Delivered by Dr Geraint Lewis, NHS England Day Two, Pop-up University 7, 10.00

1. Implementing the recommendations of
the National Data Guardian's Reviews
of Data Security, Consent and Opt-Out
Chair Dr Geraint Lewis Chief Data Officer
NHS England

2. Implementing the recommendations of the National Data Guardian's Reviews
of Data Security, Consent and Opt-Out
Agenda
Welcome Geraint Lewis
Speakers Dr Alan Hassey member of the National Data Guardian’s Panel
Mark Golledge Local Government Association
Panel discussion

3. Dr Alan Hassey
National Data Guardian’s Panel

4. National
Data
Guardian
The NDG review of Data Security, Consent and Opt-outs
• Secretary of State commissioned in September 2015 to assure the
security of confidential information
• Care Quality Commission (CQC) review - current approaches to
data security across the NHS
• The National Data Guardian asked to propose
- a set of data security standards applicable across the NHS and
social care system
- a method to assess compliance with CQC
- new model of consent /opt outs
• NDG Review team – temporary team pulled together specifically
for review, worked under Katie Farrington
• Strong common themes across NDG and CQC findings

5. National
Data
Guardian
National Data Guardian’s Data Security Standards
Ten standards, grouped under three themes – people, processes,
technology
Leadership Obligation 1: People: Ensure staff are equipped to
handle information respectfully and safely, according to the
Caldicott Principles.
Leadership Obligation 2: Process: Proactively prevent data security
breaches and respond appropriately to incidents or near misses.
Leadership Obligation 3: Technology: Ensure technology is secure
and up-to-date.

6. National
Data
Guardian
National Data Guardian’s Consent/Opt-Out 1
1. You are protected by the law.
2. Information is essential for high quality care.
3. Information is essential for other beneficial purposes.
4. You have the right to opt out of your personal confidential information being used for
these other purposes beyond your direct care:
A. to provide local services and in running the NHS and social care system.
B. to support research and improve treatment and care.
5. This opt-out will be respected by all organisations that use health and social care info.
6. Explicit consent will continue to be possible.
7. The opt-out will not apply to anonymised information.
8. Arrangements will continue to cover exceptional circumstances.

7. National
Data
Guardian
Next steps
• Recommendations accepted in principle by Government -
Department of Health consultation ran to yesterday
• Alongside the consultation – Department of Health conducting
further testing of the model. Carrying on during September and
October
• Testing to look at language, presentation of choices and one
question or two
• NDG and panel to continue to advise on how public
should be engaged and will watch progress on
implementation with interest

8. National
Data
Guardian
More information and contact
www.gov.uk/government/organisations/national-data-guardian
ndgoffice@nhs.net

9. Mark Golledge
Local Government Association

10. Panel Discussion

11. Thank you
for more information please
visit the IGA website
www.digital.nhs.uk/iga