Upload
allyson-anthony
View
214
Download
0
Tags:
Embed Size (px)
Citation preview
Wales Accord on the Sharing of Personal Information
(WASPI)For organisations involved in the protection, safety, health,
education and Social Welfare of the people in Wales (including statutory, private and third sector organisations)
Information Sharing Protocol (ISP)For regular and reciprocal sharing of information between agencies engaged
in partnership working arrangements for a defined purpose.By defining the reasons why information sharing is required, how it supports the functions of the partnership and the principles that govern the sharing, a
protocol can provide the foundations for partners to agree in principle to share the required information.
Aims and Objectives
have a better understanding of the WASPI Framework
have the knowledge, skills and techniques required to:
• develop ISPs independently
• localise an existing ISP
• Quality Assure ISPs
To ensure ISP Facilitators:
Course Content
Part 1 - WASPI Background
Part 2 - WASPI Framework
Part 3 - ISP development process including skills and techniques
Part 4 - Localising an ISP
Part 5 - Quality Assuring an ISP
Part 6 - Questions
An ISP has been created in the district of Blunderton to support the sharing of information between Hammer Homes, Blunderton District Council and a local charity for the purposes of placing ex-offenders in appropriate housing.
Since its creation the ISP has widened it’s scope to an All-Wales scope to include additional branches of Hammer Homes outside of the initial area.
Sherlock Holmes have become aware of the changes instigated by Hammer Homes and, because its head office is based in London, would like to cast the net wider still and encompass England too.
ISP Scope Consideration Exercise
If you were a WASPI Facilitator responsible for this ISP what would you do?
Does the expanded ISP seem reasonable? What are the relevant considerations?
ISP Scope Consideration Exercise
Benefits of using the ISP template
Consistency
ICO approved and in line with Data Protection Act (DPA)
Prevents duplication
Ensures consideration is taken towards the handling of Service Users’ information
Preparation
Is an ISP appropriate and of a manageable size?
Identify the partner organisations to be involvedo Are they signed up to the Accord? o Are they registered with the ICO?
Arrange initial “Task & Finish Group” meeting
The ISP Task and Finish Group
A Task and Finish group will be set up for each new local development
Membership will consist of practitioners and staff from partner organisations and a trained WASPI Facilitator
This will serve as an information collection process
Obtains facts about the sharing and disclosure processes
Discussion and participation are key to successful meetings
First Meeting
History – provide a background of WASPI and the purposes
‘Sign-up’ – confirm that all participating organisations are signed up to the Accord
Co-ordination is paramount and the ISP Co-ordinator will continue to be a key figure
Continuing the Process
Subsequent Meetings – the co-ordinator should arrange further meetings
Timescales are not rigid, however, it is recommended that the process is completed swiftly to ensure momentum is maintained
Participation – try to ensure that the same representatives from each participating organisation are in attendance
Agreeing the Purpose and Objectives• service will it support?• are the aims of the service?
What...
• is the sharing needed?• is the ISP required?
Why...
• Will benefit from the service?• Will be involved in the service being
provided?Who...
Appendix BInformation Flow Reference Table
Appendix B sets out the details of the information to be shared to support the main body of the ISP
It will also detail the controls to be applied to the information to ensure that it is kept secure from unlawful disclosure
Any forms and/or guidance including local policies and procedures should also be considered at this stage
Populating the ISP Template – Summary
Next stage will be to complete all sections of the template
Relevant professional codes of practice and any other appropriate guidelines must be noted
Ensure fair processing requirements are met
Appendices can also be added but the default appendices A and B should remain
Finalising The ISP Confirm all partner organisations have signed up to the Accord Forward the draft ISP to the organisations undertaking the
Quality Assurance process Discuss implementation and training requirements with
partner organisations Agree responsibility for ensuring the review takes place Arrange for all partner organisations’ Designated Person to
approve the ISP once QA’d and they are signed up to the Accord
Place the ISP on Publication Schemes of relevant organisations Use of the resources available on the WASPI website such as
letters asking organisations to sign off an ISP is advised
Localising an ISP
Use previously created ISPs as a starting point for new developments
Consider how your working practices differ from an existing ISP
Satisfy yourself that any existing ISP is still relevant e.g. is any legislation quoted appropriate and current?
Do Allow an existing to ISP to influence a Task & Finish group’s perception of their service– an ISP should reflect and support your working practices
“Copy and Paste” an existing ISP without considering its relevance to your working practices
Think of localisation of an ISP as a shortcut – the full development process should be followed
Do Not
Quality Assuring Scenario
Further to Scenario 3 earlier in the presentation Breachingshire County Council chose to progress with an ISP and have since sent their completed ISP to you for Quality Assurance.
Acting as a WASPI Facilitator and working in your groups analyse the document they have sent in (Red Wallet) and consider whether any amendments should be made or if the document is fit for purpose.
Summary of Expectations
As an approved ISP Facilitator you will be expected to:-
Support your ‘Designated Person’ and act as a ‘champion’ for the WASPI framework
Support ‘local’ ISP developments that your organisation is involved in
Share good practice with other organisations
Provide unbiased Quality Assurance of ISPs to external organisations