Caldicott Guardian
A Caldicott Guardian is a senior person responsible for protecting the confidentiality of patient and service-user information and enabling appropriate information-sharing. Â
Each NHS organisations is required to have a Caldicott Guardian; this was mandated for the NHS by Health Service Circular: HSC 1999/012. The mandate covers all organisations that have access to patient records, so it includes acute trusts, ambulance trusts, mental health trusts, primary care trusts, strategic health authorities, and special health authorities such as NHS Direct.Â
Caldicott Guardians were subsequently introduced into social care in 2002, mandated by Local Authority Circular: LAC 2002/2.Â
The Guardian plays a key role in ensuring that NHS, Councils with Social Services Responsibilities and partner organisations satisfy the highest practical standards for handling patient identifiable information.Â
Acting as the 'conscience' of an organisations, the Guardian actively supports work to enable information sharing where it is appropriate to share and advises on options for lawful and ethical processing of information.Â
Change Approvers
Process manager.Â
Change Advisory Group
The CAG is a HIC internal group comprised of senior members of staff and is responsible for approval of changes.Â
Change Category
Defines a common scale against which to judge the magnitude of the change in terms of effort and risks.
Change Description
Description of the change – what is being changed and how.Â
Change Impact Category
Defines a common scale against which to judge the magnitude of the change in terms of effort and risks:Â
Extensive - There is a significant business service impact because multiple customers are affected by the change. Considerable human and technical resources are needed. Management is involved in the decision process. The RFC must be discussed in the CAG meeting and approved by the change manager. The change manager seeks advice on change authorization and planning.Â
Significant - There is a clear service impact because at least one customer is affected by the change. The RFC must be discussed in the CAG meeting and approved by the change manager. The change manager seeks advice on authorization and planning.Â
Moderate - There is little impact on current services because no customers are affected because of the change. The change manager can authorize this RFC.Â
Minor - The change can be executed without prior approval from the change manager because no customers are affected by the change.
Â
Change Risk Assessment
Provides a review of the likelihood of risk and the related consequence:Â
Likelihood:
1 – RareÂ
2 – UnlikelyÂ
3 – PossibleÂ
4 – LikelyÂ
5 – Almost CertainÂ
Consequences:Â
1 – InsignificantÂ
2 – MinorÂ
3 – ModerateÂ
4 – MajorÂ
5 – CatastrophicÂ
Change TypeÂ
Defines the type of change being submitted for review:Â
Standard Change – a low risk change that’s preapproved and follows documented, repeatable tasks.Â
Non-Standard Change – a thorough review process is conducted before approving this change.Â
Â
Â
Change Urgency
Provides a comparator scale to measure how urgent the change is:Â
Critical - The change is immediately necessary to prevent severe business impact. Change approval is needed by the CAG or Emergency Committee.Â
High - The change is needed as soon as possible because of potentially damaging service impact.Â
Medium - The change will solve irritating problems or repair missing functionality. This change can be scheduled.Â
Low - The change will lead to improvements, changes in workflow, or configuration. This change can be scheduled.Â
Â
CHI
Community Health Index number. Unique 10-digit NHS (Scotland) patient identifier consisting of patient's date of birth (as DDMMYY), followed by four digits: two digits randomly generated, the third digit identifying gender at birth (odd for men, even for women) and a check digit. HIC uses CHI to link cohort records across datasets when creating Project datasets.Â
Client
The requestor of a software project. This could be internal or external to HIC.
Cohort Manager
DLS software used to manage versions and Pro-CHI allocation of Approved Project cohorts.Â
Communication Plan
Detailed description of the communications to be provided during the change.
Control
A means of managing risk by providing safeguards. This includes policies, procedures, guidelines, other administrative controls, technical controls, or management controls.Â
Consented Data
The individuals to whom the data relates (data subjects) have given explicit approval for its processing for the purposes being undertaken.Â