Requirement 322: Information Security Assurance Data – Transfer Describe the nature of the Identify the type and risk Describe the measures taken to information flow between the level of breaches of mitigate the risk of breaches in Optical practice and the confidentiality confidentiality of information that is external organisation, e.g. passed between the optical practice data item, format, transfer and the external organisation method Patient or Guardian Referral letter copies, Low Information only sent to Prescription copies, Patient Confirmed patient address Recall letters, patient record by mail. copies. NHS England NHS sight test vouchers and Low Forms sent by recorded delivery or delivered by practice NHS optical vouchers staff member CCG Payment forms for Low Forms sent by recorded delivery or delivered by practice Community services staff member HES Referral letters Low Sent by post, fax to safe Haven, or email using NHS Mail or encrypted email. GP Referral letters Low Sent by post, fax to safe Haven, or email using NHS Mail or encrypted email. Another optical practice Spectacle prescription copy, Low Sent by post, fax to safe Contact lenses prescription Haven, or email using NHS Copy. Mail or encrypted email. Telephone if patient identity can be verified and consent obtained. Glazing lab Spectacle prescription Low Minimum data sent, order Number or surname identifier Used. Wholesale supplier Contact lens prescription, Low Minimum data sent, order Spectacle prescription Number or surname identifier Used. Tertiary Ophthalmology Service
Requirement 322: Information Security Assurance – Data Transfer Describe the nature of the information flow between the Optical practice and the external organisation, e.g. data item, format, transfer method Identify the type and risk level of breaches of confidentiality Describe the measures taken to mitigate the risk of breaches in confidentiality of information that is passed between the optical practice and the external organisation Patient or Guardian Referral letter copies, Prescription copies, Patient Recall letters, patient record copies. Low Information only sent to Confirmed patient address by mail. NHS England NHS sight test vouchers and NHS optical vouchers Low Forms sent by recorded delivery or delivered by practice staff member CCG Payment forms for Community services Low Forms sent by recorded delivery or delivered by practice staff member HES Referral letters Low Sent by post, fax to safe Haven, or email using NHS Mail or encrypted email. GP Referral letters Low Sent by post, fax to safe Haven, or email using NHS Mail or encrypted email. Another optical practice Spectacle prescription copy, Contact lenses prescription Copy. Low Sent by post, fax to safe Haven, or email using NHS Mail or encrypted email. Telephone if patient identity can be verified and consent obtained. Glazing lab Spectacle prescription Low Minimum data sent, order Number or surname identifier Used. Wholesale supplier Contact lens prescription, Spectacle prescription Low Minimum data sent, order Number or surname identifier Used. Tertiary Ophthalmology Service
19%20-%20IGT%20Policy%20Bundle.docx