ABSTRACT

The wording of data 'ownership' might be misleading as it could be argued that the real owner of information is the patient him-/herself. However, all the information that is gathered from patients and is kept either in manual or on computer records needs to have an 'owner' within the primary healthcare team who takes ultimate responsibility for all these confidential data. In a single-handed practice the GP should have the overall data 'ownership' of all the confidential data. But in a partnership or group practice one GP/Caldicott Guardian should be assigned to have the overall responsibility for all the confidential data. For security purposes, however, each set of confidential data and/or material should be assigned/delegated to an 'owner'. The main responsibility of the data 'owner' is to keep these data as confidential as possible by working closely with the practice's Caldicott Guardian/Information Governance Lead and ensuring compliance withrelevant legislation.