How do NCEPOD comply with the Data Protection Act, Confidentiality and Ethical Approval?
There are two Government Acts, related to confidentiality, that NCEPOD are requested to comply with. The first is the Data Protection Act 1998. The second is the NHS Act 2006. The Data Protection Act 1998 NCEPOD is committed to maintaining a recognised level of best practice for its information security procedures. In 2009 we undertook an external audit of our information security procedures. Recommendations included in this report are being acted upon and our information security procedures have been formulated in conjunction with the International Standard ISO/IEC 27001:2005. ‘Information technology – Code of practice for information security management’. All NCEPOD staff manage data according to the information security procedures as a means of ensuring integrity and confidentiality of data submitted to NCEPOD. The procedures apply to both physical and electronic data formats. Although it is understood that the DPA 1998 does not apply to deceased patients NCEPOD will apply its stand
