The Guardian is responsible for the establishment of procedures governing access to, and the use of, person-identifiable information within the organisation, and, where local flexibilities exist, the transfer of such information from the organisation to other bodies. In agreeing local procedures and protocols the Guardian also ensures that consistency with any relevant central requirements and guidance.

The Guardian understands and takes account of the principles developed in the Caldicott Report, the codes of conduct provided by professional bodies, and guidance on the Protection and Use of Patient information and on IM&T security disseminated by the Department of Health.

Confidentiality "health-checks" are carried out annually and a report prepared for the Trust Board. This is also monitored externally by the Strategic Health Authority.