Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Current Chapter

Current chapter – Section 17: Information security management


Information security is essential for all types of confidential records, whether manual or electronic. Organisations must ensure staff take basic precautions against information security breaches, such as not leaving portable computers, medical notes or files in unattended cars or in easily accessible areas. All files and portable equipment should be stored under lock and key when not actually being used. Staff should not normally take patient/service user records home, and where this cannot be avoided, procedures for safeguarding the information effectively should be locally agreed.

Guidance on information security is provided in the DH publication Information Security: NHS Code of Practice. 

Detailed information security assurance requirements are set out in the Information Governance Toolkit. 


Last edited: 17 January 2022 1:48 pm