Information Governance Policies
Information Governance Policies
•
•
•
Data Encryption & Transportation Policy
Information Access Policy
Monitoring of Communications Policy
Business Support and Corporate Information Resources Team…
Working to create a knowledge led organisation
Data Encryption & Transportation Policy
•
•
•
•
•
This policy has been developed to provide clear statements to all users
on the do's and don'ts in respect of the transportation of personal data
Is designed to support and improve our handling of personal data, at a
time when losses of personal data are being widely reported in the media
and the Information Commissioners Office (ICO) is extending its powers
to take action against organisations losses such data.
Provides clear guidance and tools to support better management of
personal information
Is designed to ensure that clear standards are in place to protect personal
data and reassure citizens that we are actively taking steps to ensure the
security of there data
Will demonstrate to external bodies / assessors e.g. partners, ICO, Audit
Commission that we are taking our responsibilities in respect of personal
data seriously
Business Support and Corporate Information Resources Team…
Working to create a knowledge led organisation
Information Access Policy
•
This policy is intended to provide a framework that will support improved
access to information, both across and outside (e.g. partners and
members of the public) the council whilst at the same time ensuring that
information is appropriately protected. In doing so it will set out:
– The different categories of information that the council holds
– How information can be grouped into these categories.
•
The principles by which different categories of information need to be
managed throughout their life-cycle, (e.g. how they should be stored,
accessed, used, shared, protected and disposed of)
Business Support and Corporate Information Resources Team…
Working to create a knowledge led organisation
Monitoring of Communications Policy
•
•
•
•
•
•
The Telecommunications (Lawful Business Practice) (Interception of Communications)
Regulations 2000 came into force on 24th October 2000. Their purpose is to give businesses a
lawful basis for the interception of business communications without the users' consent for a
range of purposes. The regulations cover all types of communications including those that are
Internet based, by fax, by telephone and by e-mail and allow businesses, government
department, and any public authority to monitor or record communications.
Salford City Council will monitor communications in accordance with the above regulations.
employees will be made aware when any monitoring is taking place and might not necessarily
be asked for consent.
Managers must ensure that they adopt this policy whenever monitoring is being undertaken.
Employees must be made aware when any monitoring is taking place
Proportionality, justification and transparency will need to be considered in all cases in order to
comply with The Data Protection Act and The Human Rights Act. (See Appendix 1)
This policy is intended to promote awareness of the council's intention to monitor
communications, undertaken by employees.
This policy is intended to inform managers of the correct procedures which are to be adopted,
whenever monitoring is undertaken. It acts as an overarching policy, underneath which,
bespoke monitoring policies must sit. NB this policy does NOT cover covert monitoring.
Business Support and Corporate Information Resources Team…
Working to create a knowledge led organisation