Gloucestershire Health and Care- NHS Trust logo
with you, for you
Archive for Corporate Governance

Search for a reference number

Corporate Governance

Leadership Roles

Dear Sir/ Madam,

My name is Sanil Sudhakaran, and I am sending this email on behalf of Health Service Journal (HSJ).
I am writing to request information under the Freedom of Information Act. I would be grateful if you could acknowledge receipt of this request and look forward to your full response within 20 working days, as stipulated by the act.

• As we are updating HSJ’s database of trusts’ leaders. Please could you provide us with leader’s name for the below leadership roles. 
• If you have a very similar role but not the exact job title, please include details of the very similar role and individual. If you don’t have this role at all, please state N/A or “Don’t have the job title”.
• Also, please you include the names and job titles of any of the board members that are not listed below.

Job title Leaders Name
Chair   
Chief executive   
Finance director   
Medical director   
Nursing director   
Chief operating officer   
Chief people officer  

Regards,

read more

Personal Data Breaches

,

Dear Foi team,

Thanks you for your previous foi response- see below. I have looked at the board papers you referenced and it says:

During the year ended 31 March 2025 a total of 187 breaches in relation to information governance were reported in line with the Trust’s incident reporting policy. A ‘personal data breach’ under General Data Protection Regulation Article 4 (12) is defined as ‘a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed’.

There are three types of personal data breaches:

 Confidentiality breach is unauthorised or accidental disclosure of, or access to, personal data.
 Availability breach is an unauthorised or accidental loss of access to, or destruction of, personal data.
 Integrity breach is an unauthorised or accidental alteration of personal data.

I would like to make a new FOI application to ask how many of those 187 data breaches involved the Pando App.

I look forward to hearing back within 20 working day.

read more

Compliance Data

,

Hi,

I am after the total number of FOI requests you received between 01/01/2025 and 31/12/2025 as well the number of FOI requests you did not complete within the required 20 day period for the same time frame. if it’s possible under section 11 of FOIA I’d appreciate the data in csv format.

Thanks,

read more

Diversity, Equity and Inclusion, Equality, Diversity and Inclusion

,

To whom it may concern.

I am writing to you under the Freedom of Information Act 2000.

I request the following information relating to Diversity, Equity and Inclusion (DEI), Equality, Diversity and Inclusion ( EDI ), or similarly named programmes and activities within your council for the last five financial years.
For each financial year, please provide:

1. DEI/ EDI Training Expenditure i.e. how much was spent on external organizations providing DEI training

2. DEI/ EDI Training Content i.e. copies of training materials, presentations, course outlines, learning objectives, handbooks, guidance documents, or other materials used for DEI/ EDI training.

3. DEI/ EDI Staff Positions i.e. list of all roles whose primary responsibility includes DEI, EDI , equality, inclusion, diversity, belonging, positive action, or related functions. Please include an annual salary or salary band.

If you have any questions please don’t hesitate to reach out. If any part of this request exceeds the appropriate cost limit, please provide the information that can be disclosed within the limit and advise how the request may be refined.

I would prefer the information in electronic format.

Many thanks in advance,

read more

New or Innovative Clinical Technology

Dear Gloucestershire Health and Care NHS Foundation Trust,

I am writing to make a request for recorded information under the Freedom of Information Act 2000.

Scope of this request (please read first, to avoid misdirection)

This request concerns the Trust’s governance and business case process for adopting new and innovative clinical technologies. To be precise about what I mean:

In scope: technologies that are novel to the Trust; implantable devices; high-cost or specialised devices; novel diagnostics; digital health or Software as a Medical Device; and, in particular, technologies that are subject to, or recommended by, NICE guidance (for example Medical Technologies Guidance, Diagnostics Guidance, Interventional Procedures Guidance, Technology Appraisals, or an Early Value Assessment). Also in scope is significant clinical capital equipment introduced through a business case, such as robotic surgical systems, theatre tables, imaging systems, and higher-value ward equipment where it forms part of a service change or investment case.

Not the primary focus: the routine replacement, medical equipment library, clinical engineering, or general estates and facilities procurement of established, commodity equipment on a like-for-like basis (for example standard beds or blood pressure monitors purchased as replacements). Please provide that process only if the same committee, template, or route also governs the introduction of the novel and innovative technologies described above, in which case please say so explicitly.

Where responsibility for the above is split across more than one committee or group (for example a medical devices or new products committee, a new interventional procedures committee, a capital investment group, and a digital or NICE-implementation route), please provide the information for each relevant committee and identify which one owns which category.

Request for recorded information

1. A copy of the current business case or application template(s) used to seek approval for the introduction of a new or innovative clinical technology as defined above, including implantable, high-cost, and specialised devices.
2. A copy of the capital business case template(s) used for significant clinical capital equipment (for example the Strategic Outline Case, Outline Business Case, and Full Business Case, or equivalent staged templates), where these are distinct from the template at (1).
3. The name of the committee(s) or group(s) responsible for approving each of the following, and confirmation of which committee owns each: (a) new and innovative medical devices, including implantables and high-cost or specialised devices; (b) novel interventional procedures or techniques; (c) significant clinical capital equipment such as robotic systems and theatre tables; and (d) digital health or Software as a Medical Device.
4. The Terms of Reference for each relevant committee.
5. The membership of each relevant committee by role or job title, and the name or job title of the chair or responsible officer.
6. The meeting frequency of each relevant committee, the scheduled meeting dates for the current and forthcoming year, and the deadline for submission of papers ahead of each meeting.
7. Any additional standard submission forms associated with the process (for example a new product or device request form, clinical evaluation form, risk assessment template).
8. Any evaluation or scoring criteria used to assess submissions, and any financial thresholds or delegated authority limits that determine escalation to executive or Board approval, including the point at which a case moves between the revenue and capital routes.
9. The policy or standard operating procedure governing the introduction of new medical devices and innovative technologies.

Where any of the above is already published, a link or reference is acceptable in place of a copy. My preferred format for the response is electronic (email or accessible document).

I understand you are required to respond within 20 working days of receipt. If any element of this request is unclear, or if you anticipate that it will exceed the cost limit, please contact me so that I can refine or prioritise it rather than issuing a refusal.

Yours faithfully,

read more

Clinical Ethics Support

, , , ,

Dear Gloucestershire Health and Care NHS Foundation Trust,

This is a Freedom of Information request. With respect to your organisation:

1. Please provide the date when your medical device (as defined by MHRA, i.e. also including relevant software) procurement policy (or policies, if you e.g. have a separate one for medical software) was/were last updated.

2. Please state whether the policy (mentioned in point 1 above) requires that a clinical ethicist should be consulted during purchase decisions (if a clinical ethicist is only needs to be consulted under certain conditions, please list these). A clinical ethicists is defined as a member of your clinical ethics committee (under whatever name it operates in your organisation, but this does not include research ethics committees) or an academic with a dedicated post in ethics or a permanent staff members explicitly employed to provide clinical ethics support.

3. If the policy requires ethical issues to be considered during such devise purchase decisions, but not via input of a clinical ethicist as defined above, please state the mechanisms in place for fulfilling that requirement.

4. Please state whether you had clinical ethicist (as defined above) involvement in the purchase of any clinical artificial intelligence applications irrespective of whether this is mandated by your policy.

read more

Governance and oversight of Information Tools

Dear FOI Team,

I am conducting independent research into the governance of information tools used within clinical or operational services across NHS provider Trusts. I am a former Deputy Director of Data Engineering at NHS England and the founder of Bartlett Data Ltd, an independent NHS data consultancy.

“For the purposes of this request, ‘locally developed or maintained information tools used within clinical or operational services’ means any spreadsheet, database, document, shared drive folder, whiteboard, paper-based tracker, printed patient list, or other digital or non-digital tool that contains patient-identifiable or service-level information and is created or maintained by clinical or operational staff outside the Trust’s formally managed IT systems and record-keeping processes (such as the EPR, PAS, or other centrally supported applications). It does not need to contain patient identifiable data to be included, it just needs to be in use within clinical or operational services.

I request the following information. If any individual question would exceed the cost limit under Section 12 of the Freedom of Information Act, please answer the remaining questions and advise which question(s) could not be answered within the limit and why. If any information requested is not held, please confirm that it is not held.

1) Has the Trust completed an audit or survey of locally developed or maintained information tools used within clinical or operational services in the last three years? If so, please provide the date of the most recent audit and a summary of its scope and principal findings. If no such audit has been completed, please confirm this.

2) Does the Trust’s Board Assurance Framework or Corporate Risk Register currently include a risk entry relating to the use of clinical or operational information held outside the Trust’s formally managed IT systems? If so, please provide the risk detail in full. If no such risk entry exists, please confirm this.

3) How many incidents (e.g. Serious Incidents, Patient Safety Incidents, data breaches, or formal complaints) in the last three years had a root cause or contributing factor related to the accuracy, availability, security, or governance of information held outside the Trust’s formally managed IT systems? If the Trust does not categorise or record incidents in a way that would allow this question to be answered without a manual review of individual records, just confirm this rather than attempting the search.

4) Which role(s) within the Trust has designated responsibility for the oversight and governance of information tools used within clinical or operational services that sit outside the Trust’s formally managed IT systems? Please provide the job title and directorate. If no role has designated responsibility, please confirm this. If disclosing the job title would identify a specific individual, please provide the directorate and pay band instead.

5) Has the Trust issued a current policy or guidance to staff regarding the creation, use, and governance of locally developed information tools used within clinical or operational services as defined above? If so, please provide a copy or a link to the published version. If no such policy exists, please confirm this.

Thank you for your assistance with this request. Please contact me at tom@bartlettdata.co.uk if any clarification is needed.

Yours faithfully,

read more

Annual Reports and Accounts (2020/21–2024/25)

Dear Freedom of Information / Corporate Governance Team,
I hope this email finds you well.
I am a Master’s student at University College London (UCL) conducting academic research on financial performance, governance, digital transformation, and organisational characteristics across NHS Trusts and NHS Foundation Trusts in England.
I have obtained most Annual Reports and Accounts through publicly available sources. However, I have been unable to locate complete copies for some financial years relating to your organisation.
I would be very grateful if you could provide electronic copies (PDF format) of any available Annual Reports and Accounts for the following financial years:
• 2020/21
• 2021/22
• 2022/23
• 2023/24
• 2024/25
I am specifically seeking the Annual Report and Accounts containing the audited financial statements (including the Statement of Comprehensive Income, Statement of Financial Position/Balance Sheet, Cash Flow Statement, Notes to the Accounts, Governance Statement and Auditor’s Report), rather than Annual Quality Accounts.
Alternatively, if these documents are available online or held within an archive that is not publicly accessible from the main website, I would greatly appreciate being directed to the relevant webpage or repository.
The documents will be used solely for academic research purposes. No confidential, patient-level, commercially sensitive, or unpublished information is being requested.
Thank you very much for your time and assistance. I would be extremely grateful for any help you can provide.
Kind regards,

read more

Civil Cases

Dear Gloucestershire Health and Care NHS Foundation Trust,

Since 2016, how many civil cases have been brought against GHC Trust and its predecessor MH services? Please also state the 1st and last years for the last 5 civil claims (eg the last 5 civil cases were between 2020 and 2026)

Please state how much, in total for each period, has been paid out to settle civil cases (regardless of acceptance of liability))between 2016-2021 & 2022-2026. This is understood to originate from taxpayer funding; please clarify if this is not the case

Please state how much has been paid to external lawyers, distinguishing between solicitor firms and chambers for barristers, for the same time periods as above. Where possible, please identify the beneficiaries of such payments that are understood to originate from taxpayer/public funds (eg Bevan Brittan). Please clarify if this funding does not originate from taxpayer/public funding.

Yours faithfully,

read more

IT Infrastructure, Digital Maturity and Technology Contracts

, , , ,

Dear Freedom of Information Team,

I am writing to make a request under the Freedom of Information Act
2000 as part of my data collection efforts for personal educational studies. Please treat this as a formal request for recorded information held by Gloucestershire Health and Care NHS FT

I am requesting information relating to your organisation’s IT infrastructure, digital maturity, staffing, contracts and technology spend. To assist in processing this request efficiently, I have structured it into clearly numbered sections below.

──────────────────────────────────────
SECTION 1 — IT BUDGET AND SPEND
──────────────────────────────────────

1.1 What is your organisation’s total annual IT / digital technology budget for the current financial year (or most recently completed financial year)? Please break this down into:
(a) Capital expenditure (CapEx)
(b) Operational expenditure (OpEx)

1.2 What proportion of your total organisational budget does IT / digital technology represent (as a percentage)?

1.3 Is there a separate cyber security budget? If so, what is its value?

1.4 Please provide the name(s) of any Commissioning Support Units
(CSUs) or managed service partners that manage IT expenditure on your behalf, if applicable.

──────────────────────────────────────
SECTION 2 — IT STAFFING
──────────────────────────────────────

2.1 How many whole-time equivalent (WTE) staff are directly employed in IT, digital or technology roles within your organisation?

2.2 Please provide a breakdown of IT staff by job role or band (e.g.
Agenda for Change band or equivalent). Specific names are not required.

2.3 Does your organisation have the following named roles in post?
(Please answer Yes / No / Vacant for each):
(a) Chief Information Officer (CIO) or equivalent
(b) Chief Digital Officer (CDO) or equivalent
(c) Chief Technology Officer (CTO) or equivalent
(d) Chief Information Security Officer (CISO) or equivalent
(e) IT Director / Head of IT
(f) Digital Transformation Lead or equivalent

2.4 How many IT staff are employed via third-party contractors or agency arrangements? What is the approximate annual spend on these arrangements?

──────────────────────────────────────
SECTION 3 — SERVER AND COMPUTE INFRASTRUCTURE ──────────────────────────────────────

3.1 Does your organisation operate on-premise server infrastructure? If yes:
(a) What is the approximate number of physical servers in operation?
(b) What server vendors / manufacturers does your organisation use (e.g. Dell, HPE, Lenovo, Cisco UCS)?
(c) What is the approximate age profile of your server estate (e.g. percentage under 3 years, 3–5 years, over 5 years old)?

3.2 Does your organisation use virtualisation technologies? If yes, which platform(s) (e.g. VMware, Microsoft Hyper-V, Nutanix)?

3.3 Does your organisation use hyperconverged infrastructure (HCI)?
If yes, which vendor(s)?

3.4 Does your organisation use cloud computing services (not including office 365)? If yes:
(a) Which cloud provider(s) do you use (e.g. AWS, Microsoft Azure, Google Cloud, other)?
(b) Approximately what proportion of your workloads are cloud-hosted vs on-premise?
(c) What is the approximate annual cloud spend?

──────────────────────────────────────
SECTION 4 — STORAGE INFRASTRUCTURE
──────────────────────────────────────

4.1 What storage platform(s) does your organisation use (e.g. NetApp, Dell EMC, Pure Storage, HPE, IBM)?

4.2 What is the approximate total usable storage capacity across your estate (in TB or PB)?

4.3 What is the approximate age of your primary storage estate?

──────────────────────────────────────
SECTION 5 — BACKUP, DISASTER RECOVERY AND BUSINESS CONTINUITY ──────────────────────────────────────

5.1 What backup software solution(s) does your organisation currently use (e.g. Veeam, Commvault, Veritas NetBackup, Cohesity, Rubrik, Zerto)?

5.2 What is your backup target infrastructure (e.g. on-premise disk, tape, cloud)?

5.3 Does your organisation have a documented Disaster Recovery (DR) plan? When was it last tested?

5.4 What is the current Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for your critical clinical systems?

5.5 Does your organisation use an offsite or cloud-based backup solution? If yes, which provider?

──────────────────────────────────────
SECTION 6 — NETWORKING AND END-USER COMPUTING ──────────────────────────────────────

6.1 Who provides your Wide Area Network (WAN) and/or internet connectivity services?

6.2 What network equipment vendors does your organisation use (e.g.
Cisco, Juniper, Aruba, Palo Alto)?

6.3 What is the approximate number of end-user devices (laptops, desktops, tablets) in your organisation?

──────────────────────────────────────
SECTION 7 — SOFTWARE, LICENSING AND KEY CLINICAL SYSTEMS ──────────────────────────────────────

7.1 What is your current Electronic Patient Record (EPR) / Electronic Health Record (EHR) system? Please provide the vendor name and product.

7.2 What Patient Administration System (PAS) does your organisation use?

7.3 Does your organisation use a Picture Archiving and Communication System (PACS) / radiology imaging system? If yes, which vendor and product?

7.4 Does your organisation have a Microsoft Enterprise Agreement (or
equivalent) in place? When is this due for renewal?

7.5 What is the approximate annual spend on software licences across the organisation?

7.6 Please list any other significant enterprise IT contracts (by contract type / system category — e.g. HR, finance, workforce
management) with approximate annual values where held.

──────────────────────────────────────
SECTION 8 — WARRANTIES, CONTRACTS AND PROCUREMENT ──────────────────────────────────────

8.1 For your primary server, storage and network infrastructure, are vendor warranties and/or third-party maintenance contracts in place?
Please provide:
(a) The type of coverage (vendor warranty, third-party maintenance, or both)
(b) The name of the maintenance provider(s), if applicable
(c) Approximate contract expiry dates where held

8.2 What procurement frameworks does your organisation use for IT hardware and services (e.g. Crown Commercial Service, NHS Shared Business Services, G-Cloud, Tech Products 4)?

8.3 Are any significant IT contracts due for renewal within the next
24 months? Please provide contract category (not necessarily full commercial detail).

──────────────────────────────────────
SECTION 9 — DIGITAL MATURITY AND STRATEGY ──────────────────────────────────────

9.1 Has your organisation completed a Digital Maturity Assessment
(DMA) or equivalent framework in the last two years? If so:
(a) Which assessment framework was used (e.g. NHS England DMA, HIMSS EMRAM, Other)?
(b) What overall maturity score or rating was achieved?

9.2 Does your organisation have a current Digital / IT Strategy? If so, what is the publication or approval date?

9.3 Has your organisation achieved or is actively working towards any recognised digital accreditations (e.g. HIMSS Level, NHS Digital aspirant status, Cyber Essentials Plus)?

9.4 What are the top three stated digital priorities for your organisation in the current or next financial year?

──────────────────────────────────────
FORMAT AND CLARIFICATION
──────────────────────────────────────

I would be grateful to receive the response in electronic format (e.g.
Microsoft Word, PDF or Excel as appropriate). Where information is readily available in an existing published document, a reference or a link to that document would be acceptable.

If you need any clarification about the scope of this request, or if you believe that any element of it would exceed the appropriate limit under Section 12 of the Act, please contact me before the 20-working-day deadline so that I may prioritise or narrow the questions accordingly.

If any information requested is considered exempt, please specify the relevant exemption for each withheld item and confirm whether the public interest test has been considered.

Yours faithfully,

read more

Workforce Disability Equality Standard

,

Hi Gloucestershire Health and Care NHS team,

I was reading your Annual Equalities Report 2023–24.

You note that the trust publishes annual Workforce Disability Equality Standard action plans, and your disability action plan says the 2021–26 People Strategy agreed actions to improve disability recruitment.

How do you evidence, at the vacancy level before shortlisting, where each role was promoted and what engagement it generated with disabled candidates and communities you are trying to reach?

Disability Network helps employers build that advert stage record at vacancy level. That gives HR clearer evidence if the role is questioned later.

I can send a short overview if useful.

Kind regards,

read more

Incidents of Sexual Violence

Dear Sir,

FOI request: Governance related to sexual offending at the trust

1) Please disclose by each of the following years, the total number each year of incidents of sexual violence (including sexual assault and rape) reported by the trust to the Care Quality Commission:

2021/22
2022/23
2023/24
2024/25
2025/26 YTD

2) If the data is held centrally and can be easily processed within FOIA limits, please advise how many of the incidents of sexual violence in the period April 2021 to 2026 YTD were perpetrated against patients.

3) It has been reported by the media that a patient was raped whilst under the trust’s care in the last financial year.

Please confirm if this is the case.

Please advise if and when the CQC was informed of this serious incident

Please advise:

a) if this incident took place on trust premises
b) whether the patient was under inpatient care
c) if the patient was detained under the Mental Health Act

Please advise what review if any has been undertaken by the trust, and what learning and Safeguarding improvements have been made since the incident.

4) Please advise if the trust undertakes any benchmarking to compare its rates of sexual violence against other comparator trusts, the results of any such benchmarking and any action plans arising.

Yours,

read more

Artificial Intelligence (AI)

,

Dear Sir or Madam,

I am writing to request information under the Freedom of Information Act 2000. This request concerns your organisation’s strategy, governance, and use of artificial intelligence (AI).

For the purposes of this request, artificial intelligence refers to software or systems that perform tasks normally requiring human intelligence, including machine learning, computer vision, natural language processing, and predictive analytics.
I would be grateful if you could provide the answers to the relevant questions by completing the table attached at the end of this request.

1. AI leadership – Does the trust have named leaders for clinical AI tool evaluation and implementation? If so, please provide their names, NHS job titles and NHS email addresses?
2. AI Strategy and Planning – Does the trust have an artificial intelligence (AI) strategy, roadmap, or equivalent strategic document? If yes, please provide a copy or link.
3. AI Policies – Does the trust have approved policies specific to the development, procurement, or use of AI tools? If yes, please provide copies.
4. Governance and Oversight – Does the trust have a dedicated governance committee or formal mechanism reviewing AI initiatives for ethical and safety considerations? If yes, does it include clinical representation?
5. Use of AI in Clinical Care – Is the trust currently using AI tools in clinical care? If yes, does the trust conduct regular audits and use standardised methodologies (e.g. dashboards) to assess financial, clinical, and operational impact?
6. AI Literacy and Training – Does the trust offer AI literacy or skills training for the following staff groups? Please indicate yes/no and provide brief details.

(a) Clinical staff
(b) Technical staff (e.g. clinical scientists)
(c) Operational staff (e.g. secretaries, MDT coordinators and managers).

NHS Trust Name Please confirm the name of the NHS trust

Name(s) of AI evaluation and implementation lead(s) Please add (separate by a “;”/semicolon if more than one lead)

Job title(s) of AI evaluation and implementation lead(s) Please add (separate by a “;”/semicolon if more than one lead)

Email address(es) of AI evaluation and implementation lead(s) Please add (separate by a “;”/semicolon if more than one lead)

Q2: Local AI Strategy Yes/No (delete as appropriate)
Q3: Local AI Policies Yes/No (delete as appropriate)
Q4a: Local governance Yes/No (delete as appropriate)
Q4b: Clinical representation for AI governanceGovernanceClinical Yes/No/Not applicable (delete as appropriate)
Q5: Current AI use Yes/No (delete as appropriate)
Q5b: AI use audit Yes/No/Not applicable (delete as appropriate)
Q5c: AI use impact assessment Yes/No/Not applicable (delete as appropriate)
Q6a: AI training for clinical staff Yes/No (delete as appropriate)
Q6b: AI training for clinical staff Yes/No (delete as appropriate)
Q6c: AI training for operational staff Yes/No (delete as appropriate)

If any part of this request exceeds the cost limit under Section 12 of the Act, please advise which elements could be refined.

If the information is not held, please confirm this.

Thank you very much for your help.

Yours faithfully,

read more

Business Case, Procurement and DPIA Templates and Guidance

Dear FOI Team
I would like to request the following information:
1. Your organisation’s internal business case template (blank), and any current internal guides or best practice documents for staff on how to prepare or write a business case. Please include criteria, requirements, or assessment checklists if available.
2. Any internal guides or standing instructions for your budgetary committee(s) on how business cases are to be assessed or reviewed, including any scoring methodologies, criteria, or objective assessment processes.
3. Your current procurement strategy template (blank), or any process documentation relating to the waiver process that may run alongside the business case.
4. Your organisation’s standing financial instructions (SFIs), or equivalent document governing procurement thresholds and authorisation limits.
5. Your Data Protection Impact Assessment (DPIA) template (blank), and any supporting internal guides for staff on how to complete a DPIA.
6. A single example of a business case for a project or solution involving digital technology or a digital supplier, approved by your organisation in the last 18 months. Please redact or remove any information that is commercially sensitive or personal data as required by law. If your organisation has not approved any such business case in this period, please provide an example from the last 18 months for a project or solution involving an external supplier (not involving digital technology). If neither are available, please confirm this.
If any of the above information is not held, or only held for certain departments or areas, please provide what is available and indicate the applicable directorate/area.
Please provide documents in a machine-readable format (such as PDF, DOCX, or XLSX) wherever possible.
If you believe responding to this request in full would exceed the FOIA cost limit, I would be grateful for advice and assistance as to how I might refine or reduce the scope to bring it within limit.
Thank you for your assistance.

read more

Incidents of Sexual Violence

Dear Sir,

FOI request: Governance related to sexual offending at the trust

1) Please disclose by each of the following years, the total number each year of incidents of sexual violence (including sexual assault and rape) reported by the trust to the Care Quality Commission:

2021/22
2022/23
2023/24
2024/25
2025/26 YTD

2) If the data is held centrally and can be easily processed within FOIA limits, please advise how many of the incidents of sexual violence in the period April 2021 to 2026 YTD were perpetrated against patients.

3) It has been reported by the media that a patient was raped whilst under the trust’s care in the last financial year.

Please confirm if this is the case.

Please advise if and when the CQC was informed of this serious incident

Please advise:

a) if this incident took place on trust premises
b) whether the patient was under inpatient care
c) if the patient was detained under the Mental Health Act

Please advise what review if any has been undertaken by the trust, and what learning and Safeguarding improvements have been made since the incident.

4) Please advise if the trust undertakes any benchmarking to compare its rates of sexual violence against other comparator trusts, the results of any such benchmarking and any action plans arising.

Yours,

read more

Hospital Wards

Dear Gloucestershire Health and Care NHS Foundation Trust,

i. The name of each ward. e.g Ward 2
ii. The location of each ward. e.g Stroud General Hospital iii. The speciality of each ward. e.g Cardiology iv. The number of beds on each ward.

Yours faithfully,

read more

DSPT-Relevant Current & Incoming Suppliers

Dear Gloucestershire Health and Care NHS Foundation Trust,

Under the Freedom of Information Act 2000, please provide the following information:

1. A list of all external suppliers, contractors, or partner organisations who currently fall within the remit of the NHS Data Security & Protection Toolkit (DSPT) for your organisation.

This includes any supplier that handles patient data, accesses NHS systems, or provides digital, software, cloud, data-processing, or cyber-security services requiring DSPT compliance.

2. A list of any new, incoming, or planned suppliers (contracted or due to go live within the next 12 months) who will fall within the DSPT remit for the same reasons.

3. For each supplier identified in Q1 or Q2, please confirm (if recorded):

– Whether they are required to maintain a “Standards Met” DSPT submission

– The date you last checked or verified their DSPT status (or expected verification date for new suppliers)

4. Does your organisation maintain an internal register or log of DSPT-relevant suppliers (including planned or onboarding suppliers)?

– If yes, please provide the relevant extract.

– If no, please confirm that no such register exists.

read more

Alzheimer’s Claims

,

To whom it may concern,

Please provide me with the following information under the Freedom of Information Act.

How many negligence claims related to Alzheimer’s Disease has your trust received in the years 2021, 2022, 2023, 2024 and 2025? Can you please provide the number per year and not as a total.

If this is too much, could you please just provide the year 2024 and 2025.

Can you also provide how much has been paid out for these negligence claims for each year – 2021, 2022, 2023, 2024 and 2025? Can you please provide the number per year and not as a total.

If this is too much, could you please just provide the year 2024 and 2025.

If it is not possible to provide some of the data requested, I would be grateful if you could provide whichever elements of this FOI request are eligible for release.

Therefore, if it is possible to ascertain within the prescribed time limit, without having to provide a fee for further investigations, please respond in electronic form with all the information above to my email address.

Thanks,

read more

NHS cyber governance and board oversight (2018–2024)

,

Please provide information for the period 1 January 2018 – 31 December 2024 (inclusive) or the most recent complete year available.

1. Governance framework — The framework used for cybersecurity governance (e.g. NCSC CAF, DSPT, ISO 27001) and the year of its latest board approval.
2. Board review frequency — How often the board or an executive committee formally reviews cyber resilience or cybersecurity governance (e.g. annually, quarterly, ad hoc).
3. Most recent review — The title and month/year of the latest board or committee paper or report relating to cyber resilience (no internal findings required).
4. Reporting line — The current reporting structure for cybersecurity governance (e.g. CISO → CIO → Board).
5. External assurance — Whether the Trust has undergone external assurance such as CAF self-assessment, DSPT validation, independent audit, or security testing (e.g. penetration test / red-team). If so, please indicate only the type and frequency, not the scope or results.
6. Concurrent improvement programmes — Approximate number of cybersecurity-related improvement programmes or initiatives active concurrently in a typical year (2018–2024) and trend (increasing/decreasing/stable).
7. Internal coordination — Whether a steering group, programme office, or committee coordinates concurrent cybersecurity initiatives within the Trust, and its reporting level (executive/board).
8. Cross-Trust coordination — Whether the Trust participates in structured coordination or information-sharing mechanisms with other NHS Trusts or regional bodies on cyber-resilience governance (e.g. ICS cyber networks), and at what level (regional/national).
9. Board learning — Whether board-level training sessions or workshops on cyber resilience have been held since 2018, and in which years.

read more

Printing / Mail Rooms / Electronic Records

,

Dear Gloucestershire Health & Care NHS Foundation Trust
Please answer the following questions:
Print Room
1. Do you have a print room equipped with one/more high-speed production device/s to handle large volume printing?
2. Is this run by your own staff or outsourced to a third-party provider?
3. If run internally, how many full-time equivalent (FTE) run this facility?
4. Number of devices & model type/s?
5. Name of incumbent supplier?
6. Contract start / end date and length of any option to extend?
7. If outsourced, please advise contract start / end date and length of any option to extend?
8. Was this contract awarded through a framework? If yes, which one used?
9. Annual spend (ex VAT) covering equipment & staff costs or total outlay if this service is outsourced
External Print
1. Do you outsource any print requirement to an external supplier/s (for example to print forms, booklets, leaflets, manuals, posters, banners etc)?
2. Name of incumbent supplier/s?
3. If this arrangement provided under contract, please advise start / end date and length of any option to extend?
4. Was this contract awarded through a framework? If yes, which one used?
5. Alternatively, was this awarded through a DPS arrangement?
6. Annual spend (ex VAT) for this service over the past 12 months?
Mail Room (Inbound and/or Outbound)
1. Do you have your own in-house Mail Room operation?
2. If yes, how is the service run – physical or digital mail distribution?
3. Is this run by your own staff or outsourced to a third-party provider?
4. If run by your own staff, how many full-time equivalent (FTE) staff run this facility?
5. If outsourced, please advise name of current provider, contract start / end date and length of any option to extend?
6. Was this contract awarded through a framework? If yes, which one used?
7. Annual spend (ex VAT) covering running and staff costs or total outlay if this service outsourced?
8. Do you use a Hybrid Mail service as part of your patient communications approach?
9. If yes, please (a) name supplier (b) contract start / end date (c) framework through which this awarded?
Medical records / Digital Forms / Storage
1. Have you yet to start, partly started or completed scanning your medical records?
2. If started or completed, was this handled in-house or by an external company? If yes, please name the supplier
3. Have you digitalised all your forms and are running a PiP (Paperless in Patient) approach (from the point of patient presentation to them leaving are all patient records digitalised)?
4. If you are not using a PiP approach, do you scan your end of episode material?
5. Do you store medical records on site or is this handled off site by an external company? If yes, please name supplier
6. Do you use a digital HR staff onboarding and administration system that interfaces with ESR to support HR processes and workflows?
Finally, who at the Trust is responsible for these arrangements?

read more

Patient Safety Systems – Learning

,

In 2023 you were kind enough to provide information regarding your patient safety systems for the first part of a 2 year project investigating national reporting trends following the introduction of the Learn from patient safety events (LFPSE) service.

Your help and support are invaluable for this work. This is the final stage of this study and if you can help again with the following 2 questions that will enable the study to be completed.

1) When did your trust complete transition to the Learn from patient safety events (LFPSE) service (Month/Year) ?

2) What is now the minimum number of data fields that a member of staff must complete to submit a patient safety report please? (This may vary with different subtypes of report so please provide the lowest number of data fields that is possible, you were previously able to provide this in 2023)

I appreciate the work required and if your trust would like a copy of the output of the completed study reviewing number of patient safety incidents submitted per member of staff related to number of minimum data fields pre and post LFPSE please let me know and when completed I will share this with you.

Thank you for your help and support,

read more

Complaints – IT Operations

,

Dear FOI Team,

I am requesting the following information under the Freedom of Information Act:

The number of complaints raised against the IT Ops department of Gloucestershire Health and Care NHS Foundation Trust between 2020 and 2025.

A summary of the nature of these complaints.

The outcomes of any investigations or resolutions.

Any internal governance reviews or audits related to IT service delivery during this period.

Please confirm receipt and let me know if any clarification is needed.

read more

Patient Notes — Paper and Electronic

,

I would like to request the following information under the Freedom of Information Act.

Question 1:
– Are PATIENT NOTES* in your trust: all paper, all electronic, or a mixture of both?
– If patient notes are primarily electronic:
– When did the trust transition from paper to electronic?
– What is the name of the electronic patient record platform used?
– If patient notes are primarily paper:
– Are there plans to transition from paper to electronic? If yes, when?
* ‘Patient notes’ here refers to written documentation of clinical encounters with patients, completed by a healthcare professional.

Question 2:
– Are DRUG CHARTS in your trust all paper, all electronic, or a mixture of both?
– If drug charts are primarily electronic:
– When did the trust transition from paper to electronic?
– What is the name of the electronic prescribing system used?
– If drug charts are primarily paper:
– Are there plans to transition from paper to electronic? If yes, when?

Question 3:
– Do the following departments in your trust use paper PATIENT NOTES (either partially or fully)? Please indicate Yes, No or Not sure / Not applicable.
– Inpatient wards
– Outpatients

Question 4:
– Do the following departments in your trust use paper DRUG CHARTS (either partially or fully)? Please indicate Yes, No or Not sure / Not applicable.
– Inpatient wards
– Outpatients

Question 5:
– Are fax machines still used in any part of your trust? (Yes / No)

If you have any queries, please don’t hesitate to contact me on ssantospaulo@bmj.com

read more

Trusts Spend on Legal Cases – 2020 to 2025

,

I would like to request the following information from under the Freedom of Information Act 2000:

1. The amount of money spent by the trust on legal cases (or law firms) defending it against whistleblowers, against claims of workplace discrimination, and defending it in employment disputes in the last five financial years.

Please can the data be broken down by each year for the last five financial years (2020/21, 2021/22, 2022/23, 2023/24, 2024/25).

read more

Contact Details for Legal Correspondence from Third Parties

,

I am writing to request information under the Freedom of Information Act 2000.
After reviewing your website and other publicly available information, I have not been able to identify the appropriate contact details for third parties (such as suppliers or service providers) to send formal legal correspondence to your organisation.
Please could you confirm the following:
1. Whether your organisation has one or more specific teams, departments, or named individuals responsible for receiving formal legal correspondence from third parties.
2. The relevant postal address(es), email address(es), and telephone number(s) that such correspondence should be directed to. If responsibility differs by type of issue (e.g. contractual, procurement-related, legal) or by region, please provide the details for each as applicable.
3. If this information is already published, please confirm where it can be found.
This request is made in the public interest to ensure there are clear and transparent routes for formal engagement with public authorities.

read more

Trust’s Infrastructure

I am writing to make an open government request for all the information to which I am entitled under the FOI Act 2000.

Can you please provide an update on your Trust’s Infrastructure, including aspects of Database software, Wifi coverage, and Virtualisation? The questions are in the attached spreadsheet, which I would be grateful if you could fill in.

read more

Paper Medical Records

,

I recently came across a published FOI response from another requester regarding the med recs EDM System. After reviewing the details, I’m seeking information about paper records instead and would like to raise an FOI. Given that medical records are important information assets containing Personally Identifiable Information (PII), some of which will be sensitive, I am particularly interested in how the Trust manages (or who manages!) and safeguards paper medical/health records.
I’ve had a look at the NHSE ERIC data but can only see on-site and off-site spend. Nothing around the number of paper records etc. therefore could you have a look at the below request? Most of it should be in your info asset logs, registers and/or DPIAs so hopefully the request is not too much of an impact.
Paper Medical Records Management
How many paper medical records does the Trust have as a data controller?
How many primary on-site record libraries are there? (Just looking for primary storage locations, not local departmental stores etc. as that would take a long time to repply to).
How many off-site record libraries are there?
Is records management outsourced for some paper medical records?
Is records management outsourced for all paper medical records?
How many records are Trust-managed and how many are outsourced to a records management provider?
If some or all records management is outsourced, what is the records management provider(s) company name(s)?
Is the company (if more than 1, please list) a Data Controller and/or a Data Processor for the Trust?
How many records has the Trust authorised and had destruction undertaken for within the last two years (2022/23 & 2023/24)?
Was destruction undertaken by a BS15713 provider?
If yes, which of the following are they accredited to: BS15713:2009 or BS15713:2023?
If records management is outsourced, does this include active records (records that have been in active circulation within the last three years)?
If records management is outsourced, does this include dormant records (records that have been in active circulation in the last four to eight years)?

read more

Scam/Fake QR Codes in Hospital Car Parks

I am writing to request information from the local authority under the Freedom of Information Act 2000.

It relates to occurrences of scam/fake QR codes in hospital car parks. I would be interested in the following information relating to any incidents of this in hospital car parks owned or controlled by your trust:

– Have hospital parking enforcement officers (or equivalent role with oversight over hospital car parks) recorded/noted any incidents of fake or scam QR codes in hospital car parks owned or controlled by the trust? (Yes or No)

– If the trust uses 3rd party operators to manage their hospital car parks – have these operators made the trust aware of any incidents of fake/scam QR codes in these car parks? (Yes or No)

– Has the trust received any reports from members of the public relating to incidents of fake/scam QR codes in these car parks?

– if yes to any of the above, please provide details of (i) how many and (ii) which sites these incidents took place at.

– If held, please also provide documentation relating to the most recent five incidents (this may include photos/internal reporting/correspondence etc, redacted where necessary)

read more

Community/Patient Public Involvement on Research Board

May I please ask for the following information under the FOI act.

1. Does your NHS Trust/Board have an executive board where health research strategy for the hospital/s is set? e.g a Research and Innovation Board or other relevant high-level board.
2. If yes, is there a PPIE (patient public involvement engagement) representative on this board with the specific remit to provide insights into research agenda setting from the perspective of a patient with lived experience of health issues or as a member of the public/community? [I am not referring to the presence of a lay chair].
3. Is there a PPIE advisory structure (e.g. board, committee, panel) which provides PPIE insights to inform the work of the executive board? (not within individual study groups- I refer to high level feedback into your research strategy meetings).
4. If yes to question 2, 3, 4 or 5, please provide the most recent minutes/agenda with a list of members with designated roles/remits (not names).
5. Are PPIE representatives remunerated?
6. Do you require PPIE representatives to do any training? If yes, please specify e.g NIHR training or in house-training.
7. I realise that some of this information may already be available. However, I was unable to locate it. So, if it is, please provide me with a link to the data.

read more

NHS Car Parking Fines

Please provide me with the following information under the Freedom of Information Act.

Based on your latest available data, how many fines have been handed out to members of staff at your Trust in 2024 for issues related to car parking? This could include parking in the wrong area, not having a permit etc.

If possible, please provide data broken down by year by calendar year.

read more

Pay-outs for Nurses following Employment Tribunal

,

I would like information on employment tribunal (ET1) claims involving nursing staff at your organisation.

Please answer the following 4 questions under the Freedom of Information Act and see example answers as a guide.

For each financial year between 2020 and 2025 (or the latest available date), please provide yearly figures for the below:

1. The number of employment tribunal claims bought by nurses, trainee nurses and nursing associates against the trust. [example answer: 2020 – 0, 2021 – 2, 2022 – 0, 2023 – 1, 2024 – 1]

2. The outcome from each claim [E.g. withdrawn, won, lost- e.g: In 2020, 1 was in favour of the claimant, 2 were in favour of the respondent, 1 was discontinued/settled out of court]

3. How many cases each year led to an employment tribunal ruling the organisation must pay costs to the claimant, and how much was paid [example answer: 2020 – 1 case, £0 paid; 2021 – 2 cases, £12,000 paid; 2022 – 3 cases, £0 paid; 2023 – 0 cases, £0 paid, 2024 – 3 cases, £0 paid]

4. If possible, please break down each claim by type [e.g. public interest disclosure, unfair dismissal, discrimination]

read more

Formularies and Committees

We would like to request the following information from Gloucestershire Health & Care NHS Foundation Trust

1) We have the following formularies listed as used by the organisation:
Gloucestershire Joint Formulary
Please confirm if this is correct and if not, please provide any relevant online links or copies of formularies.

2) We understand the following committees maintain the formularies in question 1:
One Gloucestershire Medicines Optimisation Board (OGMOB)
Please confirm if this is correct. If not correct, please list the relevant committees with the corresponding formulary.

3) Does the organisation have representation on the committees listed in question 2?

4) Are any of the above formularies listed in question 1 dominant when making prescribing decisions or does this depend on therapy area? Please say which is the dominant formulary of the organisation.

5) If you use a PDF formulary, have you considered moving it to an online platform like Netformulary, and if yes, when are you planning to do so?

6) Request for Re-use
If your organisation does hold this information and is able to share it, then I would like to submit the following request for re-using the information:

We (IQVIA) request permission to re-use the information provided as part of independent analyses commissioned by our clients. The contents of the reports will not be made available publicly but may be used by other IQVIA Group entities and service suppliers. The information in the reports will be presented in a factual manner with all publication details staying true to the publisher.

read more

Whistleblowing policy

1. Please answer yes or no. In January 2025 was your Trust conducting any… internal review / investigation / report being compiled… into a consultant that has had concerns raised about him or her (i.e.. a whistle-blower has come forward and named the person)?
2. Please answer yes or no. In January 2025 was your Trust conducting any… internal review / investigation / report being compiled… into a junior doctor that has had concerns raised about him or her (i.e.. a whistle-blower has come forward and named the person)?
3. Please answer yes or no. In January 2025 was your Trust conducting any… internal review / investigation / report being compiled… into a nurse that has had concerns raised about him or her (i.e.. a whistle-blower has come forward and named the person)?
4. Please answer yes or no. Has your Trust conducted / started or concluded an internal or external review / investigation of a medical member of staff since January 1st 2023 following a whistle-blowers or patient raising concerns?
5. Please answer yes or no. If you answered yes to question 4 – did the member of medical staff being investigated continue to have contact with patients whilst the… review/investigation/report being written… was ongoing?
6. If you answered yes to Question 4, is the member(s) of staff that was investigated / reviewed still working at your Trust following the review conclusions?
7. If you answered yes to Question 4, for those reports that have concluded, was the member of staff that was investigated / reviewed found to have fallen short of the standards your Trust would expect from their medical staff?
8. If you answered yes to Question 4, how many members of medical staff were reviewed/ investigated following an internal whistle-blower raising concerns?
9. If you answered yes to Question 4, was the whistle-blower also investigated?
10. Please answer yes or no. Do you have any experience of a malicious whistle-blower? If yes, please share further details if able.
11. Please share any review conclusions / reports / write ups where possible.
12. Please share any further details of your whistle-blower policy here. How do you manage whistle-blower when they raise concerns?

read more

Enterprise Application

The information I require relates to the organisation’s software contract, please send me the organisation’s primary contract around the types of contracts below.

I require the organisations to provide me with the following contract information relating to the following corporate software/enterprise applications:

A. Enterprise Resource Planning Software Solution (ERP) -this is the organisation’s main

ERP system and may include service support, maintenance and upgrades.

B. Primary Customer Relationship Management (CRM) Solution-this is the organisation’s main

CRM system and may include service support, maintenance and upgrades. Example of CRM systems the organisation may use could include Microsoft Dynamics, Front Office, Lagan CRM, Firm step

C. Primary Human Resources (HR) and Payroll Software Solution-this is the organisation’s main

HR/payroll system and may include service support, maintenance and upgrades. In some cases, the HR contract maybe separate to the payroll contract please provide both types of contracts. Example of HR/Payroll systems the organisation may use could include iTrent, Resource link.

D. The organisation’s primary corporate Finance Software Solution-this is the organisation’s main

Finance system and may include service support, maintenance and upgrades. Example of finance systems the organisation may use could include E-Business suite, Agresso (Unit4), eFinancials, Integra, SAP

In some cases you may come across contracts that provides service support maintenance and upgrades separate to the main software contract, please also provide this information in the response following the requested data below.

For each of the categories above can you please provide me with the relevant contract information listed below:
1. Software Category: ERP, CRM, HR, Payroll, Finance

2. Name of Supplier: Can you please provide me with the software provider for each contract?

3. The date in which these applications were implemented

4. The brand of the software: Can you please provide me with the actual name of the software. Please do not provide me with the supplier’s name again please provide me with the actual software name.

5. Description of the contract: Please do not just state two to three words can you please provide me with detailed information about this contract and please state if upgrade, maintenance and support is included.

Please also include any modules included within the contract as this will support the categories you have selected in question 1.

6. Number of Users/Licenses: What is the total number of user/licenses for this contract?

7. Annual Spend: What is the annual average spend for each contract?

8. Contract Duration: What is the duration of the contract please include any available extensions within the contract.

9. Contract Start Date: What is the start date of this contract? Please include month and year of the contract. DD-MM-YY or MM-YY.

10. Contract Expiry: What is the expiry date of this contract? Please include month and year of the contract. DD-MM-YY or MM-YY.

11. Contract Review Date: What is the review date of this contract? Please include month and year of the contract. If this cannot be provided, please provide me estimates of when the contract is likely to be reviewed. DD-MM-YY or MM-YY.

12. Contact Details: I require the full contact details of the person within the organisation responsible for this particular software contract (name, job title, email, contact number).

read more

Information on Friends and Family Test Survey Contract

Under the Freedom of Information Act, could you kindly provide details in respect to your contract for Friends and Family Test Surveys.

1.Are you currently using a 3rd party provider platform to manage the FFT surveys ?, if so please provide the name?
2.Actual spend from the Start of the contract to the current date with costs detailed per annum.
3.Initial Start date of the contract?
4. Expiry date of the original contract?
5. Is there an extension option in the contract ? How many extension terms are available ? and what stage of extensions are you currently on ?
6. If nearing extension has a decision been made on extending the contract and to what period?
7. The pay bands of staff and Whole Time Equivalents directly responsible for the management of the Friends and Family Test.
8. Kindly advise on all the methods of collecting feedback used : ( For example, online survey,telephone survey, sms outbound and inbound , paper forms). Including volumes of each.
9.Name & Job Title of the senior staff (outside of procurement) responsible for this contract?

read more

511-2023

What is the approximate size of the population you serve?
How many staff do you currently employ?
How many AHPs do you currently employ?
What AHP services do you offer?

read more