View or update registers
Access or update the Caldicott Guardian, Senior Information Risk Owner and Information Asset Owner registers.
Register information is available in the Data Search and Export tool 24 hours after it has been being updated by the ODS.
Caldicott Guardian register
A Caldicott Guardian is a senior person responsible for protecting the confidentiality of people's health and care information and making sure it is used properly.
All NHS organisations and local authorities providing social services must have a Caldicott Guardian.
ODS do not hold information for Caldicott Guardians in Scotland, Isle of Man or Channel Islands. These are maintained by separate organisations.
Register your Caldicott Guardian
To register or update your Caldicott Guardian details, you will need to:
- Log into NHS National IT Customer Support Portal.
- Select 'Submit a Case'.
- From the categories listed on the left-hand side of the screen, select 'Data Services, Collections & Data sets'.
- Select the subcategory ‘CG, IAO, SIRO Registers'.
- Select the ‘Caldicott Guardian (GG) – Update Register Request’ form.
New portal users will be prompted to create an account.
Information Asset Owner register
The Information Asset Owner (IAO) will be a senior member of staff who is the nominated owner for one or more identified information assets of the organisation.
IAOs will support the organisation's SIRO in their overall information risk management function as defined in the organisation's policy.
The IAO nomination form must be sent by the registered SIRO from the SIRO's email account. There is no limit to the number of IAO's a SIRO can nominate within their organisation.
ODS do not hold information for IAOs in Scotland, Isle of Man or Channel Islands. These are maintained by separate organisations.
Nominate your IAO
To nominate your Information Asset Owner (IAO) or update the register, you will need to:
- Log into NHS National IT Customer Support Portal.
- Select 'Submit a Case'.
- From the categories listed on the left-hand side of the screen, select 'Data Services, Collections & Data sets'.
- Select the subcategory ‘CG, IAO, SIRO Registers'.
- Select the ‘Information Asset Owner (IAO) – Update Register Request’ form.
New portal users will be prompted to create an account.
Senior Information Risk Owner register
A Senior Information Risk Owner (SIRO) is an executive director or member of the senior management board of an organisation with overall responsibility for an organisation's information risk policy.
The SIRO is accountable and responsible for information risk across the organisation. They ensure that everyone is aware of their personal responsibility to exercise good judgement, and to safeguard and share information appropriately.
A deputy SIRO can only be nominated by the registered SIRO. SIROs and deputy SIROs requested at the same time can be set up together, if requested by the correct authorised signatory.
ODS do not hold information for SIROs in Scotland, Isle of Man or Channel Islands. These are maintained by separate organisations.
Register your SIRO
To register or update your Senior Information Asset Owner (SIRO) details, you will need to:
- Log into NHS National IT Customer Support Portal.
- Select 'Submit a Case'.
- From the categories listed on the left-hand side of the screen, select 'Data Services, Collections & Data sets'.
- Select the subcategory ‘CG, IAO, SIRO Registers'.
- Select the ‘Senior Information Asset Owner (SIRO) – Update Register Request’ form.
New portal users will be prompted to create an account.
Last edited: 7 May 2026 5:07 pm