STRUCTURE: The south east London primary care trust cluster’s risk register reveals that the organisation has lost its third “senior information risk owner” since April 2011.

The document said: “There is a risk that successor organisations (the commissioning support unit) will not be set up to deal effectively or efficiently with information governance and information management caused by the levels of resource available and the complexity, pace and lack of clarity around transition leading to a failure to become authorised and embed efficient business processes.”

It listed mitigating factors including a bid for transitional funding and “collaboration with partners in other PCT clusters”.

But said “gaps in control/assurance” included: “Historical issues arising of PCT performance on issue and creation of the cluster, size and timescale of transition, with lack of clarity around legal and process being managed on the fly, competing demands of business as usual, transition and clinical commissioning group authorisation” - plus the loss of a third senior information risk owner in 18 months.