HIC: Governance Documentation

[szwells]

Any governance related documentation, from whichever sources, that can be collated and can feed into the understanding of the OMERO/HIC development team wrt this issue.

Information Services Division (ISD) of NHS Scotland

ISD has page linking to data protection & confidentiality guidance ​http://www.isdscotland.org/Products-and-Services/Data-Protection-and-Confidentiality/ which contains links to the following pertinent documents:

• Managing Patient Identifying Data: Best Practice Guidelines ​http://www.isdscotland.org/Products-and-Services/Data-Protection-and-Confidentiality/ISD_anon_guide.pdf
• Anonymisation: NHSScotland National Data Sets ​http://www.isdscotland.org/Products-and-Services/Data-Protection-and-Confidentiality/ISD_anon_report.pdf
• Research Using Personal Data, a report on the discussions. ​http://www.isdscotland.org/Products-and-Services/Data-Protection-and-Confidentiality/Research%20Using%20Personal%20Data_report.pdf
• Secondary Uses of Information in NHSScotland, a review of recent developments of secondary use of data in Scotland. ​http://www.isdscotland.org/Products-and-Services/Data-Protection-and-Confidentiality/eHealth_secondary%20uses.pdf
• ISD's Statistical Disclosure Control Protocol sets out, for ISD staff, guidance on the practice of reducing the risk of disclosure by suppressing, aggregating or modifying data before release. ​http://www.isdscotland.org/isd/files/isd-statistical-disclosure-protocol.pdf

The Information Comissioner's Office Privacy Risk Assessment Handbook v2.0

• [HTML] ​http://www.ico.gov.uk/upload/documents/pia_handbook_html_v2/index.html
• [PDF] ​http://www.ico.gov.uk/upload/documents/pia_handbook_html_v2/files/PIAhandbookV2.pdf