📗

Key Terminology, Definitions & Resources

😫 Feeling frazzled?

We appreciate there’s a lot to take in when it comes to Information Governance! BUT it’s also really really important. That’s why we wrote this guide - to help make sure everyone at Penrose Health is on the same page regarding Information Governance across our organisation.

However, we also know that if you’re starting from 0️⃣, even reading some of these pages might be tricky because you may not be familiar with some of the base terminology we’re using.

To help fix that, we’ve written a short glossary below that outlines some of the key terms you may come across. We’ve also included some more resources you might want to visit if you want to learn more!

If you already know all this, or you’ve finished reading it, we’d recommend moving on to our IG Strategy Overview page next.

👶 Basic terminology

‣

Information Governance (IG)

‣

Data & Personal Data

‣

Data Security

‣

Privacy

‣

Confidentiality

‣

Data Protection / Information Privacy / Data Privacy

‣

Personal Confidential Information (PCD) / Personal Identifiable Data (PID)

❓

What’s the difference between IG, data security and privacy? All these terms are similar in that they’re all about managing data, but they refer to slightly different elements. IG is our overall strategy for managing data. Data security is specifically about how we keep data safe and secure. Privacy is more about the rights of individuals to control their data.

🤖 Data control / processing terminology

‣

Processing

‣

Controller

‣

Processor

‣

Data subject

‣

Information Asset

‣

Information Asset Owners

🌟 Frameworks and laws

‣

DSPT

‣

GDPR

‣

DPA

📚 More resources

There are tons of great resources that can help you learn more about Information Governance.

The Information Commissioner’s Office website - lots of good information here about Data Protection for organisations. Other sections of the website can also help you navigate privacy as an individual as well!
The DSPT Help Page - although the DSPT is just a toolkit/framework, because of it’s wide usage in the NHS, it has some great information about data security in general.
Blue Stream Academy - our in-house statutory training platform has some very informative trainings on Information Governance. Let the IT team know if you don’t have access to these!
NHS England - there’s a short page here that talks about some of the general IG principles that NHS entities should adhere to.

‣

Other resources and reading

Of course, you’re also always welcome to Google any specific queries - there are lots of resources online, but be careful not to get too overwhelmed as there are lots of people who sometimes can say slightly different things or might overcomplicate topics.

If you’re ever uncertain about what to do, get in touch with someone from our 🦸Key People and Their Responsibilities page.