SHIS Information Governance
Ensuring the security of data
The terms Information Governance relates aspects of privacy, confidentiality and disclosure of data.
Privacy Impact Assessment
The implications of establishing SHIS and enabling access to information by improved electronic means requires the SHIS Programme, and its dependent projects, to demonstrate that safeguards are in place to protect patient confidentiality and controls are in place to govern responsibly how and by whom information is accessed and shared. In order to do this the first phase of a Privacy Impact Assessment (PIA) was carried out in Spring 2008. The findings of this assessment were published in September 2009.
SHIS Privacy Impact Assessment Phase One 
[1.1MB]
Confidentiality
All prospective SHIS users must obtain the approval of their local Caldicott Guardian before they can be given access to any SHIS data mart. Each user or groups of users must provide ISD with a signed 'Access to Data Form' for each individual data mart before this can be granted.
