1. Data protection and information governance: Balancing the confidentiality of patients against the importance of sharing information
presented by John Hodson, Senior IG Specialist

2. Areas to cover
Understanding what the Caldicott review means for general practice.
Ensuring the practice and staff are compliant with new security standards.
Demonstrating security to inspectors.

3. Understanding what the Caldicott review means for general practice.
National Data Guardian for Health and Care Review of Data Security, Consent and Opt-Outs
Published July 2016
Awaiting Department of Health Response

4. Understanding what the Caldicott review means for general practice (1/2).
A conversation that needs to be had as
Most people do not feel the need to know what is happening with their data, and people want to be able to trust the system and know that everything is okay’ (
Redesigned IG Toolkit

5. Understanding what the Caldicott review means for general practice
Recommendation 10: The case for data sharing still needs to be made to the public, and all health, social care, research and public organisations should share responsibility for making that case. (
A new consent model for indirect care

6. Patients Conversations about health information
Developing a vocabulary for discussions with patients, health care professionals and the media on how information is shared in the context of the opt out
Wellcome Trust

7. NDG Data Security Standards 1/3

8. NDG Data Security Standards 2/3

9. NDG Data Security Standards 3/3

10. Ensuring the practice and staff are compliant with new security standards.
What support is available from the CCG/CSU?
Might be more than you think
Annual Training requirement very much in place
Do you your IG Toolkit
Who has access to your systems?
Arrangements IT Support for accessing site.
Cyber Strategy
Workarounds – ask the staff

11. Demonstrating security to inspectors.
From CQC
We'll amend our assessment framework and inspection approach to include assurance that appropriate validation against the new data security standards have been carried out, and make sure inspectors are appropriately trained. (

12. Demonstrating security to inspectors.
Support available during inspections
Everybody knows your name
Training Records
External Assurance
Spot checks