FOI-03649

##Request

_Under the Freedom of Information Act 2000, I request the following recorded information._

_Timeframe: 1 January 2023 - 31 December 2023._

___1. Data Processing or Service Agreements___

_Copies of any Data Processing Agreements (DPA), Service Level Agreements (SLA), or equivalent contractual arrangements between the NHS Business Services Authority and either:_

_•	Belfast Health and Social Care Trust, or_

_•	Business Services Organisation_

_that relate to the management, migration, reconciliation, or processing of cross-jurisdiction neurology patient records during 2023._

_Where available, please include the scope of services or project description within those agreements._

___2. Correspondence relating to dataset management___

_Copies of any recorded correspondence (including emails or briefing notes) between NHSBSA staff involved in data management-including teams based in Newcastle upon Tyne—and consultants from KPMG relating to:_

_•	management of patient encounter-level datasets_

_•	data reconciliation or dataset cleansing_

_•	processing protocols relating to neurology patient records._

___3. Standard operating procedures___

_Copies of any Standard Operating Procedures (SOPs), governance documents, or data-management guidance used by NHSBSA that relate to:_

_•	the amendment, reconciliation, or correction of patient encounter records_

_•	the handling of clinical dataset discrepancies_

_•	the management of patient record updates within systems used for administrative or analytical purposes._

_If any information is withheld, please specify the exemption relied upon._

_If the request is considered likely to exceed the cost limit under Section 12, please provide advice and assistance under Section 16 to allow the request to be refined._

On 2 April 2026 you provided the following clarification:

_I can confirm that our request relates specifically to neurology recall patients, including those reviewed as part of the Belfast Trust Neurology Recall._

_For clarity, I am not requesting any identifiable or individual patient records._

_My request concerns the handling, processing, and governance of datasets relating to this patient cohort, specifically where NHSBSA has accessed, processed, analysed, or otherwise interacted with patient encounter-level data._

_By “patient encounter-level datasets,” I refer to datasets containing records of patient interactions (e.g. prescribing, investigations, referrals, or clinical activity), whether identifiable, pseudonymised, or aggregated.
In particular, I am seeking information on:_

_•	Whether NHSBSA has processed or recoded data relating to neurology recall patients_
 
_•	The systems used to access or process such data_

_•	Audit logging and access controls applied_
 
_•	Monitoring or oversight mechanisms governing staff access and activity_

_•	Any policies, guidance, or instructions relating to such processing 
This request is limited to governance, systems, and controls, and does not seek personal data._

##Response

I am writing to advise you that following a search of our paper and electronic records, I have established that the information you requested is not held by the NHSBSA. The NHSBSA is not a NHS Trust organisation, rather we are a Special Health Authority providing back-office functions to the wider NHS. The authority is not patient-facing and we do not handle or process patient records or datasets relating to neurology recall patients. That is why we do not hold this information.


Tags: neurology patient records
Organization: Freedom of Information Disclosure Log