The request was successful.

Dear NHS Digital,

Please provide a copy of the Tata Protection Impact Assessment DPIA conducted for Splunk SIEM (your ref IAR0000784) together with a copy of the data processor agreement / protocol with the supplier which I assume you have for compliance with Art 28 UK GDPR (if not part of the DPIA)

Yours faithfully,

Paul Staples

NHS Digital Enquiries (NHS DIGITAL),

Ref: NIC-698828-F6Y3Y 

Dear Paul Staples,

We are writing to acknowledge that your request for information was
received by NHS Digital on 17/01/2023 and is currently being considered.

If NHS Digital is able to provide you with the information you have
requested, then under the Freedom of Information (FOI) Act you are
entitled to receive it promptly and in any event no later than the 20th
working day following the date of receipt. However, we may need to contact
you to clarify your request. If this is required we aim to do this
promptly but no later than 7 days after receiving your initial request for

The FOI Act provides a 'General right of access to information held by
public authorities'. However, it also defines a number of exemptions
which may prevent the release of some or all of the information you have
requested. Therefore, NHS Digital will assess your information request in
light of any relevant exemptions.

If exemptions do apply, then NHS Digital may decide not to release all, or
part, of the information you have requested. I shall inform you if this is
the case, and advise you of your rights of appeal.

If the information you request contains reference to a third party then
they may be consulted prior to a decision being taken as to whether to
release the information to you.

The response to your request will be sent to you by email, however if you
require your response in any other format, please contact us to discuss a
suitable format.

NHS Digital will not normally charge a fee to provide you with the
information you have requested, unless the cost of dealing with your
request is more than £450 as outlined in Section 12 of the FOI Act and
Section 3 of the The FOI and Data Protection (Appropriate Limit and Fees)
Regulations 2004. If it appears likely that your request will cost more,
then NHS Digital is able to refuse to supply the information.  As per our
obligations under Section 16 of the FOI Act, every effort will be made to
provide you with details of how you may be able to reframe your request in
order for us to complete the required work within the (£450 / 18 person
hours) cost limit.

If you have any queries or should you wish to make a complaint about the
manner in which your request is being processed then please do not
hesitate to contact us at [1][NHS Digital request email] in the first
instance. Any complaints will be investigated in accordance with NHS
Digital's complaints procedure.

Further information about your rights under the Freedom of Information
Act, is available from the Information Commissioner's Office, Wilmslow,
Cheshire and on the NHS Digital website.

Kind Regards,

Contact Centre Team
NHS Digital

0300 303 5678
[3][NHS Digital request email]

7&8 Wellington Place | Leeds | LS1 4AP

You can find out more about our service, including our response times and
customer charter on the NHS Digital website:

[5]Privacy and cookies



show quoted sections

Dear NHS Digital Enquiries (NHS DIGITAL),

This response is overdue. Please provide by 24/02 failing which I will refer matter to ICO

Yours sincerely,

Paul Staples

NHS Digital Enquiries (NHS DIGITAL),

3 Attachments

Ref: NIC-698828-F6Y3Y 

Dear Paul Staples,

Many thanks for your recent request to NHS England

We have now received a reply to this from our colleagues in the
Information Governance team.

Please see the attached file(s).

You can share with us your experience of the service you’ve received by
clicking on the following link. 
[1]Customer Satisfaction Survey 

For more information about the data, products and services formerly
managed by NHS digital please visit [2]https://digital.nhs.uk/

Kind Regards, 

Enquiries Team (formerly of NHS Digital) 
NHS England 

0300 303 5678 

[4][NHS Digital request email] 
7&8 Wellington Place | Leeds | LS1 4AP 
NHS England and NHS Digital have merged. [5]Learn more 
We will continue to respond to enquiries relating to services that were
previously run by NHS Digital, until further notice. For more information
about the data, products and services formerly managed by NHS digital
please visit [6]https://digital.nhs.uk/

[7]Privacy and cookies 


show quoted sections