Severn Valley Medical Centre and Mandy Smith

The request was successful.

Dear Midlands and Lancashire Commissioning Support Unit,

Severn Valley Medical Practice in Worcester recently (last week) uploaded a new privacy statement to their web page which names Many Smith of your organisation as their Data Protection Officer. It remains online at the time of making this request

Previously it had been Paul Couldrey.

1. Can you please verify whether or not Mandy Smith is the DPO for Severn Valley Medical Practice and if so when was she appointed (a) and how ?

I ask because a journalist investigating a data protection story concerning Severn Valley Medical Centre says that Mandy Smith says she is not the DPO but despite this the Privacy Notice remains online claiming that she is. This is in need of clarification.

2. Also can you please verify

Do you offer to act as DPO for individual GP surgeries ?

3. Mr. Paul Couldrey of PCIG Consulting claims that you have previously been a client. Can you please advise what type of services and when they were provided and whether in that regard you checked qualifications if any were claimed ?

4. If your Mandy Smith is not the DP0) what action will you/have you taken to ensure this claim is remedied and what action have you/will you take to explore how this came about and to ensure it will not happen again ?

Thank you

Andrew Brown

FOI, England (NHS ENGLAND & NHS IMPROVEMENT - X24), Midlands and Lancashire Commissioning Support Unit

Dear Andrew Brown,

 

Thank you for your communication dated 7 August 2019.

 

NHS England has assessed your communication as a request under the Freedom
of Information (FOI) Act 2000. As such, please be assured that your
request is being dealt with under the terms of the FOI Act and will be
answered within twenty working days.

 

For further information regarding the FOI Act, please refer to the
Information Commissioner’s Office (ICO) website. For further information
regarding NHS England and the information it publishes please visit our
website here.

 

If you have any queries about this request or wish to contact us again,
please email [1][Midlands and Lancashire Commissioning Support Unit request email] and the message will be
forwarded appropriately. Please remember to quote the above reference
number in any future communications.

 

Please do not reply to this email. This message has been sent from a
central mailbox. To communicate with NHS England regarding Freedom of
Information (FOI) requests, enquiries or complaints we ask these are sent
directly to NHS England’s customer contact centre. This is to ensure all
communications are progressed correctly. Their postal address, telephone
number and email details are as follows:- PO Box 16738, Redditch, B97 9PT;
0300 3 11 22 33, [2][Midlands and Lancashire Commissioning Support Unit request email].

 

Yours sincerely,

 

Freedom of Information

Corporate Communications Team

Transformation and Corporate Operations Directorate

 

NHS England

PO Box 16738

REDDITCH

B97 9PT

 

Tel: 0300 311 22 33

Email: [3][Midlands and Lancashire Commissioning Support Unit request email]

 

‘Health and High quality care for all, now and for future generations’

show quoted sections

FOI, England (NHS ENGLAND & NHS IMPROVEMENT - X24), Midlands and Lancashire Commissioning Support Unit

Dear Andrew Brown, 

 

Re:      Freedom of Information request (Our Ref: FOI-059946)

 

Thank you for your Freedom of Information (FOI) request dated 7 August
2019.

 

Your exact request was:-

 

“Severn Valley Medical Practice in Worcester recently  (last week)  
uploaded a new privacy statement  to their web page  which names  Many
Smith of your organisation as their  Data Protection Officer.    It
remains online at the time of making this request

Previously  it had been Paul Couldrey.

1.  Can you please verify whether or not Mandy Smith is  the DPO    for 
Severn Valley Medical Practice and if so  when was she appointed   (a) 
and how ?  

I ask because a journalist investigating a data protection story
concerning Severn Valley Medical Centre  says that Mandy Smith says she is
not the DPO  but despite this the Privacy Notice remains online claiming
that she is.  This is in need of   clarification.

2.   Also can you please verify

Do you offer to act as  DPO  for individual GP  surgeries ? 

3.   Mr. Paul Couldrey of  PCIG  Consulting claims  that you have
previously been a client.  Can you please advise  what type of services
and when they were provided  and whether in that regard you checked 
qualifications if any were claimed  ?

4.  If your Mandy Smith is not the DP0)  what action will you/have you
taken to ensure  this claim is remedied and what action have you/will you
take to explore how this came about and to ensure it will not happen again
?”

 

NHS England holds this information.

 

1: Mandy Smith is not the DPO for Severn Valley Medical Practice.

 

2: Midlands and Lancashire CSU (MLCSU) can provide a DPO service for GP
surgeries.

 

3: MLCSU has never been a client of Mr Paul Couldrey.  

 

4: MLCSU contacted the Practice and informed them of the error. Mandy
Smith’s details have been removed from the Practice website and replaced
with the correct details. Due to a misunderstanding, Mandy Smith’s contact
details were incorrectly sent to the Practice to be used as their DPO
contact details. MLCSU have liaised with the relevant commissioners to
ensure the correct details are now communicated and displayed.

 

Copyright:- NHS England operates under the terms of the open government
licence. Please see the NHS England Terms and conditions on the following
link

 

o [1]http://www.england.nhs.uk/terms-and-cond...

 

We hope this information is helpful. However, if you are dissatisfied, you
have the right to ask for an internal review. This should be requested in
writing within two months of the date of this letter. Your correspondence
should be labelled “Internal Review” and should outline your concerns
and/or the area(s) you would like the review to consider. Internal Review
requests should be sent to:

 

NHS England

PO Box 16738

REDDITCH

B97 9PT

 

Email: [2][Midlands and Lancashire Commissioning Support Unit request email]

 

Please quote the reference number FOI-059946 in any future communications.

 

If you are not content with the outcome of the internal review, you have
the right to apply directly to the Information Commissioner for a
decision. The Information Commissioner’s Office (ICO) can be contacted at:

 

The Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone: 0303 123 1113

Email: [3][email address]  

Website: [4]www.ico.org.uk

 

Please note there is no charge for making an appeal.

 

Please be aware that in line with the Information Commissioner’s directive
on the disclosure of information under the FOI Act, your request will be
anonymised and published on our website as part of our disclosure log.

 

Please do not reply to this email. This message has been sent from a
central mailbox. To communicate with NHS England regarding Freedom of
Information (FOI) requests, enquiries or complaints we ask these are sent
directly to NHS England’s customer contact centre. This is to ensure all
communications are progressed correctly. Their postal address, telephone
number and email details are as follows:- PO Box 16738, Redditch, B97 9PT;
0300 3 11 22 33, [5][Midlands and Lancashire Commissioning Support Unit request email].

 

 

Yours sincerely,

 

Freedom of Information

Corporate Communications Team

Transformation and Corporate Operations Directorate

 

NHS England

PO Box 16738

REDDITCH

B97 9PT

 

Tel: 0300 311 22 33

Email: [6][Midlands and Lancashire Commissioning Support Unit request email]

show quoted sections