
Off The Record (Twickenham)
A proportionate Information Governance framework for a young people's charity
Strongest proof
Proportionate IG framework · NHS Digital Toolkit kite-mark reported by trustee
- Sector
- Charity / Social Enterprise · Healthcare / NHS
- Capability
- Information Governance · Data Privacy & DPO
- Geography
- Twickenham, United Kingdom
- Engagement model
- Defined-scope assurance
- Evidence
- Named client · Public evidence
At a glance
- Who
- Off The Record (Twickenham) · Charity / Social Enterprise · Healthcare / NHS
- Why it mattered
- A charity supporting young people needed Information Governance that fitted both its size and the essential services it provides.
- IG-Smart's role
- Defined-scope Information Governance framework
01The exposure
Off The Record is a Twickenham charity providing essential services to young people, handling both digital and physical records about its beneficiaries.
Governance designed for a large organisation would be hard for a small charity to sustain, while the sensitivity of its beneficiaries' information required safe and secure handling.
02The mandate
An Information Governance framework proportionate to the charity's size and services, with recommendations the team could implement.
Commissioned scope
- Information Governance framework
- Recommendations for implementation
- Handling of digital and physical beneficiary data
03Environment
Organisation context
Describes the client organisation — not the size of IG-Smart's work.
- Charity providing services to young people
Frameworks in scope
- NHS Information Governance Toolkit (now Data Security and Protection Toolkit)
- UK data protection law
Scope boundary
- Engagement dates and detailed deliverables are not stated.
- The kite-mark is reported by the client; Toolkit status was awarded through the NHS process, not by IG-Smart.
04IG-Smart's approach
- 01
Assess
Reviewed the charity's information handling in the context of its size and services.
- 02
Build
Devised a proportionate Information Governance framework and recommendations.
Engagement phases: Assess · Build
05Engagement scale
What IG-Smart's work covered
- Information Governance framework and recommendations
06What we delivered
- Information Governance framework
- Implementation recommendations
07Outcome
Client-reported result
The charity implemented IG-Smart's recommendations and earned the NHS Digital Toolkit kite-mark.
Client-reported result
The trustee reported good practice embedded in how the team safely and securely manages beneficiaries' digital and physical data.
08Client perspective

“Michael and his team devised for Off The Record an Information Governance framework that is wholly appropriate both to the size of our charity, and to the essential services we provide to young people. We have since implemented their recommendations, which have earned us the NHS Digital Toolkit kite-mark, and simultaneously embedded good practice to how our team safely and securely manages the digital and physical data of our beneficiaries”
09What this demonstrates
Relevant to charities and community organisations that handle sensitive data about the people they support and need NHS Toolkit-ready governance a small team can sustain.
10What buyers can verify
Public
- Named client
- Engagement scope
- Named client quotation
- Deliverable types described
Further evidence can be discussed subject to confidentiality and client permissions.
Related services
Related evidence
Charity / Social Enterprise, Information Governance · Data Privacy & DPO
Brandon Centre
GDPR and Information Governance improvement programme for Brandon Centre
Brandon Centre needed a practical view of its GDPR and Information Governance position and a route from gaps to improvement.
Read the case studyCharity / Social Enterprise, Information Governance · NHS & HealthTech
The Myton Hospices
NHS Information Governance Toolkit compliance in under two months for a hospice charity
A hospice charity faced completing the NHS Information Governance Toolkit for the first time.
Level 2 compliance achieved in under two months; retained annually for advice, support and training.
Read the case study
Facing a comparable requirement?
This case reference is passed to the form so you don't need to re-enter it.
Submit a Requirement