View or update registers

A Caldicott Guardian is a senior person responsible for protecting the confidentiality of people's health and care information and making sure it is used properly.

All NHS organisations and local authorities providing social services must have a Caldicott Guardian. 

The Information Asset Owner (IAO) will be a senior member of staff who is the nominated owner for one or more identified information assets of the organisation.

IAOs will support the organisation's SIRO in their overall information risk management function as defined in the organisation's policy. 

A Senior Information Risk Owner (SIRO) is an Executive Director or member of the Senior Management Board of an organisation with overall responsibility for an organisation's information risk policy.

The SIRO is accountable and responsible for information risk across the organisation. They ensure that everyone is aware of their personal responsibility to exercise good judgement, and to safeguard and share information appropriately.

A SIRO is responsible for user access into Systems and Service Delivery (SSD) systems and this is done by submitting a Data User Certificate (DUC) via the Exeter helpdesk at [email protected]. The ODS Team will process the form, when sign off has been verified, and set up the user account on the Open Exeter system. There is only one registered SIRO per organisation, however they can delegate responsibility of user access sign-off to a Deputy SIRO or an Information Asset Owner (IAO). A Deputy SIRO should only be used when the nominated SIRO is absent and the application is urgent.