1. Information Sharing Gateway
Helen Speed & Nicola Briggs
LPRES / ISG Project Team

2. The original concept – late 2013
L&C IG group workshop Dec 13 found
difficulty of maintaining an up to date register of agreements and signatories
the requirement to support smaller organisations with a common platform of supporting IG documentation
Plethora of PIA / ISA templates and formats
the bureaucratic burden of obtaining signatures from sharing partners - time consuming
the administrative overheads of regular review of sharing agreements (and consequences if you don’t)
not well suited to interoperable / integrated systems

3. Build trust - know your risks
A system built around
IG Assurance
Adherence to robust process (as recommended by ICO) i.e. risk assessment of dataflows
Deployed at scale
Shared approaches – sector agnostic
‘Good enough’
We wanted a solution to
Provide more than an electronic register of assets or flows
streamline the process of developing agreements / signing off dataflows aligned with project management
Follow the ICO best practice guidelines
Keep an eye on the European regulation
Ultimately link with HIE platforms, link with consent and privacy monitoring systems / apps

4. ‘Invest time in actions that add value’
by IG leads, for IG leads
Work electronically, aligned with Project Management
Organisations register and provide assurance by organisation
Facility to sponsor organisations
Sign up to common standards of working (Tier 0/1)
Capture, risk assess and approve flows in a system
Manage, report and review flows in the system
Understand where your risks are
Publish the flows so transparency for public
‘Invest time in actions that add value’

5. Who was involved? thanks to
Development Group - health (acute / specialist / MH/CCG), NWAS, LAs, Police reps from L&C IG Group
UHMB Project Team and Developer
IG Consultant (former ICO)
Agile Development started November 2014

6. Where are we now? 2 websites (sandpit and live)
Organisational registration, IG assurance, sponsorship and role based assess live
MoU sign up live (the new ‘Tier 1’)
Asset register (shop window) live
Internal data flows as well as shared (for one stop reporting) live
Risk assessments (Privacy Impact, security) live
Admin groups ready to go
Implementation > 400 orgs
iNetwork Innovation Award winners November 2015

7. Benefits
“Normalises” recording of information flows, PIA and information sharing agreements and without sector specific language so all types of organisations can use it
Allows IG staff to focus on support for smaller organisations /front line teams /new projects
Supports reuse of agreements around ‘often used’ technologies with minimal fuss / amendments
Owned by participating organisations so they can use as they wish
Supports IG compliance and breach management

8. More info?
is our ‘work in progress’ sandpit system (to test new functionality with dummy data) have a look – try it Please get in touch

9. screenshots

10. About

11. Login Screen

12. Main Screen

13. Organisation Details

14. Organisation Assurance

15. Organisation Users

16. Sponsored Organisations

17. Inventory List (assets)

18. Individual Data Inventory

19. Data Sharing List

20. Individual Data Sharing Summary

21. Individual Data Summary Cont.

22. Data flow list

23. Data flow detail (one of many)

24. Data flow detail PIA (example screen)

25. Data flow detail Outcome Generation (example screen)

26. Data flow detail Outcome risk assessment (example screen)

27. Data flow detail Sign-off(example screen)

28. Dashboard

29. Reports

30. Resources