreements / signing off dataflows aligned with project management Follow the ICO best practice guidelines Keep an eye on the European regulation Ultimately link with HIE platforms, link with consent and privacy monitoring systems / apps

‘Invest time in actions that add value’ by IG leads, for IG leads Work electronically, aligned with Project Management Organisations register and provide assurance by organisation Facility to sponsor organisations Sign up to common standards of working (Tier 0/1) Capture, risk assess and approve flows in a system Manage, report and review flows in the system Understand where your risks are Publish the flows so transparency for public ‘Invest time in actions that add value’

Who was involved? thanks to Development Group - health (acute / specialist / MH/CCG), NWAS, LAs, Police reps from L&C IG Group UHMB Project Team and Developer IG Consultant (former ICO) Agile Development started November 2014

Where are we now? 2 websites (sandpit and live) Organisational registration, IG assurance, sponsorship and role based assess live MoU sign up live (the new ‘Tier 1’) Asset register (shop window) live Internal data flows as well as shared (for one stop reporting) live Risk assessments (Privacy Impact, security) live Admin groups ready to go Implementation > 400 orgs iNetwork Innovation Award winners November 2015

Benefits “Normalises” recording of information flows, PIA and information sharing agreements and without sector specific language so all types of organisations can use it Allows IG staff to focus on support for smaller organisations /front line teams /new projects Supports reuse of agreements around ‘often used’ technologies with minimal fuss / amendments Owned by participating organisations so they can use as they wish Supports IG compliance and breach management

More info? http://info-sharing-sandpit.org.uk/ is our ‘work in progress’ sandpit system (to test new functionality with dummy data) have a look – try it Please get in touch InformationSharingGateway@mbhci.nhs.uk

screenshots

About

Login Screen

Main Screen

Organisation Details

Organisation Assurance

Organisation Users

Sponsored Organisations

Inventory List (assets)

Individual Data Inventory

Data Sharing List

Individual Data Sharing Summary

Individual Data Summary Cont.

Data flow list

Data flow detail (one of many)

Data flow detail PIA (example screen)

Data flow detail Outcome Generation (example screen)

Data flow detail Outcome risk assessment (example screen)

Data flow detail Sign-off(example screen)

Dashboard

Reports

Resources