Information security and risk policy

This policy fits within the Trust’s overall business risk framework and is needed to ensure the Trust complies with data protection and information governance law .We have a duty of confidentiality to our patients and our colleagues.