Hospital Episode Statistics (HES) Privacy Impact Assessment / Data Protection Impact Assessment
Phil Booth made this Freedom of Information request to NHS Digital This request has been closed to new correspondence. Contact us if you think it should be reopened.
Dear NHS Digital,
On attempting to find the current Privacy Impact Assessment (PIA) for the Hospital Episode Statistics (HES), I was unable to locate anything on the NHS Digital website. There is no reference or link on the data service description page, nor on the HES entry in the GDPR register, and no relevant result appears when using the site search function.
While a copy of the PIA done in 2014, and published in 2016, appears at:
http://www.statsusernet.org.uk/viewdocum...
this is clearly out of date, as well as not being hosted on an NHS website.
Would you please therefore:
1) Provide a copy of any Data Protection Impact Assessment (DPIA) and/or Privacy Impact Assessment undertaken for the Hospital Episode Statistics reflecting the changes to law in the Data Protection Act 2018.
2) Confirm what is the most recent DPIA / PIA for HES, and - if it is not the one available on the StatsUserNet website (link above) - provide a copy of that as well.
Yours faithfully,
Phil Booth
Ref: NIC-268665-K5M5D
Dear Phil Booth,
I am writing to acknowledge that your request for information was received
by NHS Digital on 01/02/2019 and is currently being considered.
If NHS Digital is able to provide you with the information you have
requested, then under the Freedom of Information (FOI) Act you are
entitled to receive it promptly and in any event no later than the 20th
working day following the date of receipt. However, we may need to contact
you to clarify your request. If this is required we aim to do this
promptly but no later than 7 days after receiving your initial request for
information.
May I take this opportunity to explain the FOI Act in more detail? The Act
provides a 'General right of access to information held by public
authorities'. However, it also defines a number of exemptions which may
prevent the release of some or all of the information you have requested.
Therefore, NHS Digital will assess your information request in light of
any relevant exemptions.
If exemptions do apply, then NHS Digital may decide not to release all, or
part, of the information you have requested. I shall inform you if this is
the case, and advise you of your rights of appeal.
If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken as to whether to
release the information to you.
The response to your request will be sent to you by email, however if you
require your response in any other format, please contact us to discuss a
suitable format.
NHS Digital will not normally charge a fee to provide you with the
information you have requested, unless the cost of dealing with your
request is more than £450 as outlined in Section 12 of the FOI Act and
Section 3 of the The FOI and Data Protection (Appropriate Limit and Fees)
Regulations 2004. If it appears likely that your request will cost more,
then NHS Digital is able to refuse to supply the information. As per our
obligations under Section 16 of the FOI Act, every effort will be made to
provide you with details of how you may be able to reframe your request in
order for us to complete the required work within the (£450 / 18 person
hours) cost limit.
If you have any queries or should you wish to make a complaint about the
manner in which your request is being processed then please do not
hesitate to contact us at [1][NHS Digital request email] in the first
instance. Any complaints will be investigated in accordance with NHS
Digital's complaints procedure.
Further information about your rights under the Freedom of Information
Act, is available from the Information Commissioner's Office, Wilmslow,
Cheshire and on the NHS Digital website.
Kind Regards,
Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk
0300 303 5678
[3][NHS Digital request email]
1 Trevelyan Square | Boar Lane | Leeds | LS1 6AE
You can find out more about our service, including our response times and
customer charter on the NHS Digital website:
[4]https://digital.nhs.uk/about-nhs-digital...
[5]Privacy and cookies
NHS Digital Customer Service Contact Centre in Leeds, has been awarded
Customer Service Excellence Standard Certification, In accordance with the
requirements of the Cabinet Offices Customer Service Excellence Standard
Ref: NIC-268665-K5M5D
Dear Phil Booth,
Many thanks for your recent request to NHS Digital.
We have now received a reply to this from our colleagues in the
Information Governance team.
Please see the attached file(s).
Kind Regards,
Contact Centre Team
NHS Digital
[1]www.digital.nhs.uk
0300 303 5678
[2][NHS Digital request email]
1 Trevelyan Square | Boar Lane | Leeds | LS1 6AE
HSCIC now operate under the new trading name of NHS Digital – clarifying
our role as the national information and technology partner for the health
and care system.
[3]Privacy and cookies
NHS Digital Customer Service Contact Centre in Leeds, has been awarded
Customer Service Excellence Standard Certification, In accordance with the
requirements of the Cabinet Offices Customer Service Excellence Standard
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now