The University Hospitals Birmingham NHS Foundation Trust – Violation Found (United Kingdom, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Information Commissioner's Office in the UK found that the University Hospitals Birmingham NHS Foundation Trust was not properly handling Freedom of Information requests. This is crucial because it affects public access to information and accountability of public institutions. Organizations should prioritize timely responses to information requests to maintain public trust.
What happened
The trust had a low compliance rate for Freedom of Information requests, failing to respond in a timely manner.
Who was affected
Members of the public who submitted Freedom of Information requests to the trust were affected.
What the authority found
The authority issued an enforcement notice requiring the trust to improve its response times to information requests.
Why this matters
This case highlights the need for public organizations to comply with information requests promptly, which is essential for transparency and accountability.
Source checks
Linked-source text retrieved.
Automated check recorded — 11 April 2026.
Processing notes: articles corrected, national law identified, scope corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA requested the University Hospitals Birmingham NHS Foundation Trust (the controller) to provide its Freedom of Information (FOI) performance statistics for the last three quarters following a complaint and a review of the controller’s FOI performance from public sources. The Freedom of Information Act (FOIA) requires a public authority to inform people whether it holds information they have requested and to communicate it to them within 20 working days of receipt of their request. The controller’s performance statistics revealed, among other things, that its compliance rate was 54.5%, with a backlog of 432 requests as of 18 March 2026, the oldest dating back to October 2024. The DPA issued an enforcement notice to the controller, requiring it to comply with section 1(1) of FOIA in respect of each FOI request. Furthermore, the DPA required the controller to devise and publish an action plan formalising measures to mitigate delays. In case the controller fails to comply with the enforcement notice, the DPA may make written certification of this fact to the High Court under section 54 of FOIA which may lead to the controller being held in contempt of court.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for The University Hospitals Birmingham NHS Foundation Trust in UK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. The University Hospitals Birmingham NHS Foundation Trust - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: