Medical Centre’s DSPT Incident Reports

The request was refused by NHS Digital.

Dear NHS Digital,

I would like to request the following information under the freedom of Information Act 2000.

However, I would first like to say thank you for how transparent and informative you have been.
I am truly grateful for all the past information you have provided to me and you really have been so helpful.

My information request regards 2 medical centres and the number of data breach incidents they have reported to you in the last 12 months using The Data Security and Protection Toolkit.

1) Please can you provide me with the total number of DSPT incident reports you have received from the 9/9/21 to the 9/9/22 by the 2 medical centres below:

West End Medical Centre
98-102 Stockport Rd,
Ashton-under-Lyne
OL7 0LH

Haughton Thornley Medical Centre
Thornley St,
Hyde
SK14 1JY

2) Please can you label what category each DSPT incident report that you received fell under?

For example Please can you provide the information as demonstrated below.

Examples below.

Haughton Thornley Medical Centre
DSPT Incidents Reports: 1
Category: Suspicious Smart Card Activity

West End Medical Centre
DSPT Incident Reports: 2
1) Category: Suspicious Activity
2) Category: Unauthorised Access

Yours faithfully,

David Coats

NHS Digital Enquiries (NHS DIGITAL),

Ref: NIC-679497-J7R2Q 

Dear David Coats,

We are writing to acknowledge that your request for information was
received by NHS Digital on 20/09/22 and is currently being considered.

If NHS Digital is able to provide you with the information you have
requested, then under the Freedom of Information (FOI) Act you are
entitled to receive it promptly and in any event no later than the 20th
working day following the date of receipt. However, we may need to contact
you to clarify your request. If this is required we aim to do this
promptly but no later than 7 days after receiving your initial request for
information.

The FOI Act provides a 'General right of access to information held by
public authorities'. However, it also defines a number of exemptions
which may prevent the release of some or all of the information you have
requested. Therefore, NHS Digital will assess your information request in
light of any relevant exemptions.

If exemptions do apply, then NHS Digital may decide not to release all, or
part, of the information you have requested. I shall inform you if this is
the case, and advise you of your rights of appeal.

If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken as to whether to
release the information to you.

The response to your request will be sent to you by email, however if you
require your response in any other format, please contact us to discuss a
suitable format.

NHS Digital will not normally charge a fee to provide you with the
information you have requested, unless the cost of dealing with your
request is more than £450 as outlined in Section 12 of the FOI Act and
Section 3 of the The FOI and Data Protection (Appropriate Limit and Fees)
Regulations 2004. If it appears likely that your request will cost more,
then NHS Digital is able to refuse to supply the information.  As per our
obligations under Section 16 of the FOI Act, every effort will be made to
provide you with details of how you may be able to reframe your request in
order for us to complete the required work within the (£450 / 18 person
hours) cost limit.

If you have any queries or should you wish to make a complaint about the
manner in which your request is being processed then please do not
hesitate to contact us at [1][NHS Digital request email] in the first
instance. Any complaints will be investigated in accordance with NHS
Digital's complaints procedure.

Further information about your rights under the Freedom of Information
Act, is available from the Information Commissioner's Office, Wilmslow,
Cheshire and on the NHS Digital website.

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678
[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

You can find out more about our service, including our response times and
customer charter on the NHS Digital website:
[4]https://digital.nhs.uk/about-nhs-digital...

[5]Privacy and cookies

 

 

show quoted sections

Dear NHS Digital Enquiries (NHS DIGITAL),

Thank you so much, you have all been amazingly helpful.

Yours sincerely,

David Coats

NHS Digital Enquiries (NHS DIGITAL),

1 Attachment

Ref: NIC-679497-J7R2Q 
 

Dear David Coats,

Many thanks for your recent request to NHS Digital.

We have now received a reply to this from our colleagues in the
Information Governance team.

Please see the attached file(s).

You can share with us your experience of the service you’ve received by
clicking on the following link. 
[1]Customer Satisfaction Survey 

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678

[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

[4]Privacy and cookies

 

 

show quoted sections

Dear NHS Digital,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of NHS Digital's handling of my FOI request 'Medical Centre’s DSPT Incident Reports'.

[ GIVE DETAILS ABOUT YOUR COMPLAINT HERE ]

I am only asking for the total number of incidents reported using the DSPT toolkit. However, if you could please amend my request and simply disclose how many incidents have been reported to NHS Digital by the two surgery’s between the two dates, regardless of the method they were reported.

You may also retract any/all other information related to the DSPT toolkit and any/all personal information from your response.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/m...

Yours faithfully,

David Coats

NHS Digital Enquiries (NHS DIGITAL),

Ref: NIC-681088-F4L0R 

Dear David Coats,

We are writing to acknowledge that your request for information was
received by NHS Digital on 28/09/22 and is currently being considered.

If NHS Digital is able to provide you with the information you have
requested, then under the Freedom of Information (FOI) Act you are
entitled to receive it promptly and in any event no later than the 20th
working day following the date of receipt. However, we may need to contact
you to clarify your request. If this is required we aim to do this
promptly but no later than 7 days after receiving your initial request for
information.

The FOI Act provides a 'General right of access to information held by
public authorities'. However, it also defines a number of exemptions
which may prevent the release of some or all of the information you have
requested. Therefore, NHS Digital will assess your information request in
light of any relevant exemptions.

If exemptions do apply, then NHS Digital may decide not to release all, or
part, of the information you have requested. I shall inform you if this is
the case, and advise you of your rights of appeal.

If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken as to whether to
release the information to you.

The response to your request will be sent to you by email, however if you
require your response in any other format, please contact us to discuss a
suitable format.

NHS Digital will not normally charge a fee to provide you with the
information you have requested, unless the cost of dealing with your
request is more than £450 as outlined in Section 12 of the FOI Act and
Section 3 of the The FOI and Data Protection (Appropriate Limit and Fees)
Regulations 2004. If it appears likely that your request will cost more,
then NHS Digital is able to refuse to supply the information.  As per our
obligations under Section 16 of the FOI Act, every effort will be made to
provide you with details of how you may be able to reframe your request in
order for us to complete the required work within the (£450 / 18 person
hours) cost limit.

If you have any queries or should you wish to make a complaint about the
manner in which your request is being processed then please do not
hesitate to contact us at [1][NHS Digital request email] in the first
instance. Any complaints will be investigated in accordance with NHS
Digital's complaints procedure.

Further information about your rights under the Freedom of Information
Act, is available from the Information Commissioner's Office, Wilmslow,
Cheshire and on the NHS Digital website.

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678
[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

You can find out more about our service, including our response times and
customer charter on the NHS Digital website:
[4]https://digital.nhs.uk/about-nhs-digital...

[5]Privacy and cookies

 

 

show quoted sections

NHS Digital Enquiries (NHS DIGITAL),

Ref: NIC-681088-F4L0R 

Dear David,

Thank you for your email.

Please see below response from our IG team:

Thank you for your email requesting an Internal Review of
NIC-679497-J7R2Q - Freedom of Information request - Medical Centre’s DSPT
Incident Reports.
 
We are not clear from your email what step(s) you require, and would be
grateful of clarification from you.
 
In your email dated Wednesday 28^th September 2022 you ask.
 

• I am writing to request an internal review of NHS Digital's handling
of my FOI request 'Medical Centre’s DSPT Incident Reports'.

 
You then go on to say.

• I am only asking for the total number of incidents reported using the
DSPT toolkit. However, if you could please amend my request and simply
disclose how many incidents have been reported to NHS Digital by the
two surgeries between the two dates, regardless of the method they
were reported. You may also retract any/all other information related
to the DSPT toolkit and any/all personal information from your
response.
 

If you could confirm whether you
 

 A. Are requesting an internal review of our response to reference
NIC-679497-J7R2Q or
 B. Are requesting a new request for information under the Freedom of
Information Act 2000 based on your wording ‘please amend my request’

 
Thank you for your help with this and we look forward to receiving your
response at your earliest convenience.
 
Once we have your clarification response, we will endeavour to provide you
with the information we hold if any.
 
Information Governance Team

If we can be of any further assistance, please do not hesitate to get in
touch.

You can share with us your experience of the service you’ve received by
clicking on the following link. 
[1]Customer Satisfaction Survey 

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678
[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

 

You can find out more about our service, including our response times and
customer charter on the NHS Digital website:
[4]https://digital.nhs.uk/about-nhs-digital...

[5]Privacy and cookies

 

 

show quoted sections

Dear NHS Digital Enquiries (NHS DIGITAL),

I am requesting an internal review. However, I have changed the wording to avoid requesting you to divulge any private information about the DSPT toolkit.

The reason being, I am simply interested to learn how many suspected data breaches/incidents have been reported to you by the 2 centres and not the manner in that they was reported.

Yours sincerely,

David Coats

NHS Digital Enquiries (NHS DIGITAL),

Ref: NIC-681968-Q1X9F 

Dear David Coats,

We are writing to acknowledge that your request for information was
received by NHS Digital on 3/10/2022 and is currently being considered.

If NHS Digital is able to provide you with the information you have
requested, then under the Freedom of Information (FOI) Act you are
entitled to receive it promptly and in any event no later than the 20th
working day following the date of receipt. However, we may need to contact
you to clarify your request. If this is required we aim to do this
promptly but no later than 7 days after receiving your initial request for
information.

The FOI Act provides a 'General right of access to information held by
public authorities'. However, it also defines a number of exemptions
which may prevent the release of some or all of the information you have
requested. Therefore, NHS Digital will assess your information request in
light of any relevant exemptions.

If exemptions do apply, then NHS Digital may decide not to release all, or
part, of the information you have requested. I shall inform you if this is
the case, and advise you of your rights of appeal.

If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken as to whether to
release the information to you.

The response to your request will be sent to you by email, however if you
require your response in any other format, please contact us to discuss a
suitable format.

NHS Digital will not normally charge a fee to provide you with the
information you have requested, unless the cost of dealing with your
request is more than £450 as outlined in Section 12 of the FOI Act and
Section 3 of the The FOI and Data Protection (Appropriate Limit and Fees)
Regulations 2004. If it appears likely that your request will cost more,
then NHS Digital is able to refuse to supply the information.  As per our
obligations under Section 16 of the FOI Act, every effort will be made to
provide you with details of how you may be able to reframe your request in
order for us to complete the required work within the (£450 / 18 person
hours) cost limit.

If you have any queries or should you wish to make a complaint about the
manner in which your request is being processed then please do not
hesitate to contact us at [1][NHS Digital request email] in the first
instance. Any complaints will be investigated in accordance with NHS
Digital's complaints procedure.

Further information about your rights under the Freedom of Information
Act, is available from the Information Commissioner's Office, Wilmslow,
Cheshire and on the NHS Digital website.

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678
[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

You can find out more about our service, including our response times and
customer charter on the NHS Digital website:
[4]https://digital.nhs.uk/about-nhs-digital...

[5]Privacy and cookies

 

 

show quoted sections

Dear NHS Digital Enquiries (NHS DIGITAL),

Please can you provide your response as the law states you should have responded by the 17 October 2022.

Yours sincerely,

David Coats

NHS Digital Enquiries (NHS DIGITAL),

1 Attachment

Ref: NIC-681968-Q1X9F 
 

Dear David Coats,

Many thanks for your recent request to NHS Digital.

We have now received a reply to this from our colleagues in the
Information Governance team.

Please see the attached file(s).

You can share with us your experience of the service you’ve received by
clicking on the following link. 
[1]Customer Satisfaction Survey 

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678

[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

[4]Privacy and cookies

 

 

show quoted sections

Dear Mr Tom Crisp (Solicitor for NHS DIGITAL),

Thank you for your thorough and substantial response. I truly am grateful and I feel that your assessment of the matter as a whole is fair. I have no interest in asking NHS Digital to disclose anything that may cause a security risk or cost them too much, hence my reasons for rewording my request for information.

Yours sincerely,

David Coats

NHS Digital Enquiries (NHS DIGITAL),

1 Attachment

Ref: NIC-683394-P8C2W 
 

Dear David Coats,

Many thanks for your recent request to NHS Digital.

We have now received a reply to this from our colleagues in the
Information Governance team.

Please see the attached file(s).

You can share with us your experience of the service you’ve received by
clicking on the following link. 
[1]Customer Satisfaction Survey 

Kind Regards,

Contact Centre Team
NHS Digital
[2]www.digital.nhs.uk

0300 303 5678

[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

[4]Privacy and cookies

 

References

Visible links
1. https://crm.digital.nhs.uk/clickdimensio...
2. http://www.digital.nhs.uk/
3. mailto:[NHS Digital request email]
4. https://digital.nhs.uk/about-nhs-digital...