By email 
xxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxxxxx.xxx 
 
Our ref: 05/04/23/JS/014 
 
9 May 2023 
Dear Clare Craig, 
 
Re:  Internal review of Case ref: 02/02/23/IF/1303 
 
I refer to your email of 5 April 2023 which is being treated as a request for an internal 
review of case reference 1303, in relation to your request for information under the 
Freedom of Information Act 2000 (the Act). 
 
Your Request Case ref: 02/02/23/IF/1303 
 
The UK Health Security Agency (UKHSA) received your information request on 2 
February 2023. Under the Act, UKHSA had until the 2 March 2023 to respond to 
your request. 
 
Response Case ref: 02/02/23/IF/1303 
 
UKHSA sent you its response on 28 February 2023 and correctly confirmed it did 
hold the information you requested. 
 
Internal review decision 
 
UKHSA has now conducted the internal review and concludes that UKHSA sent you 
its response to your request for information within the statutory deadline.  
 
UKHSA correctly confirmed it did hold the information you requested.  
 
However, UKHSA should also have applied Section 40(2) personal data of the Act to 
the information that fell within the scope of your request. Under Section 40(2) of the 
Act, information is exempt from disclosure if it constitutes the personal data of a third 
party and its disclosure under the Act would breach any of the data protection 
principles of the Data Protection Act 2018. UKHSA would like to apologise for any 
inconvenience caused as a result of this omission. 
 
Please note that you have the right to an independent review by the Information 
Commissioner’s Office if a query cannot be resolved through the UKHSA internal 
review procedure.  
1 
 

---

The Information Commissioner’s Office can be contacted by calling the ICO’s 
helpline on 0303 123 1113, visiting the ICO’s website at www.ico.org.uk or writing to 
the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. 
 
Yours sincerely,  
Information Rights Team 
 
2 

---