The adoption of the templates is non-mandatory. However, all organisations using and sharing health and care information are encouraged to use these templates to reduce duplication and facilitate collaborative work across the system.
Information governance templates
Helping information governance (IG) professionals across health and care to bring a consistent approach.
Search A-Z
Search A-Z
AI enabled ambient scribing products template DPIA
This template data protection impact assessment (DPIA) is for professionals in health and care organisations who are responsible for considering the IG implications of adopting an AI enabled ambient scribing product for individual care purposes.
Child Protection Information Sharing (CP-IS) system template DPIA
This data protection impact assessment (DPIA) template is for professionals in health and care organisations who are responsible for managing their organisation’s access to and use of the Child Protection Information Sharing (CP-IS) system.
Confidentiality Advisory Group (CAG) risk stratification application template
NHS England and system representatives have co-produced this template for Integrated Care Boards (ICBs) to use for their CAG risk stratification applications.
Cyber incident information governance (IG) checklist and template notification letter
Templates for IG professionals in health and care organisations to use when managing and supporting a cyber incident.
Digital Technology Assessment Criteria (DTAC) form
This form is intended as a tool for assessing digital health technology against underlying regulatory and policy requirements, including IG.
Microsoft 365 Copilot template DPIA
This template data protection impact assessment (DPIA) is for professionals in health and care organisations who are responsible for assessing the processing associated with their organisation’s use of Microsoft 365 Copilot.
O365 migration DPIA templates
These data protection impact assessment (DPIA) templates are for project leads and IG professionals in health and care organisations who are involved in managing and supporting Microsoft Office 365 (O365) data transfers.
OpenSAFELY DPIA templates
Data protection impact assessment (DPIA) templates for GP practices to use as controllers of the GP data sets used by the OpenSAFELY services.
Subject Access Request (SAR) form
This form can be used by patients and service users to make a subject access request to a health or care organisation.
Universal information governance (IG) templates
NHS England has produced a suite of universal IG templates to support the lawful use of data within health and care.
Virtual wards templates
Templates for IG professionals to use when supporting NHS organisations to set up virtual wards.