

Before you touch the record,
tell me why,
Purpose on the table,
reason in the light.
Not “we might need it,” not “just in case,” Every use justified,
every use has its place.
And if you can do the work without the name,
Don't pull confidential data into the frame.
Need is the threshold,
not convenience or speed,
If you don't need to know it,
you don't need to read.
Minimum necessary, nothing more,
Only what the purpose came here for.
No curious eyes, no wandering through— Need-to-know decides what gets to you.
JUSTIFY THE FLOW!
Know why it moves,
know where it goes.
Minimum data, minimum eyes,
Responsibility doesn't disappear behind APIs.
JUSTIFY THE FLOW!
Protect it, but don't build walls too high— Because sometimes keeping information
locked away Can cause more harm than letting the right information fly.
Everyone touching it carries the weight,
Engineer, clinician, processor, mate.
Policy isn't magic, a checkbox won't defend— Know your responsibility from beginning
to end. Then law draws the boundary,
governance the track, Know what you can process and the basis at
its back. Security, confidentiality,
lawful use— “Useful” by itself is never an excuse.
One: justify the purpose.
Two:
don't use it unless necessary.
Three:
use the minimum
necessary. Four: strictly need-to-know.
Five:
understand your responsibility. Six: understand and comply with the law.
But seven— Seven changes the tone.
Information governance isn't
“NEVER SHARE ANYTHING.”
JUSTIFY THE FLOW!
Right information, right hands,
right time. Protection matters—sharing does too,
When care depends on information getting through.
JUSTIFY THE FLOW! Not open doors,
not data sealed in stone.
Use what is needed,
guard what you hold,
And never confuse “protected” with “never told.”
Purpose.
Necessity.
Minimum.
Need-to-know. Responsibility.
Law.
And when sharing protects the patient— Let it flow