DataSecurity

1st March 2018

Confidentiality


TiddlyManuals that are edited, stored and accessed online are never to be used for the collection or publication of patient-specific data, which always needs to be stored according to rigorous local protocols and procedures.

When a team is manualizing its own practice, it must limit descriptions of protocols to general rather than specific situations, and if referring to scenarios must always ensure that these are appropriately anonymised.

Teams remain responsible for any content that they add to their online version of the AMBIT manual, and the AMBIT project accepts no responsibility for content that is authored by others, whether or not it is added to content included from the AMBIT core content site.

Interactive Case Recording (ICR)


ICR is a currently non-functional aspect of tiddlymanuals, that relies on the fact that you can download an entire tiddlymanual and run it in a browser that is completely disconnected from the internet. A downloaded tiddlymanual is just an "html" file, and it is possible to edit this, just as one might edit, say, a "Word" document - storing it safely in a secure setting

The following notes relate to ICR, which is not yet (2018, February) recommended for use.

Recording patient-specific data in a TiddlyManual is technically no different to storing the same data in the form of, say, a "Word" document. You must consider:

(a) WHERE the file is stored

This should be on a secure server, and NEVER on a personal laptop/USB memory stick etc, unless this is for a very specific reason and for a limited time-period, and the data is held in an encrypted format. If that were so, then a locally-stored file should only ever be a COPY of the original file, and NOT the original file itself. Any such copy held would be the responsibility of the holder. Local I.T. rules will apply to the level of encryption required for transporting data in this way. Copies transported thus should be deleted as soon as the reason for transporting them is no longer valid.

(b) HOW the file is stored

Save the file as an anonymised name (for instance the child's first name and initial, rather than their surname). Do not keep personal identifiers such as Date of Birth/Address in the file - these will be stored in the paper notes.

(c) BACKUPS

The file will automatically back itself up each time you save it. This allows you to keep track of older versions of the manual, and you can (and should) specify where these backups are stored, according to the Set up a new patient TiddlyManual instructions (this is a very simple procedure, in which you just define a name for the backups folder for this specific file.) If the file is stored on your main secure server, then it will also be backed up alongside all other data on that server (this is not the practitioner's responsibility to do this but is done by the I.T. department), to prevent against catastrophic loss of data in the event of a computer crash. Remember that the local back-ups that your manual makes (as referred just above)each time you save are still vulnerable to being lost if the whole computer crashes without back-ups in a separate place, so if you are using the manual outside the main server (even though this would only be in exceptional circumstances) you should keep a back-up copy on a separate (equally secure) device.