Information Sharing for Integrated care A 5 Step Blueprint About me

Five Steps 1. Leadership 2. Governance 3. Stakeholder engagement & robust IG 4. Technical Solution 5. Implementation Key to Success Visionary leadership supported by effective IG expertise

Step 1: Leadership Two to five leaders from organisations seeking to deliver integrated care need to establish the project and drive it forward, setting out a clear vision for what they want to achieve and the role of information in accomplishing this. Step 1 deliverables: The scope of the project and its specific objectives A vision for how information sharing will enable the achievement of those objectives Broad understanding of what will be required to achieve the stated objectives Between two and five ’sponsors’ – who may come from commissioners, providers, CSU, patient groups or elsewhere – enthusiastic leaders who are well-respected within the locality and who are committed to dedicating the necessary time (at least a few hours each week) and fully supporting the programme to achieve buy-in If not included amongst the initial sponsors, identify clinical/service leaders who support and are willing to champion the project Initial meetings of the information governance experts who will support the work – it is essential to involve these staff early and to focus them on supporting delivery Broad understanding of the steps ahead and an achievable high-level timeline by which to accomplish them by

Step 2 Governance/ Principles The Leaders oversee the formation of a wider governance group across providers and other interested parties. It sets out clear and immediate objectives and a governance structure. Step 2 deliverables: The established governance structure for the effort (either part of an existing governance structure or a newly created one) The formal decision-making group (e.g. a board) with all major representatives across commissioners (both NHS and local authority) and providers An information sharing and IG work stream with IG representatives from all participating organisations Privacy impact assessment to ensure appropriate information governance controls A clear legal basis for processing personal data and/or confidential personal data Agreed terms of reference and principles – Tier 1 Information Sharing Agreement or Data Controller agreement signed by participating organisations Necessary resources secured Assigned roles and responsibilities The established schedule of regular interactions An agreed high-level roadmap/information sharing strategy with implementation milestones An updated vision statement.

Step 3: Stakeholder Engagement/IG The team establishes all applicable information governance requirements, including identifying appropriate legal bases for sharing data and implementing the necessary steps to ensure the requirements are met (e.g. putting in place data sharing agreements). It also secures the clinical buy-in required from all (or most) of the providers and ensures proposals are supported by groups representing the interests of citizens etc. Simultaneously, the specifications of the data to be shared should also be determined. Step 3 deliverables: Getting at least 80% of GP practices on board with signed Tier 2 data-sharing agreements (if GP data is needed for the project) A defined data specification for each relevant provider Data-sharing agreements signed with all major providers Communications strategy drafted and tested with patient groups and professional representatives Consent process agreed

Step 4: Technical Solution The leadership team decides on and commissions a technical solution that is best suited to the immediate requirements of the dataset. Step 4 deliverables: A clear view of the limitations of the proposed solution and the trade-off analysis of the benefits of additional features versus additional investment required Clarity on how requirements stemming from the Privacy Impact Assessment will be met An approved business case for investment (if necessary) An implementation roadmap to put the solution (tools, data warehouse etc) in place Clarity about the respective roles and responsibilities of the HSCIC DSCROs, CSUs and others involved in the data processing pathway A choice of a third-party provider/vendor to deliver the tools and/or data warehouse solution (if needed) or a procurement process in place to choose a solution Agreement on auditing requirements to identify weaknesses and areas needing support and improvement

Required Products: System Leader Responsibilities Step 4 Technical Solution Step 5 Implement Step 1 Leadership Step 2 Governance Step 3 Stakeholder Engagement Shared Vision Information Sharing Strategy Stakeholder map and engagement plan Business case (if needed) Communications Strategy Implemented Specific Objectives Governance Board Terms of Reference Hosting procurement (if needed) High level plan Communications strategy in draft Staff Training Implementation Roadmap Business as usual arrangements Data Specification for each provider

Required Products: IG Experts Step 4 Technical Solution Step 5 Implement Step 1 Leadership Step 2 Governance Step 3 Stakeholder Engagement Information Sharing Strategy Tier 2 Information Sharing Agreements Audit Plan Satisfactory IG Toolkits Tier 1 Information Sharing Framework Agreement System Security Policy Consent process agreed IG work stream Terms of Reference Consent process implemented Privacy Impact Assessment Business as usual arrangements Data Flow map & legal basis agreed

Contact the IGA for more information www.digital.nhs.uk/iga