The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust – Violation Found (United Kingdom, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust was found to be slow in responding to Freedom of Information requests. This matters because it emphasizes the obligation of public organizations to provide timely information to the public.
What happened
The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust had a compliance rate of only 26% for Freedom of Information requests.
Who was affected
Members of the public who submitted Freedom of Information requests to the Queen Elizabeth Hospital were affected.
What the authority found
The Information Commissioner's Office issued an enforcement notice requiring the hospital to comply with the Freedom of Information Act and improve response times.
Why this matters
This case underscores the importance of public organizations maintaining transparency and ensuring they meet their obligations to respond to information requests.
National Law Articles
The DPA became aware of the poor Freedom of Information (FOI) performance of the Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust (the controller) from a public website and following a complaint. Therefore, the DPA requested the FOI statistics for the last two full financial quarters of 2025 from the controller. The Freedom of Information Act (FOIA) requires a public authority to inform people whether it holds information they have requested and to communicate it to them within 20 working days of receipt of their request. Based on the provided statistics, among other things, the controller’s FOI compliance rate was 26%, with a backlog of 95 requests. The DPA issued an enforcement notice to the controller, requiring it to comply with Section 1(1) of the Freedom of Information Act (FOIA) for each FOI request unanswered within the statutory 20 working days. Furthermore, the DPA required the controller to devise and publish an action plan with measures to mitigate delays. A failure to comply with the enforcement notice may lead to written certification to the High Court under section 54 of FOIA, with the possibility of holding the controller in contempt of court.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust in UK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. The Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: