1. www.england.nhs.uk NHS England Interoperability Programme Workshop Information Governance 16 th December 2014

2. www.england.nhs.uk Richard Sewart, NHS England Tony Shannon, Leeds Care Record Alastair Gilchrist, North West London Amir Mehrkar, Hampshire Care Record Information Governance

3. www.england.nhs.uk To present and capture information governance issues relating to information sharing in integrated environments To initiate contribution to developing guidance on information sharing supported by a standard information sharing agreement Purpose of workshop

4. www.england.nhs.uk 1.Good IG practice creates an enabling environment for interoperability in which information can be shared with confidence: Legal requirements Controls Assurance processes 2.Interoperability layers support IG functionally and technically e.g. through: Data structures Messaging Technical transport IG and Interoperability

5. www.england.nhs.uk Why do organisations and health communities need information sharing agreements? What should an information sharing agreement include? What are the practical issues? Information Sharing Agreements

6. www.england.nhs.uk To ensure that there are no obstacles to sharing information arising from uncertainty or assumptions about IG requirements To commit participating organisations to controls that ensure that information is shared lawfully To give professionals confidence that they are sharing information lawfully Why do we need ISAs?

7. www.england.nhs.uk Description of the purposes of information sharing and the data required to support these purposes – with reference to different requirements of caring disciplines Statement of the legal basis that supports information sharing for each of these purposes Controls that ensure information is shared lawfully for these purposes Reference to operational procedures, guidance and data controller / data processor contracts What should an ISA include?

8. www.england.nhs.uk Common law duty of confidence Consent for disclosure of data held in confidence Data Protection Act 1998 8 Principles and rights Human Rights Act 1998 Right to privacy The Law and Information Sharing

9. www.england.nhs.uk The law: Confidentiality and consent Interoperability controls: Recording and actioning of consent decisions Consent to share Consent to view Legitimate relationships Sealed envelopes IG and interoperability controls

10. www.england.nhs.uk The law: Adequate relevant and not excessive Interoperability controls: Access levels Role based access control IG and interoperability controls

11. www.england.nhs.uk The law: Accurate and up to date Interoperability controls: Data and messaging standards Currency / synchronisation IG and interoperability controls

12. www.england.nhs.uk The Law: Technical and organisational measures to ensure security Interoperability controls: Business processes / operational procedures Training System functionality Technical infrastructure IG and interoperability controls

13. www.england.nhs.uk Practical issues…. IG and interoperability