Caldicott

1
Caldicott

• Principles into Practice

2
Caldicott Principles into Practice

• Report on the use of Patient Identifiable
  Information 1997
• Concerns over breaches of confidentiality
• Increasing use of Technology increasing danger
• More information being shared

3
Caldicott Principles into Practice

• Caldicott established framework
• Recommendations for work to be done
• Guardians to be established
• Concept of Information Governance
• Principles to be adopted in relation to the
  management of patient identifiable information

4
Caldicott Principles into Practice

• Recommendations
• Recommendation 1
• Construct and test data flows
• Recommendation 2
• Establish and implement an anuual programme of
  work to underpin awareness about confidentiality
• Recommendation 3
• Appoint a senior person responsible for
  safeguarding the confidentialty of patient
  identifiable information
• Recommendation 4
• Provide clear guidance for those dealing with
  patient idientifiable information
• Recommendation 5
• Put information sharing protocols in place.
• Recommendation 6
• Everyone should know who the Guardian is
• Recommendation 7
• Consider performance monitoring
• Recommendation 8
• The NHS Number should become, wherever possible
  the prime identifier

• Recommendation 9
• Establish strict access controls
• Recommendation 10
• Explore the use of encryption for very sensitive
  data.
• Recommendation
• 11 Incorporate controls into design of
  electronic systems
• Recommendation 12
• Protect the confidentiality of database
  information
• Recommendation 13
• The NHS number should be used by GPs for
  reimbursement for services
• Recommendation 14
• New systems for prescription data should
  recognise need for confidentiality. identifiable
  information
• Recommendation 15
• Future systems for payment to GPs should avoid
  having to use patient Recommendation 16
• Create general practice procedures for general
  practice claims and payments which do not require
  patient identifying information to be transferred
  to be considered

5
Caldicott Principles into Practice

• Principles
• 1. Justify the Purpose.
• 2. Dont use patient identifiable information
  unless it is absolutely necessary
• 3. Use the minimum necessary patient
  identifiable information
• 4. Access to patient identifiable information
  should be on a strict need to know basis
• 5. Everyone with access to patient
  identifiable information should be aware
  of their responsibilities
• 6. Understand and comply with the law.

6
Caldicott Principles into Practice

• Since 1997
• Data Protection Act 1998
• Freedom of Information Act 2000
• Health and Social Care Act 2001
• Confidentiality Code of Practice for Health and
  Social Care in Wales
• Informing Healthcare
• WASPI

7
Caldicott Principles into Practice

• Work Programme for the Guardian
• Establish position as Board Champion
• Act as the conscience of the organisation
• Establish information flows
• Assess risk areas
• Ensure policies and procedures in place
• Records Management
• Data Quality
• Clinical Assurance
• Information Sharing
• Information Security
• Access Controls
• Privacy Impact Assessment

8
Caldicott Principles into Practice

• What you need to do
• Confidentiality
• Need to know
• Professional Standards
• Security
• Report incidents
• Raise any concerns
• Ask the question

9
Caldicott Principles into Practice

• Resources
• Organisational Policies and Practice
• Useful websites
• Informing Healthcare
• www.wales.nhs.uk/IHC
• Health Solutions Wales
• www.hsw.wales.nhs.uk
• Welsh Assembly Government
• www.wales.gov.uk
• Connecting for Health
• www.connectingforhealth.nhs.uk
• Howis

10
Caldicott in Practice

• Who to contact