Information Governance – Instant Messaging Software

18th December 2018

Instant messaging is a useful tool in supporting the delivery of direct care, particularly in an acute context. There are, however, some important data protection considerations surrounding the use of these systems, including:

• The transfer of sensitive data across unregulated servers outside the European Economic Area (EEA)
• Compliance with data protection requirements regarding ‘fair processing’, individuals’ rights, and records management
• Data protection security risks, including bringing your own device (BYOD) to work.

A proportionate approach is therefore needed: staff need to balance the benefits and risks of instant messaging depending on the purpose for which they wish to use it (e.g. using it in an emergency versus as a general communication tool).

Please find attached the information governance considerations for instant messaging.