FOI-03649

##Request _Under the Freedom of Information Act 2000, I request the following recorded information._ _Timeframe: 1 January 2023 - 31 December 2023._ ___1. Data Processing or Service Agreements___ _Copies of any Data Processing Agreements (DPA), Service Level Agreements (SLA), or equivalent contractual arrangements between the NHS Business Services Authority and either:_ _• Belfast Health and Social Care Trust, or_ _• Business Services Organisation_ _that relate to the management, migration, reconciliation, or processing of cross-jurisdiction neurology patient records during 2023._ _Where available, please include the scope of services or project description within those agreements._ ___2. Correspondence relating to dataset management___ _Copies of any recorded correspondence (including emails or briefing notes) between NHSBSA staff involved in data management-including teams based in Newcastle upon Tyne—and consultants from KPMG relating to:_ _• management of patient encounter-level datasets_ _• data reconciliation or dataset cleansing_ _• processing protocols relating to neurology patient records._ ___3. Standard operating procedures___ _Copies of any Standard Operating Procedures (SOPs), governance documents, or data-management guidance used by NHSBSA that relate to:_ _• the amendment, reconciliation, or correction of patient encounter records_ _• the handling of clinical dataset discrepancies_ _• the management of patient record updates within systems used for administrative or analytical purposes._ _If any information is withheld, please specify the exemption relied upon._ _If the request is considered likely to exceed the cost limit under Section 12, please provide advice and assistance under Section 16 to allow the request to be refined._ On 2 April 2026 you provided the following clarification: _I can confirm that our request relates specifically to neurology recall patients, including those reviewed as part of the Belfast Trust Neurology Recall._ _For clarity, I am not requesting any identifiable or individual patient records._ _My request concerns the handling, processing, and governance of datasets relating to this patient cohort, specifically where NHSBSA has accessed, processed, analysed, or otherwise interacted with patient encounter-level data._ _By “patient encounter-level datasets,” I refer to datasets containing records of patient interactions (e.g. prescribing, investigations, referrals, or clinical activity), whether identifiable, pseudonymised, or aggregated. In particular, I am seeking information on:_ _• Whether NHSBSA has processed or recoded data relating to neurology recall patients_ _• The systems used to access or process such data_ _• Audit logging and access controls applied_ _• Monitoring or oversight mechanisms governing staff access and activity_ _• Any policies, guidance, or instructions relating to such processing This request is limited to governance, systems, and controls, and does not seek personal data._ ##Response I am writing to advise you that following a search of our paper and electronic records, I have established that the information you requested is not held by the NHSBSA. The NHSBSA is not a NHS Trust organisation, rather we are a Special Health Authority providing back-office functions to the wider NHS. The authority is not patient-facing and we do not handle or process patient records or datasets relating to neurology recall patients. That is why we do not hold this information.