1. Helping to create the organisations of tomorrowCommercial-In-Confidence Partners GPs Practice nurses Mental Health Trust Voluntary sector Social care Police Contractors Housing (private & public) Consultants Hospitals Childrens centres Schools Multi-agency meetings (e.g. MAPPA) Records managers Opticians Home carers Families Between departments in own organisations Commissioners Other Local Authorities Government agencies Umbrella organisations Solicitors Courts Researchers (e.g. Universities; pharmaceutical companies) Auditors Inspectors / regulators CAMs (PCTs) Border agency Providers DWP Fire Brigade Ofsted Cafcass Immigration service Private sector Residents Media (e.g. FoI requests)

2. Helping to create the organisations of tomorrowCommercial-In-Confidence Types of information Patient data Support plans Referral / discharge letters Activity data Financial data Assessments Responses to specific enquiries (e.g. Police requests) Residency checks on individual children and families Test results from third parties Individual cases Statistical data (e.g. Demographics, census data, free school meals) Policies and procedures School data (e.g. Achievement and attainment data) Care information

3. Helping to create the organisations of tomorrowCommercial-In-Confidence Technical terms Information vs. Data Information Sharing protocol (ISP) Information Sharing Agreement Implied vs. Implicit consent Appropriate use of forms and sections Contracts with different organisations Data Protection Act Police Jargon (e.g. section 29/3) Agency acronyms Secure email systems GCSX / CGSM (NHS technology) Caldicott guardians Information governance SIRO Government security marking scheme Varying terminology across different sectors Freedom of Information requests Redacting

4. Helping to create the organisations of tomorrowCommercial-In-Confidence Issues When and how to share When is a formal ISP required? Clarity at senior level around process Communicating process to staff How many ISPs are needed? Is there a central repository of ISPs that can be drawn on? Harmonising data sharing approach across agencies How much information should be shared? When should data be anonymised / pseudonymised? Use of appropriate technology Funding for data sharing activities Multi-agency working – to what extent are you expected to contribute to discussion on all cases under review? Security Third party use / mis-use Parental access to information (in what circumstances are a young persons consent required?) International data sharing Accountability for data Professional lack of trust Consent Obtaining consent Extent / limitations of consent Knowledge of when consent is needed What can and cannot be shared? How should internal data sharing be undertaken? How can staff be encouraged to have confidence in their own judgment? How can awareness of the importance of good practice be built among staff? How do you develop a data sharing process if no arrangements are currently in place? (the scale of the challenge may seem overwhelming)