Skip navigation

Information Governance and Caldicott

Information Governance is a framework related to how organisations and individuals handle information; it applies to sensitive and personal information, of employees, patients and service users, and also to information related to the business of the organisation.
Information Governance sits alongside clinical and corporate governance and while the key focus is on ensuring that information is handled in a confidential and secure manner, in the health context it is also very much about supporting the provision of high quality care by ensuring the right information is available to the right people, when and where it’s needed.
The definition of what Information Governance includes varies between organisations and sectors; in NHS Wales there are several other aspects aside from the security and confidentiality of information which are also of significance. Information Governance within NHS Wales is generally accepted to include (but is not limited to) the following standards and legal requirements :
  •          Data Protection Act 1998
  •          Caldicott Report
  •          Common Law Duty of Confidentiality
  •          Freedom of Information Act 2000 
  •          Information Sharing Protocols
  •          Data quality
  •          Information Security assurance - ISO 27001/2 Information security management (formerly BS7799)
  •          Records Management
Caldicott is a key element of the Information Governance agenda in Wales, providing organisations working in Health and Social Care with a set of recommendations and principles to help ensure that person identifiable information (including that of patients, staff and service users) is adequately protected. Completion of the Caldicott (C-PIP) assessment provides Information Governance and Caldicott Leads with a comprehensive tool to highlight areas where improvements are required, and a benchmark for evaluating progress.
This site covers both Caldicott and the wider Information Governance agenda. Specific information on Caldicott can be found under the section 'Caldicott Principles into Practice', however, other areas of the site do also contain information relating to patient identifiable information.  Web pages which were previously on the website 'Caldicott: Principles into Practice' have now been incorporated within a set of Information Governance pages on this site. The site reflects all the current legislation, best practice and comment, and will continue to be updated regularly.

Last updated: 03/05/2013