Teams: Information Governance

Information Governance ensures necessary safeguards for, and appropriate use of personal information, including but not limited to patient/client/service user information; staff information and sensitive organisational information.

Effective information governance practice is a feature of high quality health services in NHS Scotland. By ensuring that information is obtained, held, used and shared securely and appropriately, it underpins professional and patient confidence in services.

IG covers a framework of interlinking functions ranging from information and records management and retention, data protection and patient confidentiality, information security and all matters relating to confidentiality, integrity and availability of personal information.

The importance of robust information governance practice is recognised by the Scottish Government who have sought to enhance practice in this area through a range of legislative and policy initiatives.  IG is not a barrier to data sharing, but rather an effective enabler ensuring a ‘privacy by design’ approach when personal information is concerned, facilitating any required risk assessments and data sharing agreements.

The importance of IG in the health sector has never been greater, with the requirement for secure, relevant and proportionate information sharing within and outwith the NHS, together with our ever increasing reliance on digital systems in an environment of emerging ‘cyber’ security threats and our shift towards an electronic health record,   

The Scottish Information Commissioner continues to monitor our compliance with the legislation, audit where required and has the power to enforce penalties and fines.

Contact Us

Carol Macdonald
Information Governance Manager

Telephone: 01851 708037
Email: wi.dpo@nhs.scot

Documents