The Caldicott Principles. In applying safeguarding principles agencies may need to balance the requirements of confidentiality with the consideration that, to safeguard vulnerable adults, it may be necessary to share information. This should be done consistent with the framework provided by the Data Protection Act and the General Data Protection Regulation (GDPR) 2018 and in relation to confidential personal information consistent with the Caldicott principles outlined below:
The Caldicott Principles. The Caldicott Committee’s 1997 Report on the review of patient-identifiable information6 established 6 principles for sharing information, recognising that confidential patient information may need to be disclosed in the best interests of the patient. It also discusses in what circumstances this may be appropriate and what safeguards need to be observed. This report was reviewed in 2013 adding a 7th principle. Providers and commissioners of healthcare and adult social care are expected to comply with the Caldicott Principles when sharing information. The principles are that the use of information should be:
1) Justified
2) Necessary
3) Minimal
4) On a need to know basis and that users of information should:
5) Understand their responsibilities, and comply with the law And additionally, that
6) The duty to share information can be as important as protecting patient confidentiality The Caldicott principles are set out more fully in appendix D below.
The Caldicott Principles. The Supplier shall comply with (and shall not do anything or fail to do anything which shall cause the Organisation to be in breach of) the Caldicott Principles and undertakes to comply with the following principles:
a. The purpose must be justified. Every proposed use or transfer of personal data within or from the Organisation should be clearly defined and scrutinised, with continuing uses regularly reviewed by an appropriate guardian.
b. Personal data must not be used unless it is absolutely necessary. Personal data should not be used unless there is no alternative.
c. The minimum necessary personal data information is to be used. Where use of personal data is considered essential, each individual item of information should be justified with the aim of reducing identifiability.
d. Access to personal data should be on a strict need to know basis. Only those individuals who need access to personal data should have access to it, and they should only have access to the data that they need to see.
e. Everyone should be aware of their responsibilities. Those handling personal data - both frontline and support staff - must be aware of their responsibilities and obligations to respect personal confidentiality
f. All persons handling personal data must understand and comply with the law. Every use of personal data information must be lawful.
g. The duty to share information can be as important as the duty to protect patient confidentiality. Health and social care professionals should have the confidence to share information in the best interests of their patients within the framework set out by these principles. They should be supported by the policies of their employers, regulators and professional bodies.
The Caldicott Principles. The Parties acknowledge that the Caldicott Principles must be applied to the Processing of Personal Data to ensure that the information is only shared for justified purposes. The Caldicott Principles are: justify the purpose(s) for using confidential information; only use it when absolutely necessary; use the minimum that is required; access should be on a strict need-to-know basis; everyone must understand his or her responsibilities; understand and comply with the law; and the duty to share information can be as important as the duty to protect patient confidentiality
The Caldicott Principles. (Revised 2013)
The Caldicott Principles. 2.5.1 Following the 0000 Xxxxxxxxx Xxxxxxxxx Report a number of general principles were set out for health and social care organisations when reviewing the use of personal information. These are: Justify the purpose. Don’t use personally identifying information unless it’s absolutely necessary. Use the minimum amount necessary of personally identifying information. Access to personal information should be on a strict need to know basis. Everyone should be aware of their responsibilities with regard to personal information. Action should be taken to ensure that those handling personally identifiable information are aware of their responsibilities and obligations to respect an individual’s confidentiality. Understand and comply with the law.
2.5.2 Each health and social care organisation has a Caldicott Guardian responsible for: Agreeing and reviewing information sharing policy. Ensuring the organisation satisfies the highest practical confidentiality standards. Acting as the conscience of the organisation. Advising on lawful and ethical processing of information. Resolving local issues. Ensuring a record of resolved issues is kept.
2.5.3 At time of this protocol, the role of Caldicott Guardian is held by the Acting Assistant Director (Adult Services).
The Caldicott Principles. 37.1 The Provider and the Contracting Authority must adhere to the Caldicott Principles published on the Government website and shall ensure that the principles are applied in all circumstances where it is necessary for information to be imparted.
The Caldicott Principles. Following the 1997 Caldicott Committee Report a number of general principles were set out for health and social care organisations when reviewing the use of personal information. The Caldicott Principles apply to health and social care organisations’ use of personal information. These organisations are required to observe the following principles when using personal information: ⮚ justify the purpose; ⮚ not use personal information unless it is absolutely necessary; ⮚ use the minimum amount of personal information that is necessary; ⮚ access to personal information should be on a strict need-to-know basis; ⮚ everyone should be aware of their responsibilities with regard to personal information; ⮚ action should be taken to ensure that those handling personal information are aware of their responsibilities and obligations to respect an individual’s confidentiality; and ⮚ understand and comply with the law. Each health and social care organisation has a Caldecott Guardian responsible for:
a) Agreeing and reviewing information sharing policy
b) Ensuring the organisation satisfies the highest practical confidentiality standards
c) Acting as the conscience of the organisation
d) Advising on lawful and ethical processing of information
e) Resolving local issues These individuals should be consulted when there is a requirement from the agencies they represent to share personal information.
The Caldicott Principles. The Caldicott Committee’s 1997 Report on the review of patient-identifiable information 10 established 6 principles for sharing information, recognising that confidential patient information may need to be disclosed in the best interests of the patient. It also discusses in what circumstances this may be appropriate and what safeguards need to be observed. This report was reviewed in 2013 adding a 7th principle. Providers and commissioners of healthcare and adult social care are expected to comply with the Caldicott Principles when sharing information.
The Caldicott Principles. The Caldicott Committee’s 1997 Report on the review of patient-identifiable information1 established 6 principles for sharing information, recognising that confidential patient information may need to be disclosed in the best interests of the patient. It also discusses in what circumstances this may be appropriate and what safeguards need to be observed. This report was reviewed in 2013 adding a 7th principle. The principles are that the use of information should be:
1) Justified
2) Necessary
3) Minimal
4) On a need to know basis and that users of information should:
5) Understand their responsibilities
6) Comply with the law
7) The duty to share information can be as important as protecting patient confidentiality. Principles of confidentiality designed to safeguard and promote the interests of service users and patients should not be confused with those designed to protect the management interests of an organization. These have a legitimate role but must never be allowed to conflict with the interests of service users and patients. If it appears to an employee or person in a similar role that such confidentiality rules may be operating against the interests of Adults at Risk then a duty arises to make full disclosure in the public interest.
