The University Hospitals Birmingham NHS Foundation Trust – Violation Found (United Kingdom, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The University Hospitals Birmingham NHS Foundation Trust faced scrutiny for not responding to Freedom of Information requests in a timely manner. This is important because it shows that public organizations must be accountable and respond to information requests from the public.
What happened
The University Hospitals Birmingham NHS Foundation Trust had a low compliance rate for Freedom of Information requests, responding to only 54.5% on time.
Who was affected
Members of the public who submitted Freedom of Information requests to the University Hospitals Birmingham NHS Foundation Trust were affected.
What the authority found
The Information Commissioner's Office issued an enforcement notice requiring the trust to improve its response times to Freedom of Information requests.
Why this matters
This situation highlights the need for public organizations to prioritize transparency and accountability, ensuring they respond promptly to information requests.
National Law Articles
The DPA requested the University Hospitals Birmingham NHS Foundation Trust (the controller) to provide its Freedom of Information (FOI) performance statistics for the last three quarters following a complaint and a review of the controller’s FOI performance from public sources. The Freedom of Information Act (FOIA) requires a public authority to inform people whether it holds information they have requested and to communicate it to them within 20 working days of receipt of their request. The controller’s performance statistics revealed, among other things, that its compliance rate was 54.5%, with a backlog of 432 requests as of 18 March 2026, the oldest dating back to October 2024. The DPA issued an enforcement notice to the controller, requiring it to comply with section 1(1) of FOIA in respect of each FOI request. Furthermore, the DPA required the controller to devise and publish an action plan formalising measures to mitigate delays. In case the controller fails to comply with the enforcement notice, the DPA may make written certification of this fact to the High Court under section 54 of FOIA which may lead to the controller being held in contempt of court.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for The University Hospitals Birmingham NHS Foundation Trust in UK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. The University Hospitals Birmingham NHS Foundation Trust - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: