Social Care Data and Cyber Security Discovery Programme

The Local Government Association, in collaboration with the Care Provider Alliance and Department of Health and Social Care has been awarded funding to undertake a discovery programme to assist the adult social care provider sector in managing business risks associated with data and cyber security.


The funding has been allocated from the National Cyber Security Programme which works with cross-government partners to improve cyber resilience across UK public services.

Increasingly, the sector is adopting technology to support care delivery and this is improving digital connectivity both within social care providers as well as information sharing with other organisations such as local authorities, NHS and other partners.

Legislative changes, such as the introduction of GDPR, and new data security and protection requirements will affect how organisations, including care providers, manage people’s data and information.

The funding is being used to commission two pieces of work in 2018/19 which will help us understand data and cyber security risks across the sector as well as how providers can be supported in the future.

1. Discovery with adult social care providers

The LGA, Care Provider Alliance and Department of Health and Social Care are working collaboratively with three local authority areas and the Institute of Public Care – Oxford Brookes University to an understanding of common and current data and cyber security risks faced by the adult social care provider sector.

North Yorkshire County Council, Central Bedfordshire Council and the Royal Borough of Greenwich have been selected to take part in the programme and on-site practical support will be delivered to a range of care providers operating in those areas.

2. Discovery with telecare providers

The LGA, Care Provider Alliance and Department of Health and Social Care are working with the Telecare Services Association to help build an understanding of the data and cyber security risks associated with the delivery of technology-enabled care.

Programme summary

The discovery projects will for the first time develop an understanding of the:

  • data/cyber risks faced by adult social care/telecare providers 
  • impact on business continuity if an incident did occur
  • contingency arrangements in place to respond if this is needed.

Both pieces of work will provide a series of recommendations on how the sector can be supported in the future with a final programme report due in spring 2019/20.

Elected Mayor Kate Allsopp, Digital Lead on the Local Government Association’s Community Wellbeing Board, said:

“Both councils and adult social care providers take seriously their role in keeping sensitive information safe and secure. With increasing digitisation across adult social care there is a constant need to review and strengthen data and cyber security arrangements to ensure that the right protections are in place.

“This is also important given the important sharing of information that takes place between different health and social care organisations such as GPs, councils, care homes and home care organisations. This helps to ensure that the care and support they deliver is coordinated and person-focused.

“This discovery programme taking place in three local authority regions will assist individual councils and care providers, help share good practice and identify areas where there may be further opportunities to ensure the safeguarding of personal data is as strong as possible.”

Find out more about how changes in information governance legislation affects care providers.