Freedom of Information Request: 0209 2019/20

If the s.12 costs limit is exceeded, please answer as many questions as possible, to the fullest extent possible.

1. Does your Trust/organisation permit clinicians to communicate about patients or other clinical matters (for example, a junior doctor discussing a patient with a consultant) using an instant messaging app (for example, WhatsApp, Forward, Siilo, Medicbleep, Skype for Business, Vocera, Rainbow)? No
2. If yes, what is/are the names of the apps/devices? Not applicable
3. If applicable, do your clinicians use their personal devices, or those provided by your Trust/Trust/organisation for the purposes referenced in question 1(for example, the ASCOM ‘Myco 2’)? No
4. If such devices are provided by your Trust/organisation for use by clinicians, what is the make and model of each device? Not applicable
5. If your Trust/organisation does not use any such app or device, please state whether your Trust/organisation is considering their use, stating which apps and/or devices are being considered. We are considering introducing such technology but have not decided on a vendor or device at this time
6. Please state whether your Trust/organisation has an instant messaging, or related policy No, however the Trust’s Acceptable Use Policy refers to standards for the use of social media. Information Governance training includes reference to the appropriate use of messaging apps
7. Please attach your Trust/organisation’s instant messaging, or related policy Please see attached ItAcceptableUse Acceptable Use of ICT Policy HGS
8. Please state whether your Trust/organisation has carried out a Data Protection Impact Assessment (DPIA) for: a. Instant messaging generally for the purposes mentioned in Q1 b) Specific instant messaging apps/devices (each, if more than one) for the purposes mentioned in Q1 Not Applicable
9. Please enclose the DPIAs referred to in Q8 Not applicable
10. If not included in your DPIA, please enclose your standard operating procedure and/or policies which specify how information is separated and, if necessary, extracted from the apps/devices where: a) A valid access request (e.g. patients, police etc.) is made for all patient information contained on the apps/devices
11. A valid access request is made for the personal data of a user of the apps/devices Not Applicable
12. Please state the number of reported incidents (categorised, is possible) concerning the devices/apps (each, if more than one) The Trust does hold this information, however we estimate that compliance with your request would exceed the appropriate costs limit under section 12 of the Freedom of information Act 2000. This is currently £450. The appropriate limit would be exceeded if it would require more than 18 hours work. We do not have a category for the reporting of incidents concerning devices/apps. If we were to do a manual search, this would take in excess of 18 hours.