⚓ Module Four
Clinical & Digital Compliance Toolkit
Information governance, data protection, AI, cyber security, and accessible information — all in one place
£699 + VAT
Information governance is the compliance area most independent providers underestimate — and the one that CQC is increasingly focused on. UK GDPR, the Accessible Information Standard, the new NHS Reasonable Adjustment Digital Flag, artificial intelligence in clinical settings, cyber security, data breaches, subject access requests — each one carries its own regulatory obligations, its own deadlines, and its own consequences for getting it wrong.
And they are all connected.
A data breach that is not handled correctly becomes a Duty of Candour issue. An AI tool deployed without governance becomes a patient safety risk. A patient whose communication needs are not met becomes a Responsive finding. The Clinical & Digital Compliance Toolkit brings the complete information governance and digital compliance picture together in one place — 17 documents that cover every obligation, with a framework that makes them work as a coherent system rather than a disconnected collection of policies.
A data breach that is not handled correctly becomes a Duty of Candour issue. An AI tool deployed without governance becomes a patient safety risk. A patient whose communication needs are not met becomes a Responsive finding. The Clinical & Digital Compliance Toolkit brings the complete information governance and digital compliance picture together in one place.
This toolkit is for you if…
✓ You receive any NHS-funded referrals and need to meet the September 2026 RADF deadline
✓ You have deployed — or are considering deploying — AI tools in clinical or administrative settings
✓ Your organisation has never had a formal IG framework reviewed by a governance professional
✓ You have received a data subject access request and are not confident in your process
✓ Your last data protection audit identified gaps that have not been addressed
✓ CQC has raised information governance or records management as a concern
What's included - 17 Documents
📄 Detailed Guide (Word) - How to use the package, including the seniority level on agreement and a guide to the tools.
📊 Clinical Audit Programme and Tracker (Excel) - The evidence your treatments are actively helping patients.
📄 Clinical Governance Framework (Word) - Your go-to guide to everything clinical governance.
🏗️ Information Governance Framework — The anchor document for your entire IG suite — 14 sections covering the 9 UK GDPR principles, your Record of Processing Activities template, DPIA process, data breach log, data subject rights table, and a complete map of all related IG documents.
📊 IG & GDPR Compliance Tracker (Excel) - Tracking UK GDPR principles; lawful basis for processing; data subject rights; data breach management; third-party processor due diligence; the Data Security and Protection Toolkit (DSPT); feeding into a board-level IG report.
📊 Cyber Risk Assessment Tracker (Excel) - Including NHS Cyber Security Framework, DSPT mandatory requirements, and NCSC Cyber Essentials - designed to be completed by the person responsible for digital governance, with outputs presented to the board.
📄 Medicines Management Framework (Word) - Your go-to guide to the governance of medication and prescribing.
📄 Medical Device Alignment Guide (Word) - Your medical device obligations in plain English — what they mean, why they matter, and exactly what you need to do.
📊 IG Maturity Assessment (Excel) - Each maturity level is described in plain language so you can self-assess accurately without needing a specialist to interpret the framework.
📄 Digital Clinical Safety Essentials (Word) - You need to know what the essentials are, understand why they matter, and ensure someone in your organisation is responsible for each one. This guide gives you all three.
🤖 AI in Clinical Governance Guide — Governance obligations for AI tools used in clinical settings — five governance essentials, two compliance checklists, an AI tool register template, and a CQC Q&A for the questions inspectors are starting to ask. Reviewed every six months as the regulatory landscape evolves.
📄 Telemedicine Compliance Checklist (Word) - All your obligations, in one simple format.
🔒 Data Protection Policy (Word) — Your organisation's UK GDPR compliance policy — lawful bases, special category health data, data subject rights, and staff obligations. Written for clinical settings, not generic offices.
💻 Digital & IT Security Policy (Word) - Technical and organisational security measures, access controls, encryption standards, cyber incident response, bring-your-own-device guidance, and software update obligations.
♿ Accessible Information Standard Policy (Word) — Includes the 30 September 2026 NHS Reasonable Adjustment Digital Flag deadline — and what you need to do about it now.
📁 Records Management Policy (Word) — Retention schedule, storage standards, disposal processes, and annual records audit — covering all clinical and administrative record categories.
📋 Subject Access Request Policy (Word) — Complete SAR process, statutory timescales, exemptions, handling of complex and sensitive requests, ICO escalation guidance, and a SAR log template.
CQC link
Information governance compliance is assessed across multiple CQC key questions. Safe — because poor IG can compromise patient safety through information errors. Responsive — because failing to meet the Accessible Information Standard is a direct Responsive finding. Well-led — because the board's oversight of IG obligations, data breaches, and subject access requests is a governance function.
CQC Regulation 17 specifically requires providers to maintain securely and confidentially all records relating to persons employed and people receiving care. Inspectors will ask about your IG framework, your data breach log, your SAR process, and — increasingly — your governance arrangements for AI tools.
All Five Toolkits — Complete Governance Suite
Board Architecture · PSIRF Implementation · CQC Readiness · Clinical & Digital Compliance
£2,885 + VAT
· Save 15% versus purchasing individually ·
The complete governance infrastructure for an independent or private healthcare provider — everything you need to meet CQC Fundamental Standards, implement PSIRF, demonstrate Well-led governance, and manage information and equality obligations.
Harbour Governance toolkits go beyond individual policies.
Each one is a complete, ready-to-deploy framework — the documents, tools, and templates your organisation needs to build robust governance in a specific area, all in one place. Designed by a team of experienced clinical governance professionals.
Built for independent and private healthcare providers.
Immediately usable.
This pack remains downloadable for 24-hours.