confidentiality, data protection, information security management and information quality. Failure to maintain confidentiality may lead to disciplinary action, up to and including dismissal. 7. Communications Plan 7.1 The BSO will develop and maintain a communications plan to ensure that all stakeholders are adequately informed about confidentiality and the way their information is used and shared and their rights as data subjects. In particular this will cover how they may access their personal data and how they may exercise those rights when consent is required to use their data for non-healthcare purposes. 8. Information Risk Roles and Responsibilities See Annex A for the BSOal Chart 8.1 The BSO Board The is responsible for ensuring that the information governance function is appropriately managed in a manner which complies with relevant legislation and standards. 8.2 The Chief Executive The Chief Executive as the Accountable Officer for the BSO has overall accountability and responsibility for Information Governance in the BSO. They are required to provide assurance through the Statement of Internal Control that all risks, including those relating to information, are effectively managed and mitigated. 8.3 The Senior Information Risk The Director of Human Resources and Corporate Services at the BSO is the Senior Information Risk Owner (“the SIRO”). The SIRO has overall responsibility for managing information risk across the BSO and is the owner of the Information Asset
confidentiality, data protection, information security management and information quality. Failure to maintain confidentiality may lead to disciplinary action, up to and including dismissal. 7. Communications Plan 7.1 The BSO will develop and maintain a communications plan to ensure that all stakeholders are adequately informed about confidentiality and the way their information is used and shared and their rights as data subjects. In particular this will cover how they may access their personal data and how they may exercise those rights when consent is required to use their data for non-healthcare purposes. 8. Information Risk Roles and Responsibilities See Annex A for the BSOal Chart 8.1 The BSO Board The is responsible for ensuring that the information governance function is appropriately managed in a manner which complies with relevant legislation and standards. 8.2 The Chief Executive The Chief Executive as the Accountable Officer for the BSO has overall accountability and responsibility for Information Governance in the BSO. They are required to provide assurance through the Statement of Internal Control that all risks, including those relating to information, are effectively managed and mitigated. 8.3 The Senior Information Risk The Director of Human Resources and Corporate Services at the BSO is the Senior Information Risk Owner (“the SIRO”). The SIRO has overall responsibility for managing information risk across the BSO and is the owner of the Information Asset
IGAssuranceFramework.docx