Information governance is to do with the way organisations process or handle information. It covers personal information, i.e. that relate to service users and employees, and corporate information, e.g. financial and accounting records.
Gaddum have a framework which sets out the procedures, responsibilities, accountability and sanctions that have been put in place within the charity to safeguard the movement of personal data.