The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust – Violation Found (United Kingdom, 2026)

Violation Found
Information Commissioner's Office23 March 2026United Kingdom
final
Violation Found

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust was found to be slow in responding to Freedom of Information requests. This matters because it emphasizes the obligation of public organizations to provide timely information to the public.

What happened

The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust had a compliance rate of only 26% for Freedom of Information requests.

Who was affected

Members of the public who submitted Freedom of Information requests to the Queen Elizabeth Hospital were affected.

What the authority found

The Information Commissioner's Office issued an enforcement notice requiring the hospital to comply with the Freedom of Information Act and improve response times.

Why this matters

This case underscores the importance of public organizations maintaining transparency and ensuring they meet their obligations to respond to information requests.

National Law Articles

AI-identified

Section 1(1) FOIA
Section 10(1) FOIA
Section 52 FOIA
Section 54 FOIA
Source verified 11 April 2026
articles corrected
national law identified
scope corrected
Full Legal Summary
Detailed

The DPA became aware of the poor Freedom of Information (FOI) performance of the Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust (the controller) from a public website and following a complaint. Therefore, the DPA requested the FOI statistics for the last two full financial quarters of 2025 from the controller. The Freedom of Information Act (FOIA) requires a public authority to inform people whether it holds information they have requested and to communicate it to them within 20 working days of receipt of their request. Based on the provided statistics, among other things, the controller’s FOI compliance rate was 26%, with a backlog of 95 requests. The DPA issued an enforcement notice to the controller, requiring it to comply with Section 1(1) of the Freedom of Information Act (FOIA) for each FOI request unanswered within the statutory 20 working days. Furthermore, the DPA required the controller to devise and publish an action plan with measures to mitigate delays. A failure to comply with the enforcement notice may lead to written certification to the High Court under section 54 of FOIA, with the possibility of holding the controller in contempt of court.

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

23 March 2026

Authority

Information Commissioner's Office

GDPRhub ID

gdprhub-9915

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust - United Kingdom (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: