Current Risk Level Low = 1 Information Governance; 11/03/15 - Reviewing a number of Information UPDATE: 280115. Risk reviewed at SMT on 260115. It was There is a risk that NHS Sharing Protocols and Guidance to staff on agreed that the risk remains especially around handling Fife has insufficient information sharing with Police to provide clearer manual records with highly sensitive data and with means safeguards in place to examples of when data should be shared. available to also, "transfer" this type of data to insecure guarantee the New process for the processing of Subject Access is electronic means (although there are policies in place explicitly confidentiality and being drawn up which will include arrangements for prohibiting this use). SMT agreed to retain risk on CORPRR. Committee REGISTER security of patient and disclosure of personal data. PAC. Risk Centred Board staff information, Risk Risk RISK including information that Update: 110315. Risk reviewed by Una Hill. Management N/A 529 Fife Beratarbide unlikely unlikely can be appropriately and actions updated. No change to risk grade.PAC. Moderate Moderate Low Low Person 02/10/2012 18/09/2014 09/09/2015 legally shared in transit Moderate NHS Governance Elena into and out of the Safe, organisation and safe and Information Clinical CORPORATE Governance
Current Risk Level Low = 1 529 CORPORATE RISK REGISTER 02/10/2012 NHS Fife Board Information Governance; There is a risk that NHS Fife has insufficient safeguards in place to guarantee the confidentiality and security of patient and staff information, including information that can be appropriately and legally shared in transit into and out of the organisation and safe and Information Governance Moderate Risk 11/03/15 - Reviewing a number of Information Sharing Protocols and Guidance to staff on information sharing with Police to provide clearer examples of when data should be shared. New process for the processing of Subject Access is being drawn up which will include arrangements for disclosure of personal data. UPDATE: 280115. Risk reviewed at SMT on 260115. It was agreed that the risk remains especially around handling manual records with highly sensitive data and with means available to also, "transfer" this type of data to insecure electronic means (although there are policies in place explicitly prohibiting this use). SMT agreed to retain risk on CORPRR. PAC. Update: 110315. Risk reviewed by Una Hill. Management actions updated. No change to risk grade.PAC. Moderate unlikely Low Risk Moderate unlikely Low Risk Elena Beratarbide 18/09/2014 09/09/2015 Clinical Governance Committee N/A Safe, Person Centred