Wales Accord on the Sharing of Personal Information

(WASPI)For organisations involved in the protection, safety, health,

education and Social Welfare of the people in Wales (including statutory, private and third sector organisations)

Information Sharing Protocol (ISP)For regular and reciprocal sharing of information between agencies engaged

in partnership working arrangements for a defined purpose.By defining the reasons why information sharing is required, how it supports the functions of the partnership and the principles that govern the sharing, a

protocol can provide the foundations for partners to agree in principle to share the required information.

Aims and Objectives

have a better understanding of the WASPI Framework

have the knowledge, skills and techniques required to:

• develop ISPs independently

• localise an existing ISP

• Quality Assure ISPs

To ensure ISP Facilitators:

Course Content

Part 1 - WASPI Background

Part 2 - WASPI Framework

Part 3 - ISP development process including skills and techniques

Part 4 - Localising an ISP

Part 5 - Quality Assuring an ISP

Part 6 - Questions

Part 3

Developing ISPsusing the Framework

ISP ScopeConsideration

Exercise

An ISP has been created in the district of Blunderton to support the sharing of information between Hammer Homes, Blunderton District Council and a local charity for the purposes of placing ex-offenders in appropriate housing.

Since its creation the ISP has widened it’s scope to an All-Wales scope to include additional branches of Hammer Homes outside of the initial area.

Sherlock Holmes have become aware of the changes instigated by Hammer Homes and, because its head office is based in London, would like to cast the net wider still and encompass England too.

ISP Scope Consideration Exercise

If you were a WASPI Facilitator responsible for this ISP what would you do?

Does the expanded ISP seem reasonable? What are the relevant considerations?

ISP Scope Consideration Exercise

Benefits of using the ISP template

Consistency

ICO approved and in line with Data Protection Act (DPA)

Prevents duplication

Ensures consideration is taken towards the handling of Service Users’ information

Preparation

Is an ISP appropriate and of a manageable size?

Identify the partner organisations to be involvedo Are they signed up to the Accord? o Are they registered with the ICO?

Arrange initial “Task & Finish Group” meeting

The ISP Task and Finish Group

A Task and Finish group will be set up for each new local development

Membership will consist of practitioners and staff from partner organisations and a trained WASPI Facilitator

This will serve as an information collection process

Obtains facts about the sharing and disclosure processes

Discussion and participation are key to successful meetings

First Meeting

History – provide a background of WASPI and the purposes

‘Sign-up’ – confirm that all participating organisations are signed up to the Accord

Co-ordination is paramount and the ISP Co-ordinator will continue to be a key figure

Continuing the Process

Subsequent Meetings – the co-ordinator should arrange further meetings

Timescales are not rigid, however, it is recommended that the process is completed swiftly to ensure momentum is maintained

Participation – try to ensure that the same representatives from each participating organisation are in attendance

Agreeing the Purpose and Objectives• service will it support?• are the aims of the service?

What...

• is the sharing needed?• is the ISP required?

Why...

• Will benefit from the service?• Will be involved in the service being

provided?Who...

TAF Ceredigion Talk Through

Appendix BInformation Flow Reference Table

Appendix B sets out the details of the information to be shared to support the main body of the ISP

It will also detail the controls to be applied to the information to ensure that it is kept secure from unlawful disclosure

Any forms and/or guidance including local policies and procedures should also be considered at this stage

Populating the ISP Template – Summary

Next stage will be to complete all sections of the template

Relevant professional codes of practice and any other appropriate guidelines must be noted

Ensure fair processing requirements are met

Appendices can also be added but the default appendices A and B should remain

Finalising The ISP Confirm all partner organisations have signed up to the Accord Forward the draft ISP to the organisations undertaking the

Quality Assurance process Discuss implementation and training requirements with

partner organisations Agree responsibility for ensuring the review takes place Arrange for all partner organisations’ Designated Person to

approve the ISP once QA’d and they are signed up to the Accord

Place the ISP on Publication Schemes of relevant organisations Use of the resources available on the WASPI website such as

letters asking organisations to sign off an ISP is advised

Part 4

Localising an ISP

Localising an ISP

Use previously created ISPs as a starting point for new developments

Consider how your working practices differ from an existing ISP

Satisfy yourself that any existing ISP is still relevant e.g. is any legislation quoted appropriate and current?

Do Allow an existing to ISP to influence a Task & Finish group’s perception of their service– an ISP should reflect and support your working practices

“Copy and Paste” an existing ISP without considering its relevance to your working practices

Think of localisation of an ISP as a shortcut – the full development process should be followed

Do Not

Part 5

Quality Assuring

Quality Assuring Scenario

Further to Scenario 3 earlier in the presentation Breachingshire County Council chose to progress with an ISP and have since sent their completed ISP to you for Quality Assurance.

Acting as a WASPI Facilitator and working in your groups analyse the document they have sent in (Red Wallet) and consider whether any amendments should be made or if the document is fit for purpose.

Summary of Expectations

As an approved ISP Facilitator you will be expected to:-

Support your ‘Designated Person’ and act as a ‘champion’ for the WASPI framework

Support ‘local’ ISP developments that your organisation is involved in

Share good practice with other organisations

Provide unbiased Quality Assurance of ISPs to external organisations

Questions?