{"id":26430,"date":"2026-08-02T09:54:19","date_gmt":"2026-08-02T09:54:19","guid":{"rendered":"https:\/\/silomarg.co.uk\/?page_id=26430"},"modified":"2026-08-02T10:08:19","modified_gmt":"2026-08-02T10:08:19","slug":"information-security","status":"publish","type":"page","link":"https:\/\/silomarg.co.uk\/index.php\/information-security\/","title":{"rendered":"Information Security"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Information Security Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

Policy Name Module: Information Security<\/strong>
Module:\u00a0<\/strong> Human Resources<\/p>\n\n

Statement of purpose<\/strong><\/p>\n

The security of personal data is a top priority for Silomarg Ltd. We are committed to safeguarding the confidentiality, integrity, and availability of all personal data we hold, particularly data relating to the health, care, and well-being of our service users. This policy outlines how we manage and protect personal data in line with applicable UK legislation, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.<\/p>\n\n

This Information Security Policy applies to all employees, contractors, and third parties who have access to personal data processed by Silomarg Ltd. It covers all data processing activities, whether carried out in our offices, remotely, or in clients\u2019 homes, and applies to electronic and physical data.<\/p>\n\n

This policy ensures compliance with the following legislation:<\/strong><\/p>\n\n

 UK General Data Protection Regulation (UK GDPR)\n Data Protection Act 2018\n Privacy and Electronic Communications Regulations (PECR)\n Care Quality Commission (CQC) Regulations<\/code><\/pre>\n\n
The objectives of this Information Security Policy are:<\/strong><\/p>\n\n
 To protect personal data from unauthorised access, loss, or damage.\n To ensure compliance with GDPR and Data Protection Act requirements.\n To provide employees and contractors with clear guidance on how to handle personal data securely.\n To reduce the risk of data breaches and other security incidents.<\/code><\/pre>\n\n
It is the overall responsibility of the Registered Manager, Leah Margolis to ensure that all Staff have read and signed (as understood) this policy for Silomarg Ltd, and that it is implemented consistently in daily practice. It is the overall responsibility of every staff member to follow this policy and procedure. Failure to do so may lead to disciplinary action.
A current copy of the policy will be available electronically and in the Office.
This policy will be reviewed at least annually, or more frequently if significant changes occur.
The person accountable for this Policy\/Procedure is Leah Margolis.
The Nominated Individual for Silomarg Ltd is Leah Margolis.
This Policy \/ Procedure was last updated on 20\/07\/2026.
This Policy \/ Procedure is due to be reviewed on 19\/07\/2027.<\/p>\n\n
Policy\u00a0Responsibilities<\/strong><\/p>\n\n
Data Protection Officer (DPO): The DPO is responsible for overseeing data protection strategy and implementation to ensure compliance with GDPR and other relevant regulations.\n Management: Silomarg Ltd\u2019s management team is responsible for ensuring that appropriate technical and organisational measures are in place to protect personal data.\n Employees: All employees must follow this policy and any related procedures to protect personal data.<\/code><\/pre>\n\n
Data Security Principles<\/strong><\/p>\n
<\/strong><\/p>\n
Silomarg Ltd adhere to the following key data protection principles outlined in Article 5 of the GDPR:<\/strong><\/p>\n\n
 Lawfulness, fairness, and transparency: Data must be processed lawfully, fairly, and in a transparent manner.\n Purpose limitation: Data must be collected for specified, explicit, and legitimate purposes.\n Data minimisation: Data must be adequate, relevant, and limited to what is necessary.\n Accuracy: Data must be accurate and kept up to date.\n Storage limitation: Data must be kept only for as long as necessary.\n Integrity and confidentiality: Data must be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful access.<\/code><\/pre>\n\n
Data Handling Procedures<\/strong><\/p>\n
<\/strong><\/p>\n
Data Collection<\/strong><\/p>\n\n
Personal data should be collected only for legitimate business or care-related purposes and with the explicit consent of the data subject, unless another lawful basis for processing applies (e.g., the provision of care services).<\/p>\n\n
Data Access Control<\/strong><\/p>\n\n
Access to personal data will be restricted to authorised employees only and on a need-to-know basis.
Role-based access controls (RBAC) will be implemented to ensure that employees can only access the information necessary for their role.
Strong passwords and multi-factor authentication (MFA) will be required for accessing any sensitive data.<\/p>\n\n
Data Storage<\/strong><\/p>\n\n
Personal data should be stored securely using encryption and password protection on all devices and storage media.
Physical files should be locked in secure storage when not in use, and access should be restricted to authorised personnel.<\/p>\n\n
Data Sharing<\/strong><\/p>\n\n
Personal data will only be shared with third parties where a lawful basis exists (e.g., with healthcare providers) and where a data sharing agreement is in place.
When sharing data electronically, encryption or secure file transfer methods (e.g., NHS secure email) must be used.<\/p>\n\n
Data Retention<\/strong><\/p>\n\n
Personal data will be retained for no longer than is necessary, in line with legal and regulatory obligations. The agency will implement a data retention schedule based on the Care Quality Commission (CQC) and GDPR requirements.<\/p>\n\n
Data Subject Rights<\/strong><\/p>\n\n
All data subjects have the following rights, which the agency will honour:<\/p>\n\n
 Right of access: To obtain a copy of their personal data.\n Right to rectification: To correct any inaccuracies in their data.\n Right to erasure (right to be forgotten): To request the deletion of their data, subject to legal constraints.\n Right to restrict processing: To limit the way their data is used.\n Right to data portability: To receive their data in a machine-readable format.\n Right to object: To object to certain types of data processing.<\/code><\/pre>\n\n
Requests from data subjects will be handled promptly, and within the statutory 30-day period where applicable.<\/p>\n\n
Data Breach Response<\/strong><\/p>\n\n
In the event of a data breach:<\/strong><\/p>\n\n
 All breaches, whether actual or suspected, must be reported immediately to the Data Protection Officer (DPO).\n The DPO will assess the breach and, if necessary, notify the Information Commissioner\u2019s Office (ICO) within 72 hours of becoming aware of the breach.\n Affected data subjects will be informed where required by law.\n The agency will take immediate action to mitigate the impact of the breach and prevent future incidents.<\/code><\/pre>\n\n
Training and Awareness<\/strong><\/p>\n\n
All employees must receive regular data protection and information security training, including GDPR awareness, secure handling of personal data, and best practices for using agency systems and devices.
The agency will promote a culture of data security and ensure that all personnel are aware of their responsibilities under this policy.<\/p>\n\n
Third-Party Suppliers<\/strong><\/p>\n\n
All third-party suppliers who process personal data on behalf of the agency must adhere to the same standards of data protection and security.
Contracts with third-party processors must include specific provisions for data protection, including adherence to GDPR requirements.<\/p>\n\n
Monitoring and Review<\/strong><\/p>\n\n
The Data Protection Officer (DPO) will regularly review the agency\u2019s information security practices to ensure compliance with this policy and UK legislation.
This policy will be reviewed annually or after any significant change in legislation, operational processes, or following a data breach.<\/p>\n\n
Consequences of Non-Compliance<\/strong><\/p>\n\n
Failure to comply with this policy may result in disciplinary action, up to and including termination of employment, and may also result in personal liability under UK data protection laws.<\/p>\n\n
Contact Information<\/strong><\/p>\n\n
For any questions or concerns regarding this policy or data protection practices, employees and data subjects should contact the agency\u2019s Data Protection Officer:<\/p>\n\n
Name:<\/strong> Leah Margolis
Email:<\/strong> leah.margolis@silomarg.co.uk
Phone:<\/strong> 07454 232181, 07445502088<\/p>\n\n
Relevant Legislation<\/strong>
http:\/\/www.legislation.gov.uk\/ukpga\/2018\/12\/contents\/enacted
Data Protection 2018<\/strong>
http:\/\/www.legislation.gov.uk\/ukpga\/2000\/36\/contents
Freedom of information Act 2000<\/strong>
http:\/\/www.legislation.gov.uk\/ukpga\/2014\/23\/contents\/enacted
The Care Act 2014<\/strong>
http:\/\/www.legislation.gov.uk\/ukpga\/1998\/42\/contents
Human Rights Act 1998<\/strong>
http:\/\/www.legislation.gov.uk\/ukpga\/2005\/9\/contents
Mental Capacity Act 2005<\/strong>
http:\/\/www.legislation.gov.uk\/ukpga\/1990\/18\/contents
The Computer Misuse Act 1990
http:\/\/www.legislation.gov.uk\/ukpga\/1998\/23\/contents
Public Interest Disclosure Act 1998
http:\/\/www.legislation.gov.uk\/ukpga\/2015\/28\/contents\/enacted
Health and Social Care (Safety & Quality) Act 2015<\/strong><\/p>\n
<\/strong><\/p>\n
Relevant Regulations<\/strong>
https:\/\/ico.org.uk\/
Information Commissioner\u2019s Office<\/strong>
https:\/\/www.scie.org.uk\/publications\/adultsafeguardinglondon\/informationsharing\/legalframework.asp
Common Law Duty of Confidentiality<\/strong>
https:\/\/www.gov.uk\/government\/publications\/guide-to-the-general-data-protection-regulation
General Data Protection Regulation 2018 (GDPR)<\/strong>
https:\/\/www.legislation.gov.uk\/uksi\/2014\/2936\/contents\/made
The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014<\/strong>
http:\/\/static.ukcgc.uk\/docs\/code.pdf
NHS Digital (formally HSCIC) Code of Practice on Confidential Information 2014<\/strong>
https:\/\/digital.nhs.uk\/data-and-information\/looking-after-information\/data-security-and-information-governance\/codes-of-practice-for-handling-information-in-health-and-care\/a-guide-to-confidentiality-in-health-and-social-care
NHS Digital (formally HSCIC)<\/strong> Guide to confidentiality 2013
https:\/\/digital.nhs.uk\/data-and-information\/looking-after-information\/data-security-and-information-governance\/codes-of-practice-for-handling-information-in-health-and-care\/records-management-code-of-practice-for-health-and-social-care-2016
Records Management Code of Practice for Health and Social Care 2016<\/strong>
https:\/\/www.cqc.org.uk\/sites\/default\/files\/20150324_guidance_providers_meeting_regulations_01.pdf
Regulation 9: Person-centred care<\/strong>
Regulation 10: Dignity and respect<\/strong>
Regulation 11: Need for consent<\/strong>
Regulation 17: Good governance<\/strong>
Regulation 20: Duty of candour<\/strong>
https:\/\/www.skillsforcare.org.uk\/Documents\/Topics\/Digital-working\/Information-sharing-for-social-care-employers.pdf
Information Sharing for Social Care Employers\/ Skills For Care
https:\/\/www.legislation.gov.uk\/uksi\/2000\/2699\/contents\/made
Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000<\/strong><\/p>\n\n
Quality Statements
\u2022 We maximise the effectiveness of people\u2019s care and treatment by assessing and reviewing their health, care, wellbeing and communication needs with them.
\u2022 We plan and deliver people\u2019s care and treatment with them, including what is important and matters to them. We do this in line with legislation and current evidence-based good practice and standards.
\u2022 We work effectively across teams and services to support people. We make sure they only need to tell their story once by sharing their assessment of needs when they move between different services.
\u2022 We support people to manage their health and wellbeing so they can maximise their independence, choice and control. We support them to live healthier lives and where possible, reduce their future needs for care and support.
\u2022 We work with people to understand what being safe means to them as well as with our partners on the best way to achieve this. We concentrate on improving people\u2019s lives while protecting their right to live in safety, free from bullying, harassment, abuse, discrimination, avoidable harm and neglect. We make sure we share concerns quickly and appropriately.
\u2022 We work with people to understand and manage risks by thinking holistically so that care meets their needs in a way that is safe and supportive and enables them to do the things that matter to them.
\u2022 We have a proactive and positive culture of safety based on openness and honesty, in which concerns about safety are listened to, safety events are investigated and reported thoroughly, and lessons are learned to continually identify and embed good practices.
\u2022 We work with people and our partners to establish and maintain safe systems of care, in which safety is managed, monitored and assured. We ensure continuity of care, including when people move between different services.
\u2022 We detect and control potential risks in the care environment. We make sure that the equipment, facilities and technology support the delivery of safe care.
\u2022 We assess and manage the risk of infection. We detect and control the risk of it spreading and share any concerns with appropriate agencies promptly.<\/p>\n\n
Key Lines of Enquiry KLOE<\/strong>
SAFE:<\/strong> How do systems, processes and practices keep people safe and safeguarded from abuse?
\u2022 Do staff have all the information they need to deliver safe care and treatment to people?<\/p>\n\n
Effective<\/strong>: How are people’s care and treatment outcomes monitored and how do they compare with other similar services?
\u2022 Is consent to care and treatment always sought in line with legislation and guidance?
\u2022 How well do staff, teams and services work together within and across organisations to deliver effective care and treatment?<\/p>\n\n
Caring:<\/strong> How are people’s privacy, dignity and independence respected and promoted?<\/p>\n\n
Well-led:<\/strong> Are there clear responsibilities, roles and systems of accountability to support good governance and management?
\u2022 Are there clear and effective processes for managing risks, issues and performance?
\u2022 Is appropriate and accurate information being effectively processed, challenged and acted on?
\u2022 Are there robust systems and processes for learning, continuous improvement and innovation?<\/p>\n\n
\u00a0<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"
Information Security Policy Policy Name Module: Information SecurityModule:\u00a0 Human Resources Statement of purpose The security of personal data is a top priority for Silomarg Ltd. We are committed to safeguarding the confidentiality, integrity, and availability of all personal data we hold, particularly data relating to the health, care, and well-being of our service users. This […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-26430","page","type-page","status-publish","hentry","entry"],"yoast_head":"\nInformation Security - Silomarg Ltd<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/silomarg.co.uk\/index.php\/information-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Information Security - Silomarg Ltd\" \/>\n<meta property=\"og:description\" content=\"Information Security Policy Policy Name Module: Information SecurityModule:\u00a0 Human Resources Statement of purpose The security of personal data is a top priority for Silomarg Ltd. We are committed to safeguarding the confidentiality, integrity, and availability of all personal data we hold, particularly data relating to the health, care, and well-being of our service users. This […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/silomarg.co.uk\/index.php\/information-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Silomarg Ltd\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-02T10:08:19+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/index.php\\\/information-security\\\/\",\"url\":\"https:\\\/\\\/silomarg.co.uk\\\/index.php\\\/information-security\\\/\",\"name\":\"Information Security - Silomarg Ltd\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/#website\"},\"datePublished\":\"2026-08-02T09:54:19+00:00\",\"dateModified\":\"2026-08-02T10:08:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/index.php\\\/information-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/silomarg.co.uk\\\/index.php\\\/information-security\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/index.php\\\/information-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/silomarg.co.uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Information Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/#website\",\"url\":\"https:\\\/\\\/silomarg.co.uk\\\/\",\"name\":\"Silomarg Ltd\",\"description\":\"Pledging to deliver excellence\",\"publisher\":{\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/silomarg.co.uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/#organization\",\"name\":\"Silomarg Ltd\",\"url\":\"https:\\\/\\\/silomarg.co.uk\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/silomarg.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/cropped-IMG-20230913-WA0000-removebg.png\",\"contentUrl\":\"https:\\\/\\\/silomarg.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/cropped-IMG-20230913-WA0000-removebg.png\",\"width\":749,\"height\":360,\"caption\":\"Silomarg Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/silomarg.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Information Security - Silomarg Ltd","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/silomarg.co.uk\/index.php\/information-security\/","og_locale":"en_US","og_type":"article","og_title":"Information Security - Silomarg Ltd","og_description":"Information Security Policy Policy Name Module: Information SecurityModule:\u00a0 Human Resources Statement of purpose The security of personal data is a top priority for Silomarg Ltd. We are committed to safeguarding the confidentiality, integrity, and availability of all personal data we hold, particularly data relating to the health, care, and well-being of our service users. This […]","og_url":"https:\/\/silomarg.co.uk\/index.php\/information-security\/","og_site_name":"Silomarg Ltd","article_modified_time":"2026-08-02T10:08:19+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/silomarg.co.uk\/index.php\/information-security\/","url":"https:\/\/silomarg.co.uk\/index.php\/information-security\/","name":"Information Security - Silomarg Ltd","isPartOf":{"@id":"https:\/\/silomarg.co.uk\/#website"},"datePublished":"2026-08-02T09:54:19+00:00","dateModified":"2026-08-02T10:08:19+00:00","breadcrumb":{"@id":"https:\/\/silomarg.co.uk\/index.php\/information-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/silomarg.co.uk\/index.php\/information-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/silomarg.co.uk\/index.php\/information-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/silomarg.co.uk\/"},{"@type":"ListItem","position":2,"name":"Information Security"}]},{"@type":"WebSite","@id":"https:\/\/silomarg.co.uk\/#website","url":"https:\/\/silomarg.co.uk\/","name":"Silomarg Ltd","description":"Pledging to deliver excellence","publisher":{"@id":"https:\/\/silomarg.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/silomarg.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/silomarg.co.uk\/#organization","name":"Silomarg Ltd","url":"https:\/\/silomarg.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/silomarg.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/silomarg.co.uk\/wp-content\/uploads\/2020\/08\/cropped-IMG-20230913-WA0000-removebg.png","contentUrl":"https:\/\/silomarg.co.uk\/wp-content\/uploads\/2020\/08\/cropped-IMG-20230913-WA0000-removebg.png","width":749,"height":360,"caption":"Silomarg Ltd"},"image":{"@id":"https:\/\/silomarg.co.uk\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/26430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=26430"}],"version-history":[{"count":10,"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/26430\/revisions"}],"predecessor-version":[{"id":26441,"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/26430\/revisions\/26441"}],"wp:attachment":[{"href":"https:\/\/silomarg.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=26430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}