View or update registers
Access or update the Caldicott Guardian, Senior Information Risk Owner, Information Asset Owner registers and the Safe Haven Directory.
Register information is available on the ODS Portal and our new search and export tool 24 hours after it has been updated by the ODS Support Team.
Caldicott Guardian register
A Caldicott Guardian is a senior person responsible for protecting the confidentiality of people's health and care information and making sure it is used properly.
All NHS organisations and local authorities providing social services must have a Caldicott Guardian.
ODS do not hold information for Caldicott Guardians in Scotland, Isle of Man or Channel Islands. These are maintained by separate organisations.
Information Asset Owner register
The Information Asset Owner (IAO) will be a senior member of staff who is the nominated owner for one or more identified information assets of the organisation.
IAOs will support the organisation's SIRO in their overall information risk management function as defined in the organisation's policy.
The IAO nomination form must be sent by the registered SIRO from the SIRO's email account. There is no limit to the number of IAO's a SIRO can nominate within their organisation.
ODS do not hold information for IAOs in Scotland, Isle of Man or Channel Islands. These are maintained by separate organisations.
Senior Information Risk Owner register
A Senior Information Risk Owner (SIRO) is an Executive Director or member of the Senior Management Board of an organisation with overall responsibility for an organisation's information risk policy.
The SIRO is accountable and responsible for information risk across the organisation. They ensure that everyone is aware of their personal responsibility to exercise good judgement, and to safeguard and share information appropriately.
A SIRO is responsible for user access into Systems and Service Delivery (SSD) systems and this is done by submitting a Data User Certificate (DUC) via the Exeter helpdesk at [email protected]. The ODS Team will process the form, when sign off has been verified, and set up the user account on the Open Exeter system. There is only one registered SIRO per organisation, however they can delegate responsibility of user access sign-off to a Deputy SIRO or an Information Asset Owner (IAO). A Deputy SIRO should only be used when the nominated SIRO is absent and the application is urgent.
ODS do not hold information for SIROs in Scotland, Isle of Man or Channel Islands. These are maintained by separate organisations.
Last edited: 6 January 2025 12:18 pm