Information governance & data security
Protecting sensitive research data through robust governance and compliance.
We embed information governance and data protection into every stage of our digital health research projects. Our work is guided by GDPR and the UK Data Protection Act, ensuring data is collected, stored, and shared securely and responsibly. We aim to enable ethical, compliant research that protects participants while supporting scientific rigour and reproducibility.
What we do
- Advise research teams on data protection and governance requirements from project setup through to delivery.
- Develop secure data management workflows tailored to study-specific needs.
- Ensure systems are built and hosted in line with university and/or NHS information security standards.
- Collaborate with IT, governance, and ethics teams to ensure compliance throughout the research lifecycle.
Why it matters
Digital health research often involves sensitive personal and clinical data. Adhering to robust information governance frameworks not only protects participants but also strengthens research integrity and trust.
The secure data lifecycle
This diagram illustrates our secure data lifecycle — from collection to deletion — ensuring every stage of a research project meets strict governance, ethical, and regulatory standards.
Outcomes
- Compliance with GDPR, the UK Data Protection Act, and institutional data policies.
- Transparent, auditable data handling practices.
- Increased confidence among participants, clinicians, and research partners.
- A secure foundation for ethical and sustainable digital health innovation.
In action
The AFFIRMO study involves sensitive participant health data collected via digital tools. Our team supported the research by ensuring all data capture and transfer processes complied with GDPR and institutional IG policies, helping secure ethical approval and maintain participant trust.
