Subject Access Request (SAR). GDPR.

The request was successful.

Dear University Hospitals of Derby and Burton NHS Foundation Trust,

Please provide answers to the following questions relating to data Subject Access Requests (SARs)?

1. How many SARs have been made to your organisation in the last recorded 12 month period?
2. Please provide a breakdown of the specific departments/directorates that these SARs relate to.
3. Is there a central response to SARs or is it devolved to the departments involved?
4. How many staff deal with responses - estimate of Full Time Equivalents needed to provide SAR responses (Alternatively - hours per typical SAR response)?
5. Do you have any software to assist with SAR production (e.g. search over multiple unstructured document files, or automatic redaction of Personally Identifiable Information (PII))?
6. Who has budget responsibility over the costs & resources required to respond to the SARs. Please provide Name: Title: Direct Email: Direct Phone Number:

Yours faithfully,

Jenny Bird

FOI (UNIVERSITY HOSPITALS OF DERBY AND BURTON NHS FOUNDATION TRUST), University Hospitals of Derby and Burton NHS Foundation Trust

Dear Ms Bird

Thank you for your request for information; this is now being processed in accordance with the Freedom of Information Act 2000.

This Trust will make every effort to provide a response within the 20 working days specified by the Act; I have calculated you should receive your response by the above date.

Your reference number relating to this application is stated above. Please ensure you quote this when contacting us.

Kind regards

Jane Haywood
FREEDOM OF INFORMATION OFFICER
[email address]

Consent/Disclaimer when communicating via email/text with patients

Nhs.net is an approved secure encrypted email system for use by nhs staff when exchanging patient data.

When using this email system to communicate with other non encrypted email systems, such as that of a patient, or for testing, the transmission cannot be guaranteed 100% secure or error free. Information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Derby Hospitals and their employees do not accept liability for any errors or omissions in the contents of messages, which arise as result of email transmission.

If you wish to communicate via email or receive text messages about your care you must accept the risks associated with this.
________________________________________
From: Jenny Bird <[FOI #687805 email]>
Sent: 26 August 2020 16:53
To: FOI (UNIVERSITY HOSPITALS OF DERBY AND BURTON NHS FOUNDATION TRUST)
Subject: Freedom of Information request - Subject Access Request (SAR). GDPR.

Dear University Hospitals of Derby and Burton NHS Foundation Trust,

Please provide answers to the following questions relating to data Subject Access Requests (SARs)?

1. How many SARs have been made to your organisation in the last recorded 12 month period?
2. Please provide a breakdown of the specific departments/directorates that these SARs relate to.
3. Is there a central response to SARs or is it devolved to the departments involved?
4. How many staff deal with responses - estimate of Full Time Equivalents needed to provide SAR responses (Alternatively - hours per typical SAR response)?
5. Do you have any software to assist with SAR production (e.g. search over multiple unstructured document files, or automatic redaction of Personally Identifiable Information (PII))?
6. Who has budget responsibility over the costs & resources required to respond to the SARs. Please provide Name: Title: Direct Email: Direct Phone Number:

Yours faithfully,

Jenny Bird

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[FOI #687805 email]

Is [University Hospitals of Derby and Burton NHS Foundation Trust request email] the wrong address for Freedom of Information requests to University Hospitals of Derby and Burton NHS Foundation Trust? If so, please contact us using this form:
https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the latest advice from the ICO:
https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will be delayed.

If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.

show quoted sections

FOI (UNIVERSITY HOSPITALS OF DERBY AND BURTON NHS FOUNDATION TRUST), University Hospitals of Derby and Burton NHS Foundation Trust

1 Attachment

Dear Ms Bird

Further to your enquiry below, please find the Trust's response attached.

Kind regards
Jane Haywood
FREEOM OF INFORMATION OFFICER

Consent/Disclaimer when communicating via email/text with patients

Nhs.net is an approved secure encrypted email system for use by nhs staff when exchanging patient data.

When using this email system to communicate with other non encrypted email systems, such as that of a patient, or for testing, the transmission cannot be guaranteed 100% secure or error free. Information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Derby Hospitals and their employees do not accept liability for any errors or omissions in the contents of messages, which arise as result of email transmission.

If you wish to communicate via email or receive text messages about your care you must accept the risks associated with this.
________________________________________
From: Jenny Bird <[FOI #687805 email]>
Sent: 26 August 2020 16:53
To: FOI (UNIVERSITY HOSPITALS OF DERBY AND BURTON NHS FOUNDATION TRUST)
Subject: Freedom of Information request - Subject Access Request (SAR). GDPR.

Dear University Hospitals of Derby and Burton NHS Foundation Trust,

Please provide answers to the following questions relating to data Subject Access Requests (SARs)?

1. How many SARs have been made to your organisation in the last recorded 12 month period?
2. Please provide a breakdown of the specific departments/directorates that these SARs relate to.
3. Is there a central response to SARs or is it devolved to the departments involved?
4. How many staff deal with responses - estimate of Full Time Equivalents needed to provide SAR responses (Alternatively - hours per typical SAR response)?
5. Do you have any software to assist with SAR production (e.g. search over multiple unstructured document files, or automatic redaction of Personally Identifiable Information (PII))?
6. Who has budget responsibility over the costs & resources required to respond to the SARs. Please provide Name: Title: Direct Email: Direct Phone Number:

Yours faithfully,

Jenny Bird

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[FOI #687805 email]

Is [University Hospitals of Derby and Burton NHS Foundation Trust request email] the wrong address for Freedom of Information requests to University Hospitals of Derby and Burton NHS Foundation Trust? If so, please contact us using this form:
https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the latest advice from the ICO:
https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will be delayed.

If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.

show quoted sections