Department of Health and Social Care
Governance leadership for the NHS COVID-19 contact tracing application
Strongest proof
Led the Legal & Information Governance workstream · programme-managed the Probity Cell
- Sector
- Healthcare / NHS · Public Sector
- Capability
- Information Governance · Data Privacy & DPO · NHS & HealthTech
- Geography
- United Kingdom
- Engagement model
- Strategic & programme advisory
- Period
- COVID-19 response programme
- Evidence
- Named client · Public evidence
At a glance
- Who
- Department of Health and Social Care · Healthcare / NHS · Public Sector
- Why it mattered
- Embedded governance leadership within a nationally critical digital-health programme developed under exceptional time pressure.
- IG-Smart's role
- Legal & IG workstream leadership · Probity Cell programme management
01The exposure
During the COVID-19 public-health emergency, the Department of Health and Social Care required the rapid development of a nationally significant digital contact-tracing application. IG-Smart was commissioned to provide senior governance leadership within the programme.
The programme had to reconcile speed of delivery with privacy, security, accountability and public trust, while operating across multiple government, health, technical and scientific stakeholders. Governance could not be treated as a final-stage compliance exercise.
02The mandate
Leadership of the legal and Information Governance workstream, and programme management of the Probity Cell, so that governance could keep pace with delivery.
Commissioned scope
- Legal and Information Governance workstream leadership
- Governance advice throughout development
- Probity Cell programme management
- Coordination with government, NHS, cyber-security and scientific stakeholders
03Environment
Organisation context
Describes the client organisation — not the size of IG-Smart's work.
- National COVID-19 contact tracing application programme
Scope boundary
- This case study deliberately provides only a high-level public summary. Internal programme governance, specific legal advice, data flows, technical architecture, risk decisions, assurance records, Probity Cell activity and programme documentation are not published.
04IG-Smart's approach
- 01
Legal & Information Governance leadership
Led the programme's legal and Information Governance workstream, helping ensure relevant legal, privacy and Information Governance issues were identified, considered and appropriately evidenced as the programme evolved.
- 02
Probity Cell programme management
Provided the programme-management structure for coordination, decision tracking, governance rhythm, escalation, evidence management and accountable decision-making. Senior programme-management capability, including PRINCE2 and MSP experience, supported this work.
- 03
Multi-agency coordination
Worked with stakeholders including the Department of Health and Social Care, Cabinet Office, NHSX, the National Cyber Security Centre and scientific-advisory representation to bring legal, Information Governance, security, operational and programme requirements into a coherent governance process.
- 04
Evidence-led governance
Supported clearly articulated issues, documented decisions, appropriate ownership, supporting evidence, structured escalation and traceability of governance activity.
Engagement phases: Build · Manage · Assure
05Engagement scale
What IG-Smart's work covered
- Legal & IG workstream leadership
- Probity Cell programme management
- Multi-agency coordination
06What we delivered
- Legal & Information Governance workstream leadership
- Probity Cell programme management
- Cross-agency governance coordination
- Structured, documented and traceable governance decision-making
- Privacy and data-protection input across the programme lifecycle
07Outcome
Professional assessment
Helped establish and maintain governance structures capable of supporting decision-making in an unusually fast-moving and high-consequence environment.
08What this demonstrates
Relevant to organisations in high-consequence environments that need governance practitioners able to work inside complex programmes and keep decisions defensible while delivery continues.
09What buyers can verify
Public
- Named client
- Engagement scope
- Engagement period stated
- Deliverable types described
Further evidence can be discussed subject to confidentiality and client permissions.
Related services
Related evidence
Public Sector, Information Governance · Data Privacy & DPO
NHS England
National data-privacy and information-governance advisory for NHS England
A national health body needed privacy embedded in digital transformation, new care models and national publications.
Read the case studyHealthcare / NHS, Information Governance · NHS & HealthTech
South West London Better Care Fund
An information-governance framework for integrated health and social care across South West London
Health organisations and local authorities across South West London needed a common, lawful basis for sharing care records.
Read the case study
Facing a comparable requirement?
This case reference is passed to the form so you don't need to re-enter it.
Submit a Requirement