HSE Public Involvement, Culture and Risk Management is made up of a number of teams
They include:
- Patient and Service User Engagement
- Data Protection Office
- Central Compliance Office
- National Office for Protected Disclosures
- Enterprise Risk Management
- Organisational Culture
These teams report to National Director Joe Ryan
Contact details
Joe Ryan (National Director)
Room 2.43
Dr Steeven's Hospital
Dublin 8
Phone: 01 635 2433
Executive officer: cultureandrisk@hse.ie
General Manager: ann.sheehan1@hse.ie
Patient and Service User Engagement
Patient partnership is a priority for the HSE. It ensures patients' voices have a real and meaningful impact. Their experiences influence the design, delivery and evaluation of health services.
The Patient and Service User Experience service area provides guidance on working in partnership with patients.
The team aims to deliver person-centred services that:
Data protection Office
Data Protection safeguards the privacy rights of individuals in relation to the processing of personal data. You supply information about yourself to many organisations, including the HSE, in order to avail of services or satisfy obligations. For the purpose of Data Protection, such organisations or individuals who control the contents and use of personal data are known as Data Controllers.
The HSE as a Data Controller must adhere to the principles of data protection which are set out in the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988-2018.
The HSE must be able to demonstrate compliance with the above principles and respond to requests by individuals seeking to exercise their data protection rights (for example the right of access).
Central Compliance Function
In 2022, a KPMG advisory report looked at how the organisation’s second Line of Defence was working. It recommended setting up a Central Compliance Function.
This new function is still in its early stages, with its structure and staffing being finalised.
Once set up, it will:
- lead the development and rollout of the HSE’s Compliance Framework
- create centralised compliance reports for the Senior Leadership Team and the Audit and Risk Committee
- develop and maintain a Compliance Obligations Register
- set minimum compliance standards for teams in the first Line of Defence
- build a compliance network across the organisation
- develop the HSE’s compliance risk appetite statement
The Compliance Unit supports the implementation of the HSE Governance Framework as it applies to section 38 and section 39 providers who deliver services on behalf of the HSE.
Find more information on compliance requirements within the HSE
National Office for Protected Disclosures
Since 2009, the health sector has had arrangements in place for dealing with Protected Disclosures, often called whistleblowing. These arrangements are based on the Health Act 2004 (amended by the Health Act 2007).
The Protected Disclosures Act 2014, updated by the Protected Disclosures (Amendment) Act 2022, applies to both public and private sectors. The updated legislation came into effect on 1 January, 2023.
The National Office for Protected Disclosures aims to:
- set policy in this area
- manage the receipt of all disclosures
- perform the initial assessment of content
- determine who is best placed to deal with a disclosure
- complete the HSE Annual Report on Protected Disclosures
- ensure all other relevant obligations under the Act are complied with
Enterprise Risk Management (ERM)
The ERM unit sets out to fulfil the functions of the Chief Risk Officer.
This includes:
- overseeing the implementation of the national ERM Policy and Procedures
- maintaining the HSE’s Corporate Risk Register
- delivering risk management training programmes that build capacity across the HSE
Organisational Culture
The HSE Organisational Culture Group is creating a new approach to support positive cultural change.
This includes:
- building on past successes and adopting new ideas to meet the organisation’s changing needs
- giving all HSE regions the tools and resources for a consistent, values-led approach
- promoting compassionate behaviour and values so every region can help deliver high-quality, efficient, person-centred care
