The Trust is committed to ensuring it complies with relevant privacy, confidentiality and security legislation – to protect our patients, staff and the organisation. Personal information is given in confidence with the legitimate expectation that the information is always protected, privacy is respected and that behavior and actions are appropriate..

The Knowledge Bank must be operated within the principles of the Data Protection Act 1998 and the Computer Misuse Act 1990. The Knowledge Bank is not a patient/staff information system and must not be used to store documents that include this type of information or data. All documents must be redacted to remove personal identifiable data and written in a generic format so that specific incidents or persons cannot be recognised from the example.

Staff are required to understand their obligations and responsibilities, including what it means to maintain privacy, confidentiality and security of information. Staff must adhere to Trust policies and procedures that set out in the relevant polices of the organisation..

If personal/confidential identifiable data is found on the site, it is the responsibility of the individual who found it to report the matter to the site administrator so that it can be removed immediately and for that individual to report the incident.