- 1.3.08 Please select 'Yes Standard' if the Clinical Lead has a standard NHS employee contract or 'Yes, honorary' if they have an honorary NHS contract, or 'None' if they do not have an NHS contract.
- 1.3.09 Please state which HSC-PBPP-approved Information Governance (IG) training course that you have completed within the last three years. A list of accepted training courses is included in Table 4 of Appendix A. Please provide the name of the course/s most recently undertaken (e.g. 'MRC Research, GDPR and Confidentiality - what you really need to know - online module'), and the date you completed the training. The eDRIS coordinator will ask to see the certificates as evidence of IG training. The HSC-PBPP requires IG training to be renewed every 3 years.

#### 1.4 Information/Data Custodian

The information or data custodian is the person with responsibility for safeguarding the confidentiality of data throughout the proposed work and should have training in Information Governance. An information custodian is a senior colleague with a key role in any proposal and is always required to be named in an application. If this is you (the Applicant) or the Clinical Lead or Academic Supervisor, then please state this in question 1.4.01 (e.g. for example 'same as Applicant', 'same as Clinical Lead or Academic Supervisor ' ) and do not complete the remaining questions in section 1.4. Please note, someone also completing an academic qualification cannot be the Information Custodian.

- 1.4.01 Please provide the full name of the information/data custodian.
- 1.4.02 Please provide the title (for example Mr, Mrs, Ms, Dr, Professor) of the information/data custodian.

1.4.03 Please provide the position of the information/data custodian: this will be their current professional role or roles relevant to your application (for example 'Medical Director, NHS Grampian) . 1.4.04 Please give the full name of the organisation which the information/data custodian represents. This should include a parent organisation, and sub-division or department if appropriate (for example 'NHS Tayside, Medical Directorate', 'University of Edinburgh, Department of Informatics', 'Scottish Government, Director General of Health and Social Care').

- 1.4.05 Please provide the work address where the information/data custodian can be contacted, including postcode.
- 1.4.06 Please provide the work email address of the information/data custodian. This should be an email address associated with their organisation or institution, and not a personal email address (hotmail or gmail).
- 1.4.07 Please provide the professional registration number of the Academic Supervisor, if applicable: please indicate which type of professional registration (e.g. General Medical Council (GMC) 1234567, General Dental Council (GDC) 12345).
- 1.4.08 Please select 'Yes Standard' if the information custodian you have a standard NHS employee contract, or 'Yes, honorary' if they have an honorary NHS contract, or 'None' if they do not have an NHS contract.
- 1.4.09 Please state which HSC-PBPP-approved Information Governance (IG) training course that the information custodian has completed within the last three years. A list of accepted training courses is included in Table 4 of Appendix A. Please provide the name of the course/s most recently undertaken (e.g. 'MRC Research, GDPR and Confidentiality - what you really need to know - online module'), and the date you completed the training. The eDRIS coordinator will ask to see the certificates as evidence of IG training. The HSC-PBPP requires IG training to be renewed every 3 years.

#### 1.5 Others with access to identifiable or potentially identifiable data, including pseudonymised data