Severn Valley Medical Centre and Mandy Smith
Dear Midlands and Lancashire Commissioning Support Unit,
Severn Valley Medical Practice in Worcester recently (last week) uploaded a new privacy statement to their web page which names Many Smith of your organisation as their Data Protection Officer. It remains online at the time of making this request
Previously it had been Paul Couldrey.
1. Can you please verify whether or not Mandy Smith is the DPO for Severn Valley Medical Practice and if so when was she appointed (a) and how ?
I ask because a journalist investigating a data protection story concerning Severn Valley Medical Centre says that Mandy Smith says she is not the DPO but despite this the Privacy Notice remains online claiming that she is. This is in need of clarification.
2. Also can you please verify
Do you offer to act as DPO for individual GP surgeries ?
3. Mr. Paul Couldrey of PCIG Consulting claims that you have previously been a client. Can you please advise what type of services and when they were provided and whether in that regard you checked qualifications if any were claimed ?
4. If your Mandy Smith is not the DP0) what action will you/have you taken to ensure this claim is remedied and what action have you/will you take to explore how this came about and to ensure it will not happen again ?
Thank you
Andrew Brown
Dear Andrew Brown,
Thank you for your communication dated 7 August 2019.
NHS England has assessed your communication as a request under the Freedom
of Information (FOI) Act 2000. As such, please be assured that your
request is being dealt with under the terms of the FOI Act and will be
answered within twenty working days.
For further information regarding the FOI Act, please refer to the
Information Commissioner’s Office (ICO) website. For further information
regarding NHS England and the information it publishes please visit our
website here.
If you have any queries about this request or wish to contact us again,
please email [1][Midlands and Lancashire Commissioning Support Unit request email] and the message will be
forwarded appropriately. Please remember to quote the above reference
number in any future communications.
Please do not reply to this email. This message has been sent from a
central mailbox. To communicate with NHS England regarding Freedom of
Information (FOI) requests, enquiries or complaints we ask these are sent
directly to NHS England’s customer contact centre. This is to ensure all
communications are progressed correctly. Their postal address, telephone
number and email details are as follows:- PO Box 16738, Redditch, B97 9PT;
0300 3 11 22 33, [2][Midlands and Lancashire Commissioning Support Unit request email].
Yours sincerely,
Freedom of Information
Corporate Communications Team
Transformation and Corporate Operations Directorate
NHS England
PO Box 16738
REDDITCH
B97 9PT
Tel: 0300 311 22 33
Email: [3][Midlands and Lancashire Commissioning Support Unit request email]
‘Health and High quality care for all, now and for future generations’
Dear Andrew Brown,
Re: Freedom of Information request (Our Ref: FOI-059946)
Thank you for your Freedom of Information (FOI) request dated 7 August
2019.
Your exact request was:-
“Severn Valley Medical Practice in Worcester recently (last week)
uploaded a new privacy statement to their web page which names Many
Smith of your organisation as their Data Protection Officer. It
remains online at the time of making this request
Previously it had been Paul Couldrey.
1. Can you please verify whether or not Mandy Smith is the DPO for
Severn Valley Medical Practice and if so when was she appointed (a)
and how ?
I ask because a journalist investigating a data protection story
concerning Severn Valley Medical Centre says that Mandy Smith says she is
not the DPO but despite this the Privacy Notice remains online claiming
that she is. This is in need of clarification.
2. Also can you please verify
Do you offer to act as DPO for individual GP surgeries ?
3. Mr. Paul Couldrey of PCIG Consulting claims that you have
previously been a client. Can you please advise what type of services
and when they were provided and whether in that regard you checked
qualifications if any were claimed ?
4. If your Mandy Smith is not the DP0) what action will you/have you
taken to ensure this claim is remedied and what action have you/will you
take to explore how this came about and to ensure it will not happen again
?”
NHS England holds this information.
1: Mandy Smith is not the DPO for Severn Valley Medical Practice.
2: Midlands and Lancashire CSU (MLCSU) can provide a DPO service for GP
surgeries.
3: MLCSU has never been a client of Mr Paul Couldrey.
4: MLCSU contacted the Practice and informed them of the error. Mandy
Smith’s details have been removed from the Practice website and replaced
with the correct details. Due to a misunderstanding, Mandy Smith’s contact
details were incorrectly sent to the Practice to be used as their DPO
contact details. MLCSU have liaised with the relevant commissioners to
ensure the correct details are now communicated and displayed.
Copyright:- NHS England operates under the terms of the open government
licence. Please see the NHS England Terms and conditions on the following
link
o [1]http://www.england.nhs.uk/terms-and-cond...
We hope this information is helpful. However, if you are dissatisfied, you
have the right to ask for an internal review. This should be requested in
writing within two months of the date of this letter. Your correspondence
should be labelled “Internal Review” and should outline your concerns
and/or the area(s) you would like the review to consider. Internal Review
requests should be sent to:
NHS England
PO Box 16738
REDDITCH
B97 9PT
Email: [2][Midlands and Lancashire Commissioning Support Unit request email]
Please quote the reference number FOI-059946 in any future communications.
If you are not content with the outcome of the internal review, you have
the right to apply directly to the Information Commissioner for a
decision. The Information Commissioner’s Office (ICO) can be contacted at:
The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Email: [3][email address]
Website: [4]www.ico.org.uk
Please note there is no charge for making an appeal.
Please be aware that in line with the Information Commissioner’s directive
on the disclosure of information under the FOI Act, your request will be
anonymised and published on our website as part of our disclosure log.
Please do not reply to this email. This message has been sent from a
central mailbox. To communicate with NHS England regarding Freedom of
Information (FOI) requests, enquiries or complaints we ask these are sent
directly to NHS England’s customer contact centre. This is to ensure all
communications are progressed correctly. Their postal address, telephone
number and email details are as follows:- PO Box 16738, Redditch, B97 9PT;
0300 3 11 22 33, [5][Midlands and Lancashire Commissioning Support Unit request email].
Yours sincerely,
Freedom of Information
Corporate Communications Team
Transformation and Corporate Operations Directorate
NHS England
PO Box 16738
REDDITCH
B97 9PT
Tel: 0300 311 22 33
Email: [6][Midlands and Lancashire Commissioning Support Unit request email]
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now