The Caldicott process, established after the 1997 Caldicott Report, ensures responsible use of patient-identifiable information in the NHS. Each organisation appoints a Caldicott Guardian to oversee the process. This process safeguards patient data during audits or QI projects, balancing confidentiality with the need for care improvements when patients do not personally consent to their data being used.

Use of (including any storage of) patient identifiable data is likely to need approval by the Caldicott guardian. This process maybe be daunting the first time, but approval is usually easy to obtain. If in doubt seek advice before approaching the Clinical governance team.

Examples of patient identifiable data that may be used include: Name, Address, Post code, CHI, DOB (inc. age) & Diagnosis or test results.

The application is an online form generated by the team at TAY.informationgovernance@nhs.scot.