Information Governance Statement of Compliance IGSoC

1
Information GovernanceStatement of Compliance
(IGSoC)

• Welcome - IGSoC Processing Handover Workshop

22nd September 2008 Venue - Health Innovation
Centre, 23 Cambridge Science Park, Cambridge,
CB4 OEY
2
Welcome Objectives
Brad Moore Engagement Team Lead IGSoC Migration
Programme
3
Assumptions

• Who you are
• What you know
• Why you are here
• What you want from this

4
Agenda

• 12.00 Registration and Lunch All
• 12.30 Welcome and Objectives Brad Moore
• 12.45 Procedures, Processing and TDb Brad Moore
• 14.00 Coffee
• 14.15 Context, Environment Drivers David
  Stone
• 15.15 Coffee
• 15.30 General Practice, Challenges,
  Resolutions Brad Moore David Stone
• 16.00 Questions Answers
• 16.30 Close

5
Blank
6
Welcome and Objectives
Brad Moore IGSoC Team Lead IGSoC Migration
Programme
7
Blank
8
Procedures, Processing and TDb
Brad Moore IGSoC Team Lead IGSoC Migration
Programme
9
Areas to cover

• Handover Training Results
• Tracking Database Functionality
• Project Library
• How the Central Teams can Help
• Local Statistics Managing Success
• Contact Details

10
Handover Training - Results

• No questions unanswered
• No confusion on what is to be done
• Everyone participates
• Elements of a plan clear

• Take advantage of the training
• IGSoC Process clear
• Everyone confirms understanding
• Arguments for engagement
• My Organisation details
• Contact details
• Empowered e-mail delegation
• IGT preparation and submission
• IGT Action Plan
• IGSoC Declaration on-line

11
Tracking Database Functionality

• Logging On
• Existing IG Toolkit Screens
• 3. New IGSoC Processing Screens

12
Approach Sequence to Establish
PCT support and guidance
Start
TdB auto-evaluate IGT score on TdB
GP on-line IGT registration
GP on-line IGT submission
TdB auto-invitation to submit IGSoC
Pass
Fail
GP and PCT agree action plan within IGT
GP IGSoC submission
Entity Performing Function NHS CFH (not
applicable) GP PCT TdB Functionality
Approved on TdB Send notification
PCT set action plan approved TdB
TdB Auto-invitation To submit IGSoC
End

• Notes
• PCT needs GP IGT guidance process
• PCT needs GP IGT review process
• PCT needs GP IGT action plan process

13
(No Transcript)
14
(No Transcript)
15
(No Transcript)
16
(No Transcript)
17
(No Transcript)
18
(No Transcript)
19
(No Transcript)
20
(No Transcript)
21
(No Transcript)
22
(No Transcript)
23
(No Transcript)
24
IGT - IGSoC Signatory
25
Confirming an Action Plan

• Implement a routine to check the IG Toolkit
  submissions of your
• General Practices.
• Use the existing TDb functionality to see if they
  have reached the
• required levels on the Organisations
  Assessments report.
• Explore ways of combining this with
  Paperlite/Data Accreditation etc.

26
(No Transcript)
27
(No Transcript)
28
(No Transcript)
29
Automated IGSoC Submission
Sample of verification screen that practice will
see
30
(No Transcript)
31
(No Transcript)
32
(No Transcript)
33
(No Transcript)
34
(No Transcript)
35
(No Transcript)
36
(No Transcript)
37
Change of IGSoC Signatory (Senior Partner)

• If the IGSoC Signatory changes then
• Ask the practice to login to their IG Toolkit
  account and enter new senior partners name and
  email address in the IGSoC signatory boxes on the
  My Organisation page.
• Ensure that the new IGSoC Signatory (Senior
  Partner) responds to the automated e-mail to
  submit the new IGSoC Declaration.

38
Merge of General Practices

• This may create a new legal entity.
• This may even be a takeover where one General
  Practice takes on
• the ways of working of another.
• In both cases a new IGSoC Declaration needs to be
  made.

39
Manual submission

• Not encouraged.
• It is quicker to complete the IGSoC Signatory and
  Contact details,
• click on the URL link and enter the 7 digit
  authorisation code than
• it is to do this manually.

40
A year on.

• Complete a fresh IG Toolkit submission every year
  
• date yet to be defined

41
Dont forget IGSoC Check Screen!
42
(No Transcript)
43
Project Library (1)

• Care Record Guarantee, 2007
• www.connectingforhealth.nhs.uk/crdb/docs/crs_guara
  ntee
• NHS IG Legal and Professional Obligations, Sept
  2007, DoH
• Tracking Database IG Toolkit Guidance 04/09/2007
• Good Practice Guidelines for General Practice
  Electronic patient
• Records (v3.1) June 2005
• www.connectingforhealth.nhs.uk/systemsandservices/
  infogov/igsoc/good-practice.pdf

44
Project Library (2)

• Joint Guidance on protecting Electronic Patient
  Information
• (BMA / NHS CFH) contains many links to record
  management and IT Security
• Various letters on IG from David Nicholson,
  Matthew Swindell, plus
• initiatives from the Audit, Healthcare and
  Information Commisions
• Tracking Database IGSoC Process for PCTs
  23/07/2008 v1.0
• www.connectingforhealth.nhs.uk/systemsandservices/
  infogov/igsoc/new-tracking
• includes the roles your TDb Administrator needs
  to allocate you
• IGSoC Process for GPs
• www.connectingforhealth.nhs.uk/systemsandservices/
  infogov/igsoc/new-tracking

45
How can the IGSoC Processing team help?

• Queries on new versions of the IGSoC, material
  differences, release notes
• Understanding the IGSoC Process
• Finding guidance documents
• Providing good reasons for completing the IGSoC
  Process
• Talking General Practices through what to expect

46
How can the DIPU Team help?

• Queries on versions of the IG Toolkit
• General Practice at v4, whereas remainder is v6
• IGSoC at v6 is a coincidence, the two are not
  related
• Understanding the IGT Requirements
• How to submit the IGT
• What Approval really means
• a basic content check then report release
• not that the IGSoC Requirements have been met
• IG Training Tool

47
Useful Links

• www.connectingforhealth.nhs.net
• Systems and Services Tab
• Information Governance (IG) link
• Information Governance Statement of Compliance
  link
• What's New
• NHS organisations link
• Downloads and links

48
Local Statistics Managing Success

• Share statistics discuss

49
For help or queries on IGSoC Submissions
Tel [phone] Email IGSoC_at_nhs.net
For help or queries on IGT
Tel [phone] Email exeter.helpdesk_at_nhs.net
50
Blank
51
Context, Environment Drivers
David Stone Communications Manager IGSoC
Migration Programme
52
Operating Framework

• 3.36 We will continue to focus on, and invest in,
  the information management and technology (IMT)
  that is required to underpin the delivery of
  world-class patient care. During 2007/08, the
  transfer of resources from central to local
  ownership of the National Programme for IT was
  completed, re-emphasising local accountability
  for implementation and benefits realisation. In
  2008/09, we expect the NHS to build on this
  progress, with
• effective information governance and mandated use
  of the NHS Number in all relevant administrative
  and clinical systems
• SHAs continuing to assure themselves that the
  local NHS has the capability and resources to
  deliver these plans.

53
IMT Guidance - Local Strategic Solutions

• All NHS Providers
• The review and amendment of organisational
  Information Governance frameworks to incorporate
  the obligations in the NHS CFH Statement of
  Compliance (each strategic product will have a
  dependency on organisations having an appropriate
  IG framework in place).
• PCT Commissioners
• Ensure provider organisations plans for the
  implementation for local strategic solutions are
  consistent with the effective delivery of patient
  care and make the best use of local resources
• by March 31st 2008 PCTs will ensure plans for the
  preparation for, and introduction and use of LSP
  strategic solutions are included in the LHC IMT
  plan.

54
IMT Guidance Information Governance and Data
Quality

• It is vital that to meet the NHS commitment to
  maintain appropriate confidentiality of patient
  data, Information Governance (IG) policy and
  practice reflects the increases in the potential
  to share information afforded by the programme.
• All NHS Providers
• organisational IG policy frameworks that deliver
  the obligations set out on behalf of all NHS
  organisations in the Care Record Guarantee (CRG)
• agreed protocols for sharing patient data with
  other NHS organisations and with non-NHS
  organisations
• continue to ensure that patient identifiable data
  is safeguarded with rigorous processes,
  administration and technology controls to assure
  that it is used appropriately

55
Some people might go to prison
56
Who might be next
57
The man who lost his job
Statement on Revenue data - Confidential details
of 15 million child benefit recipients have been
lost by HM Revenue and Customs. Revenue and
Customs chairman, Paul Gray, has resigned. The
resignation of Mr Gray was accepted because
computer disks were transported in breach of
rules governing data protection. 20 November 2007
58
Silly things still happen I
59
Silly things still happen II
60
(No Transcript)
61
(No Transcript)
62
(No Transcript)
63
Impact on PCTS

• IGSoC vs IGT
• IGT is mandated for NHS organisations but not for
  others
• IGT is a self-assessment checklist that assesses
  compliance with a range of legislation and
  mandated policy
• There is no direct audit against IGT requirements
• IGT is broad whilst IGSoC is NPfIT focused
• IGT covers legislation, standards, codes of
  conduct and IGSoC covers industry best practice

• IGSoC Migration vs Churn
• IGSoC is signed once and compliance is
  reconfirmed annually through IGT
• The migration is to get anybody already receiving
  services from NHS CFH
• The IGSoC includes a clause to confirm that the
  signatory accepts all future revisions, subject
  to their right to opt out
• Once everyone has signed (new clients have to
  have an IGSoC before they receive services) they
  only re-sign if the organisation changes (churn)
• Statistics show that churn is about 5 per PCT per
  annum

64
Blank
65
General Practice, Challenges, Resolutions
Brad Moore David Stone
66
Any Questions
67
Blank