URL: /partner/policies/
The IG Policies module provides a central library of your practice's Information Governance policies, with version control, publication dates, and scheduled reviews.
| Category |
Examples |
| Data Protection |
Data Protection Policy, Privacy Notice, Subject Access Request Procedure |
| Data Quality |
Data Quality Policy, Record Keeping Standards |
| Record Keeping |
Records Management Policy, Retention & Disposal Policy |
| Data Security |
Data Security Policy, Encryption Policy, Mobile Device Policy |
| Network Security |
Network Security Policy, Remote Access Policy, Firewall Policy |
| Incident Response |
Incident Response Plan, Breach Reporting Procedure, Business Continuity Plan |
- Navigate to IG Policies
- Click Add Policy
- Complete:
- Name — full policy title
- Category — from the list above
- Version — version number (e.g. 2.1)
- Description — brief summary of scope
- Publication Date — when the policy was approved
- Next Review Date — when the policy must be reviewed
- File — upload the policy document (PDF preferred)
- Requires Acknowledgment — check if staff must sign to confirm they've read it
- Click Save
When a policy requires acknowledgment:
- Staff are prompted to read and confirm
- The system tracks who has/hasn't acknowledged
- This provides evidence for CQC Well-led inspections
- Review policies before their next review date — not on it
- Maintain a version history — keep superseded policies accessible for audit
- Ensure policies are accessible to all staff
- Track acknowledgment rates — low rates may indicate communication issues
- Align policy review dates with your compliance activity schedule