Sharing Personal Information Programme Wales Accord on the Sharing of Personal Information (WASPI) for organisations involved in the protection, safety, health, education and social welfare of the people in Wales (including statutory, private and voluntary sector organisations) A Practical Approach to Information Sharing

Sharing Personal Information Programme What Is WASPI? A framework for organisations to share person identifiable information between them, in a lawful and intelligent way It is for the routine, agreed and regular sharing of personal information, for a specified purpose and for the benefit of individuals – not for ad-hoc requests It is not for intra-organisational sharing or for the sharing of aggregated, de-personalised or anonymised information Provides a practical approach to working together

Sharing Personal Information Programme How Does WASPI Link Into The Welsh Government’s Sharing Personal Information programme? Key element of the Sharing Personal Information Sharing Programme (SPI) The ‘single’ information sharing framework for Wales Reviewed and re-launched by the programme Implementation plan and support mechanisms

Sharing Personal Information Programme What are the Benefits Of Using WASPI Provides Service Users with an improved service Encourages safe, secure and relevant information sharing Helps to overcome legal complexities and misunderstandings Provides compliance with the Information Commissioner’s Data Sharing Code of Practice and other recognised standards Helps promote the need for regular sharing between public service organisations Helps guide Practitioners and staff around the information they can and cannot share – provides confidence ‘Once for Wales’ – reduces duplication of effort

Sharing Personal Information Programme Who Does WASPI Apply To? Public sector organisations Voluntary sector organisations Contracted private organisations Not restricted to Wales only

Sharing Personal Information Programme What Is The Accord? The Accord provides: A statement of the agreed common set of principles & assurances for sharing information Assurance that the rights of individuals are protected when sharing personal information Commitment to using the WASPI framework

Sharing Personal Information Programme What Is An Information Sharing Protocol (ISP)? An ISP documents the: processes for sharing personal information specific purposes served people it impacts upon relevant legislative powers information that is to be shared and with whom consent process involved operational procedures process for review

Sharing Personal Information Programme How Do We Develop The ISP? Consider what information sharing requirements there are Identify all partner organisations Identify ISP Co-ordinator and ISP Facilitator Ensure all partners have signed up to the Accord? Populate ISP template Consider ‘fair processing’ information Request quality assurance Gain approval from partners

Sharing Personal Information Programme Service Providers

Sharing Personal Information Programme Service Providers Information that does not need to be shared Information sharing requirements between partner organisations A D B C

Sharing Personal Information Programme Service Providers Information that does not need to be shared Information sharing requirements between partner organisations A D B C ISP defines parts A, B, C & D

Sharing Personal Information Programme What Are The Next Steps? The development process will include: Agreeing the purpose and objectives of the ISP Mapping the high level functions i.e. the information flows Consider inclusion/reference of any existing ISPs, forms or guidance Populating the Information Sharing Protocol template Developing fair processing information

Sharing Personal Information Programme The ISP Development Process

Sharing Personal Information Programme Agreeing The Purpose And Objectives Of The ISP What service will this ISP support? What are the aims of the service? Which groups of organisations are involved? What is the purpose of the service? Who will the Service Users be? What are the benefits to Service Users?

Sharing Personal Information Programme Populating Part D Of The ISP – Methods and Controls Detail the list of functions that this ISP will support Detail the information to be shared Detail the common personal identifiers to be used List the provider organisations List the destination organisations Detail the reasons for the use of the information Detail the source of the data (what system)

Sharing Personal Information Programme Populating Part D Of The ISP– Methods and Controls Detail the method for collecting the information Detail where the information will be stored Detail the frequency that the information will be shared List the communication media and their controls to be used Any additional information

Sharing Personal Information Programme Populating Part A Of The ISP - Introduction Name the service that will be supported by this ISP Describe the aims of the service Describe the groups of organisations and specific purpose of the service Detail the list of functions that this ISP will support Describe the Service Users Describe the benefits to the Service Users Detail the information to be shared Detail the common personal identifiers to be used Detail the specific partner organisations involved

Sharing Personal Information Programme Populating Part B Of The ISP – Justification For Sharing Personal Information Consider and detail any additional statutory powers for sharing personal information Consider consent issues – what type of consent will be used

Sharing Personal Information Programme Populating Part C Of The ISP – Operational Procedures Detail the agreed methods for fair processing information Document the type of consent to be used Describe how consent, or the refusal of consent, will be documented and where Detail the agreed collection tools to be used Detail the frequency for the information sharing to take place Detail when the ISP will be reviewed

Sharing Personal Information Programme Finalising the ISP Confirm all partner organisations have signed up to the Accord Finalise the fair processing information Discuss any training requirements for partner organisations Agree responsibility for ensuring the review takes place Request the WASPI Support Team to quality assure Arrange for all partner organisations to approve the final ISP and place on Publication Schemes, where appropriate Arrange to forward the ISP and copies of declarations to the WASPI support team