Document name: [ ]: Information security assurance data transfer – Date created: 24 February 2017 Reviewed February 2018 Author: Sheila Purser Approved by: Mark Carhart Requirement 322: Data Flow and Transfer This document outlines the procedures that should be followed where sensitive or person identifiable information is being transferred to or from the company. These procedures are in place to help prevent unauthorised access to information, loss of information, unauthorised disclosure of information or breach of legislation. Describe the nature of the Identify the type and risk Describe the measures taken to information flow between the level of breaches of mitigate the risk of breaches in Company and the external confidentiality confidentiality of information that is organisation, e.g. data item, passed between the company and the format, transfer method external organisation Patient or Guardian Referral letter copies, Low Information only sent to patient recall letters confirmed patient address by post. CCG Performance reports as per the the Service Low Data is anonymised and sent Specification for by NHS mail. community services HES Referral letters Low Sent by post, fax to safe Haven, or email using NHS Mail. GP Referral letters or feedback Low Sent by post, fax to safe
Document name: [ ]: Information security assurance – data transfer Date created: 24 February 2017 Reviewed February 2018 Author: Sheila Purser Approved by: Mark Carhart Requirement 322: Data Flow and Transfer This document outlines the procedures that should be followed where sensitive or person identifiable information is being transferred to or from the company. These procedures are in place to help prevent unauthorised access to information, loss of information, unauthorised disclosure of information or breach of legislation. Describe the nature of the information flow between the Company and the external organisation, e.g. data item, format, transfer method Identify the type and risk level of breaches of confidentiality Describe the measures taken to mitigate the risk of breaches in confidentiality of information that is passed between the company and the external organisation Patient or Guardian Referral letter copies, patient recall letters Low Information only sent to confirmed patient address by post. CCG Performance reports as per the the Service Specification for community services Low Data is anonymised and sent by NHS mail. HES Referral letters Low Sent by post, fax to safe Haven, or email using NHS Mail. GP Referral letters or feedback Low Sent by post, fax to safe