HMPPS Information Management Policy Framework
Summary
The Ministry of Justice and HM Prison and Probation Service published the HMPPS Information Management Policy Framework, establishing principles and responsibilities for managing HMPPS information. The policy applies to all HMPPS staff, contractors, agency staff, and third-party suppliers who handle HMPPS information. It outlines legal obligations including the Freedom of Information Act 2000, Environmental Information Regulations 2004, Data Protection Act 2018, UK General Data Protection Regulations, and Public Records Act 1958.
What changed
The HMPPS Information Management Policy Framework sets out the information management principles and responsibilities for all HMPPS personnel and third parties handling HMPPS information. The policy establishes compliance obligations under multiple data protection frameworks including FOIA, EIR, UK GDPR, DPA 2018, and the Public Records Act 1958.\n\nAffected parties including Local Information Managers, Regional Information Security and Assurance Leads, and Heads of Business Assurance must understand and implement the mandatory actions specified. Senior leadership must ensure all staff handling HMPPS information are trained on this policy. The policy should be read alongside the HMPPS Records Management handbook, Records Retention and Disposition Schedule, and Government Security Classifications policy.
What to do next
- All HMPPS staff should read this policy
- Local Information Managers, RISALs and HoBAs should familiarise themselves with mandatory actions
- Governors and Directors must ensure staff understand the policy and its mandatory requirements
Archived snapshot
Apr 15, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Guidance
HMPPS information management policy framework
Information management responsibilities of those who manage HMPPS information.
From: Ministry of Justice and HM Prison and Probation Service Published 15 April 2026 Get emails about this page
Applies to England and Wales
Documents
HMPPS information management policy framework
PDF, 390 KB, 11 pages
Details
This policy sets out HMPPS’s information management principles and our peoples’ responsibilities and is one of the policies for which the Departmental Records Officer (DRO) is responsible.
It should be read in conjunction with HMPPS Records Management handbook and the Records, Retention and Disposition Schedule (RRDS). It should also be read in conjunction with the Government Security Classifications policy. The information risk policy and the Government Security Classifications policy can be found at Government Security Classifications - GOV.UK. This policy applies to all staff employed by the HMPPS, to contractors and agency staff, and third-party suppliers who manage information on behalf of HMPPS.
It also ensures we meet our legal obligations with respect to managing information and data including the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR), the Data Protection Act 2018, the UK General Data Protection Regulations (DPA) and the Public Records Act 1958. Section 46 of the FOIA, the Code provides guidance ‘to all relevant authorities as to the practice which they should follow in connection with the keeping, management and destruction of their records.’
This policy should be read by all staff, particularly those responsible for handling and managing HMPPS information such as Local Information Managers (LIM), Regional Information Security and Assurance Leads (RISALs) and Head of Business Assurance (HoBA).
Governors, Directors and Deputy Directors of Probation and Heads of Group must ensure that all staff, particularly those responsible for handling and managing HMPPS information LIMs, RISALs and HoBA are familiar with the content of this policy and understand the mandatory actions set out.
Updates to this page
Published 15 April 2026
Sign up for emails or print this page
Get emails about this page Print this page
Related content
Named provisions
Related changes
Get daily alerts for UK Ministry of Justice
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from MoJ.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when UK Ministry of Justice publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.