1. London Information Governance Guidance

2. Consent and for use of secure email Within the NHS side, consent is implicit along the carepathway (with some exceptions e.g. Sexual Health) For NHS to Social Care the expectation is that consent is required and that this should be part of the conversation with the patient For Social Care to NHS the rule is that consent is discussed with the client on most occasions and would inform whether the email is sent

3. Is an Information Sharing Agreement required? Communication for one client / patient does not require such an Agreement Information Sharing Agreement are required where personal consent is not possible or to provide and additional level of assurance (e.g. use of a shared system such as CP24) for examples see Data Share London http://www.londoncouncils.gov.uk/datasharelondon

4. Saving email content or attachments onto the local drive? When NHSmail is used outside of N3 it is possible to save onto the local or shared drive of information within an email or an attachment This possibility (user configuration) must be considered & covered if NHSmail access is enabled for a non-NHS organisation and hosted by an NHS organisation

5. NHS organisation providing access for staff in another organisation to NHSmail? There are risks for the NHS organisation in this position Each user signs an Acceptable Use Policy as part of starting to use an NHSmail account A partnership or 3 rd party agreement may be relevant, for examples see Data Share London http://www.londoncouncils.gov.uk/datasharelondon/