The data is set out in 8 principles Personal Data must protect fairly and lawfully, obtained for specific purpose and purpose given, all personal data must have accurate and kept up to date, must not be kept longer then it should, should be kept secure at all times all data must not be transferred to any other country outside the European Economic Area without adequate protection. Explain how legal requirements and codes of practice inform practice in handling information. The main points of legal requirements and codes of practice for handling information is that the data should be handled fairly and lawfully, accurate,kept secure,processed in accordance with the data subject's rights. 2) Understand good practice in handling information in social care settings. 2.1) Explain how to maintain records that are up to date, complete.
Everyone responsible for using data or storing data has to follow strict rules called 'Data protection principles' these are as follows: Used fairly and lawfully used for specifically stated purposes kept for no longer than is absolutely necessary kept safe and secure Not transferred outside the UK without adequate protection For more sensitive information such as ethnic background, political opinions, religious beliefs, health, sexual health and criminal records there is stronger legal protection. The Freedom of information act 2000 provides public access to information held by public authorities. Public authorities are obliged to publish certain information about the activities and members of the public are entitled to request information from public authorities. The Act covers any recorded information that is held by a public authority in England, Wales and Northern Ireland, and by UK-wide public authorities based in Scotland. Information held by Scottish public authorities is covered by Scotland’s own Freedom of Information (Scotland) Act 2002.
Performance evidence Identify legislation and codes of practice that relate to handling information in health and social care There are numerous pieces of legislation and codes of practice designed to protect individuals. These are there to protect from breaches of confidentiality were the information held on that individual is only viewed by staff directly involved in their care. The Data Protection Act 1998 is a piece of legislation which defines the law on processing data of people living within the United Kingdom. One of the central codes of practice in health and social care has been provided by the GSCC and it sets standards of practice and behaviour for staff working in that field, including standards for handling information and maintaining confidentiality. There is also Caldecott standards which govern the sharing of information based on the Data protection Act.
Ensure sensitive and private information is kept in a secure/locked drawers or cabinets when not in use. Electronic databases should be protected by adequate spy and virus software. Electronic files should be password protected. Information pertaining to individuals should only be shared on a ‘need to know’ basis. 2.
The data protection act 1998 sets out several principles governing the use of personal information, these include the following:- • Personal data shall be processed fairly and lawfully • Personal data shall be obtained only for one or more specified and lawful purposes • Personal data shall be adequate, relevant and not excessive • Personal data shall be accurate and, where necessary, kept up to date. • Persona3.l data processed for any purpose or purposes shall not be kept for longer than is necessary • Personal data shall be processed in accordance with the rights of data subjects under this Act • Appropriate technical and organisational measures shall be taken against
Freedom of Information Act 2000 - Is an Act of Parliament of the Parliament of the United Kingdom that creates a public "right of access" to information held by public authorities. It is the implementation of freedom of information legislation in the United Kingdom on a national level. Health & Social Care Act 2008 Care Quality Commission (CQC) 'Essential Standards of Quality & Safety’ Outcome 21 deals with individuals personal records, including medical records, these should be kept up to date accurate, kept safe and confidential. 1.2 Explain how legal requirements and codes of practice inform practice in handling information. It is important that I have a secure system for recording and storing of information in a health and social care setting, as I am providing a duty of care to my clients.
• Principle 2: Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes. This means information collected and used by H&SS is only to be used for H&SS purposes and not shared with other agencies. • Principle 3: Personal data shall be adequate, relevant and not excessive to the purpose for which it was collected. This means only ask for the information that you need. • Principle 4: Personal data shall be accurate and, where necessary, kept up to date.
Keep all information on a need to know basis. Special features of different storage systems that help to ensure security. Locks Swipe cards Key codes Only Authorised people allowed entry Signing in and out records Back-up systems Confidentiality agreements Password protect as much as
2.2 - Describe practices that ensure security when storing and accessing information Digital Data: Password Protection Encryption Non Digital Data: File Store/Lockable cupboard/safe Alarms/CCTV Data Protection Policy / Non disclosure agreement 2.3 - Describe features of manual and electronic information storage systems that help ensure security A manual information security storage system has a lock and strong construction materials. An electronic security system has a password, encryption and antimalware software 3.1 - Explain how to support others to understand the need for secure handling of information To support others to understand the need for
To ensure safety, security and well-being of individuals, so information is accurate, unaltered and readily available only to those authorised to access it, legal requirement to storeinformation securely. | Outcome 2 Know how to access support for handling information in social care settings 2.1 Describe how to access guidance, information and advice about handling information. Consult, seek permission from co-workers, managers, experts, the individuals or theirnext of kin, ensuring training in information handling is up-to-date, adhering to policies and procedures of organisation and legislativerequirements. | 2.2 Explain what actions to take when there are concerns over the recording, storing or sharing of information. Lines of reporting - authority and providing a record of concerns,