Information Governance Training & Awareness Service

All members of UCL who manage highly confidential research information, including principal and chief investigators, staff, students, senior managers, and even those who just supervise people who directly handle confidential information, and support staff who do not have direct access to data, are expected to undertake annual training on handling highly confidential information.

Anyone with an '.ac.uk' or NHS email address can self-register for NHS Digital’s Data Security Awareness (NHSD) course provided by e-Learning for Health. When asked, you can register your role as a “Further Education and Higher Education Researcher (Education)” which should provide you access to the course. The course covers data security awareness, the law, threats to data security, breaches and incidents, and the General Data Protection Regulation. Completion of this course will be sufficient evidence of basic information governance training to handle highly confidential information under the Information Governance Training Policy.

Courses that do not cover the depth and breadth of topics required for Information Governance are:

Good Clinical Practice training
UCL's GDPR training
Information Security training
ONS researcher accreditation

Sharing evidence of your training

If you have completed the NHS Digital Data Security Awareness course through e-Learning for Health then a certificate should be available under ‘My Activity’ and 'Certificates' on the e-LfH portal.

If you are using the ARC TRE, your certificate will also be requested during the Approved Researcher onboarding process.

If you are using the Data Safe Haven, upload a certificate or screenshot to the IG Advisory Service with your name and the date your training was undertaken (UCL member's login required).

As stated above you can register for NHS Digital's Data Security Awareness (NHSD) course by clicking here.

If training has been completed by a user who is external to UCL and you need to notify us of this please upload a certificate or a screenshot with the name and date the training was completed visible (UCL member's login required).

Exceptions to these requirements:

If you have undertaken NHS information governance training in the last twelve months and can show a certificate or screenshot of this with your name and the date visible, you can upload it or someone with a UCL account can upload it for you. We will only accept emailed certificates from the user themselves, and we do not accept ones emailed on behalf of someone else. The email address for certificates which are the sender's own evidence (not someone else's) is ig-training@ucl.ac.uk

Please note: IG training is separate to, and not interchangeable with, UCL's mandatory training:
https://www.ucl.ac.uk/human-resources/learning-development/mandatory-training

Any queries in relation to undertaking information governance training should be forwarded to ig-training@ucl.ac.uk.