FOI-03660

##Request _Under the Freedom of Information Act 2000, please provide the following recorded information._ _Timeframe: 1 January 2023 –-31 December 2024._ ___1. Dataset extraction governance___ _Copies of any governance documents, approval forms, or policies used by NHSBSA that regulate the extraction or creation of patient encounter-level dataset extracts (sometimes referred to as “encounter slices” or equivalent subsets) from clinical or administrative systems._ ___2. Approval processes___ _Copies of any standard operating procedures, guidance documents, or approval workflows that apply when NHSBSA staff create or analyse encounter-level data extracts relating to patients whose records originate from external health systems._ ___3. Third-party access___ _Confirmation of whether any encounter-level dataset extracts relating to neurology patients were made available to external organisations or consultants during the above timeframe._ _Where such access occurred, please confirm:_ _• the organisation granted access_ _• the purpose of the dataset analysis_ _• the governance approval process used._ ___4. Audit controls___ _Copies of any guidance documents describing audit logging or monitoring controls applied when NHSBSA staff access or process encounter-level patient datasets._ _If any information is withheld, please specify the exemption relied upon._ _If the request is considered likely to exceed the cost limit under Section 12, please provide advice and assistance under Section 16 to allow the request to be refined._ On 2 April 2026 you provided the following clarification: _I can confirm that our request relates specifically to neurology recall patients, including those reviewed as part of the Belfast Trust Neurology Recall._ _For clarity, I am not requesting any identifiable or individual patient records._ _My request concerns the handling, processing, and governance of datasets relating to this patient cohort, specifically where NHSBSA has accessed, processed, analysed, or otherwise interacted with patient encounter-level data._ _By “patient encounter-level datasets,” I refer to datasets containing records of patient interactions (e.g. prescribing, investigations, referrals, or clinical activity), whether identifiable, pseudonymised, or aggregated. In particular, I am seeking information on:_ _• Whether NHSBSA has processed or recoded data relating to neurology recall patients_ _• The systems used to access or process such data_ _• Audit logging and access controls applied_ _• Monitoring or oversight mechanisms governing staff access and activity_ _• Any policies, guidance, or instructions relating to such processing_ _This request is limited to governance, systems, and controls, and does not seek personal data._ ##Response I am writing to advise you that following a search of our paper and electronic records, I have established that the information you requested is not held by the NHSBSA. The NHSBSA is not a NHS Trust organisation, rather we are a Special Health Authority providing back-office functions to the wider NHS. The authority is not patient-facing and we do not handle or process patient records or datasets relating to neurology recall patients. That is why we do not hold this information.