📊
Data Governance Playbook
  • Health data governance: a playbook for non-technical leaders
    • Why data governance is important in healthcare
    • Who is this playbook for?
    • How to use this playbook
    • Other related resources
  • Index
  • Play one: Implementing data governance in healthcare
    • The value of data governance for data-informed healthcare projects
    • How to implement a data governance framework for a healthcare organisation or project
      • 1. Data assets
      • 2. People
      • 3. Policies and processes
      • 4. Standards and technologies
    • Resources relating to this play
  • Play two: Understanding and mapping health data ecosystems
    • Data ecosystems in healthcare
    • Data governance and trustworthy data ecosystems
    • Mapping the data ecosystem
      • Use case 1: Mapping the ecosystem of a Covid-19 symptom tracker in the UK
      • Use case 2: Identifying current stakeholders to reduce snakebite mortality and morbidity in India
    • Resources related to this play
  • Play three: Roles and responsibilities in health data governance
    • Roles involved in health data governance
      • Senior data leader
      • Health system leader
      • Policy leader
      • Health project partner
      • Governmental body
      • Senior executive leader
    • How to enlist support from stakeholders
    • Resources relating to this play
  • Play four: Making data interoperable
    • What is interoperability and how is it relevant to healthcare?
    • Standards for data and interoperability
    • Existing standards for data
    • Data adaptors
    • When to use an adaptor
    • Resources relating to this play
  • Play five: Demonstrating the value of health data governance: case studies
    • Primary care data use: MedMij platform
    • Using research data: INSIGHT Health Data Research Hub
    • Using healthcare data for other purposes: Infectious Diseases Data Observatory
  • Play six: Emerging uses of data and technology in the health sector
    • Emerging uses of health data
    • Emerging technologies to support health data management
    • Resources relating to this play
  • Play seven: Assessing the legal, regulatory and policy context for sharing health data
    • Data protection laws and policies
    • Intellectual property
    • Other regulations and laws impacting use of health data
    • Socio-cultural norms
    • Resources relating to this play
  • Play eight: Managing risks when handling personal data
    • Managing personal data responsibly and ethically in healthcare projects
    • What is personal data?
    • Data protection regulations
    • Recognising personal data in healthcare projects
    • Impacts from use of healthcare data
    • Minimising risk - practical approaches
    • Appendix: Risks from personal data exposure and how harms can be mitigated
  • Play nine: How to set up successful data sharing partnerships
    • Understanding how data sharing occurs in the health sector
    • A step-by-step guide to setting up successful data sharing partnerships
      • Step 1. Understand the purpose of sharing data, and with whom
      • Step 2. Define the principles that will guide how data is shared
      • Step 3. Build and maintain relationships with your data sharing partners
    • Appendix: International frameworks for data sharing principles
    • Resources relating to this play
  • Play ten: Sharing health data: data agreements and technologies
    • Common types of data sharing agreements
    • How to choose the best method of sharing data
      • Step 1: Decide how widely you need or want to share data
      • Step 2: Decide on the type of agreement required for sharing data
      • Step 3. Consider how technology can facilitate data sharing and access
    • Appendix: Choosing technology to support data sharing and access
    • Resources relating to this play
  • Play eleven: Cross-border data sharing
    • What is cross-border data sharing?
    • Current trends and global discussions on cross-border data sharing
    • Overcoming challenges with cross-border data sharing
  • How to support trustworthy data sharing: Checklist
  • Slides to communicate the benefits of data governance to key health stakeholders
Powered by GitBook
On this page
  • Purpose of this play
  • Who should read this play
  • When to use this play

Was this helpful?

Play eight: Managing risks when handling personal data

PreviousResources relating to this playNextManaging personal data responsibly and ethically in healthcare projects

Last updated 3 years ago

Was this helpful?

This approach has been validated as being useful for the agriculture sector. The steps and content have been drawn from, and were inspired by, content authored by CAB International and the Open Data Institute to help Bill & Melinda Gates Foundation grantees access, use and share data about people in agriculture projects. See: CABI (2021), .

Purpose of this play

As a project leader, you may manage a project that involves collecting personal data. This play will help you to maximise the use of data while protecting the rights of individuals. Specifically, this play will help you:

  • recognise personal data in healthcare projects

  • identify where data is suitable for sharing as widely as possible

  • comply with data protection and data rights legislation

  • minimise risk by identifying relevant mitigating actions (for example anonymisation).

Who should read this play

  • Non-technical project leaders starting a healthcare project who need to understand how to manage risks when handling personal data and build trust.

  • Health data managers and health system leaders who are responsible for overseeing projects that share personal data.

When to use this play

  • At the beginning of a project that will collect, share and use data.

  • Whenever data is being accessed or shared as part of a project.

  • When you are unsure whether you can share data.

  • When you have concerns over privacy or confidentiality in relation to data.

Please note that this guidance is not legal advice and if you are uncertain, you should seek support from a legal professional.

Protecting people - managing risk when handling personal data