23
Data Protection Martin Lawrence Senior Information Governance Officer Devon County Council

Skills to Foster data protection power point 2015

Embed Size (px)

Citation preview

Data Protection

Martin LawrenceSenior Information Governance OfficerDevon County Council

Devon County Council Information Governance

• Access to Information• Data Protection• Information Sharing • Information Security

Data Protection

Why are we here?

As a Foster Carer you will likely see:

• Assessment reports• Meeting notes• Medical reports• Birth family details• Your own updates and reports

Data Protection

Why are we here?

It will be your responsibility to ensure that the information you receive in your role as a Foster Carer is:

• Shared appropriately

• Stored securely

Data Protection

Aim & Objective

• To introduce you to, and raise your awareness of, data protection and to promote good practice around information sharing and information security.

Data Protection

What we will cover:

1. The Data Protection Act and what it means

2. The importance of sharing information

3. Information sharing & information security good

practice

Data Protection

Any questions so far?

Data Protection

1. The Data Protection Act 1998

The Data Protection Act is a tool to help make sure that information is shared appropriately, safely and securely.

Organisations, their staff and contractors, working with people’s information are subject to the Data Protection Act.

This includes you!

Data Protection

Data Protection – The rules1. Be fair and open.

2. Use information for the reasons it was collected.

3. Collect no more than you need.

4. Keep information accurate and up to date.

5. Don’t keep information for longer than necessary.

6. Be aware of people’s rights.

7. Keep information safe and secure.

8. Don’t transfer any information overseas.

Data Protection

2. The Importance of Sharing Information

Good information sharing is vital when it comes to helping vulnerable people and providing the services that they need.

It is equally important to consider how information is shared as well as who it is shared with.

Data Protection

Golden rules for information sharing:

1. Remember the Data Protection Act is not a barrier to sharing.

2. Be open and honest.3. Seek advice.4. Share with consent where appropriate.5. Consider safety and well-being.6. Necessary, proportionate, relevant, accurate, timely

and secure.7. Keep a record.

If followed, these rules will ensure that any sharing you do will be appropriate and lawful.

Data Protection

3. Information sharing & information security good practice

We have talked about the importance and the need for good information sharing, but we also need to consider how to share information securely.

It is also important that the information you work with in your role as a Foster Carer is stored securely.

Data Protection

Good practice - Telephone• Check the caller is who they say they are.• Only give appropriate, necessary and relevant

information.• Decide whether you are the right person to share the

information.• Do not leave detailed information on voicemails or answer

machines.• Consider your surroundings - can you be overheard?• Report accidental or inappropriate telephone disclosures to

your supporting Social Worker.

If in doubt, seek advice!

Data Protection

Good practice - Post• Address the envelope clearly, use names and postcodes.• Mark envelopes “Private and Confidential", “Addressee

Only” and use a clear “Return to Sender” address.• Make sure your contact details as the sender are included

inside the envelope.• Double check the correct information is sent to the

correct person – ask an appropriate person to check.• Report accidental or inappropriate postal disclosures to

your supporting Social Worker.

If in doubt, seek advice!

Data Protection

Good practice - Email• Make sure the title of the email has no personal detail.• Keep the content of emails anonymised, use initials or

first names only.• If using password protection, agree a password

separately beforehand, do not send it by the same email! • Double check the correct information is sent to the

correct person – ask an appropriate person to check.• If using an email address for the first time, send a simple

‘test’ message first to check it is correct. • Report accidental or inappropriate emaildisclosures to your

supporting Social Worker.If in doubt, seek advice!

Data Protection

Good practice – Information at home

• Manage access to information held electronically.

• Look after confidential paper work – lock it away.

• Keep passwords safe.

• Dispose of information securely – return it to your

supporting Social Worker.

• Report accidental or inappropriate disclosures at home to

your supporting Social Worker.

If in doubt, seek advice!

Data Protection

Good practice – Information in public• Only carry information in public if necessary. Consider

alternative means of sending the information. • Do not carry more information than you need. • Check what you have before you set off and then double

check regularly.• Never leave information unattended, even for a short time.

Keep it with you. • Do not carry loose papers. Use a locked briefcase or a

folder or bag that can be securely closed or zipped up.

If in doubt, seek advice!

Data Protection

Good practice – Information in public

• Do not put your files or bag on the top of your car, while you open the door. Place it next to your feet, to avoid driving off with it on the roof.

• Report any accidental loss of theft to the Police using 101 and advise your supporting Social Worker.

If in doubt, seek advice!

Data Protection

Security IncidentsDevon County Council takes it’s security responsibilities seriously and makes every effort to protect the personal data it holds but, recognises that mistakes can happen.

So if,• you send personal information to the wrong person.• lose information or have equipment stolen.• find or receive information or equipment you shouldn’t.

Please notify your supporting Social Worker

Data Protection

Security Incidents

The main focus of the Information Governance Team investigation into a Security Incident is:

• Can information be recovered and has anyone been put at risk?

• What went wrong?• What do we need to learn in order to stop it happening

again?

Data Protection

Further information

:

www.fosteringindevon.org.uk

Data Protection

Thank you for your time,

Any questions?

Data Protection

Martin Lawrence

(Senior Information Governance Officer)email: [email protected]

Tel: 01392 383000 – ask for Martin Lawrence

Data Protection