Request

Under the Freedom of Information Act 2000, please provide the following recorded information.

Timeframe: 1 January 2023 –-31 December 2024.

1. Dataset extraction governance

Copies of any governance documents, approval forms, or policies used by NHSBSA that regulate the extraction or creation of patient encounter-level dataset extracts (sometimes referred to as “encounter slices” or equivalent subsets) from clinical or administrative systems.

2. Approval processes

Copies of any standard operating procedures, guidance documents, or approval workflows that apply when NHSBSA staff create or analyse encounter-level data extracts relating to patients whose records originate from external health systems.

3. Third-party access

Confirmation of whether any encounter-level dataset extracts relating to neurology patients were made available to external organisations or consultants during the above timeframe.

Where such access occurred, please confirm:

• the organisation granted access

• the purpose of the dataset analysis

• the governance approval process used.

4. Audit controls

Copies of any guidance documents describing audit logging or monitoring controls applied when NHSBSA staff access or process encounter-level patient datasets.

If any information is withheld, please specify the exemption relied upon.

If the request is considered likely to exceed the cost limit under Section 12, please provide advice and assistance under Section 16 to allow the request to be refined.

On 2 April 2026 you provided the following clarification:

I can confirm that our request relates specifically to neurology recall patients, including those reviewed as part of the Belfast Trust Neurology Recall.

For clarity, I am not requesting any identifiable or individual patient records.

My request concerns the handling, processing, and governance of datasets relating to this patient cohort, specifically where NHSBSA has accessed, processed, analysed, or otherwise interacted with patient encounter-level data.

By “patient encounter-level datasets,” I refer to datasets containing records of patient interactions (e.g. prescribing, investigations, referrals, or clinical activity), whether identifiable, pseudonymised, or aggregated. In particular, I am seeking information on:

• Whether NHSBSA has processed or recoded data relating to neurology recall patients

• The systems used to access or process such data

• Audit logging and access controls applied

• Monitoring or oversight mechanisms governing staff access and activity

• Any policies, guidance, or instructions relating to such processing

This request is limited to governance, systems, and controls, and does not seek personal data.

Response

I am writing to advise you that following a search of our paper and electronic records, I have established that the information you requested is not held by the NHSBSA. The NHSBSA is not a NHS Trust organisation, rather we are a Special Health Authority providing back-office functions to the wider NHS. The authority is not patient-facing and we do not handle or process patient records or datasets relating to neurology recall patients. That is why we do not hold this information.