1. Why information governance is everyone’s job
This series
Patient information is not “the dentist’s paperwork”. Under UK data protection law, health records and images are special-category personal data. GDC Standards also require confidentiality. This dedicated series is two 1-hour modules (2 hours). This is module 1. GDC Development Outcomes A, B and D.
Suggested study time
- Why health data is special — 18 min
- Roles, processors and the named lead — 20 min
- Screens, speech and everyday security — 17 min
- Knowledge check — 5 min
What IG is for
Information governance is the system that decides what we collect, why, who can see it, how long we keep it, and what we do if it leaks. A locked filing cabinet and an open reception screen is not a system.
Lawful and fair
UK GDPR and the Data Protection Act 2018 require a lawful basis for using personal data, extra conditions for health data, and fairness: people should not be surprised by how you use their information. Privacy notices must match real life — if you use a cloud backup or an off-site lab portal, say so in language a patient can read.
Need to know
Reception needs the diary and medical alerts that stop harm. They do not need the full periodontal chart on a shared screen. Laboratories need what they need to make the work. Insurers and indemnity need what the claim requires, not a casual dump of the whole history.
This is not only IT
Most incidents start with a name called across the waiting room, a screen left unlocked, a photo on a personal phone, or a conversation in a supermarket. Module 2 covers formal access requests and breaches. Today is the habits.