Gloucestershire Health and Care- NHS Trust logo
with you, for you
Corporate Governance > Personal Data Breaches

Freedom of Information request Personal Data Breaches

Response published: 28 August 2026
Corporate Governance | Serious Incidents

FOI Request

Dear Foi team, Thanks you for your previous foi response- see below. I have looked at the board papers you referenced and it says: During the year ended 31 March 2025 a total of 187 breaches in relation to information governance were reported in line with the Trust’s incident reporting policy. A ‘personal data breach’ under General Data Protection Regulation Article 4 (12) is defined as ‘a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed’. There are three types of personal data breaches:  Confidentiality breach is unauthorised or accidental disclosure of, or access to, personal data.  Availability breach is an unauthorised or accidental loss of access to, or destruction of, personal data.  Integrity breach is an unauthorised or accidental alteration of personal data. I would like to make a new FOI application to ask how many of those 187 data breaches involved the Pando App. I look forward to hearing back within 20 working day.

FOI Response

Freedom of Information Request – Ref: FOI 243-2026

Thank you for your recent Freedom of Information request. Please find our response below.

You asked:

How many of those 187 data breaches involved the Pando App.

Our response:

Clarification question/s sent on 28 July 2026, no response received within a month – FOI closed.

Next steps:

Should you have any queries in relation to our response, please do not hesitate to contact us. If you are unhappy with the response you have received in relation to your request and wish to ask us to review our response, you should write to:

Louise Moss
Head of Legal Services / Associate Director of Corporate Governance
c/o Gloucestershire Health and Care NHS Foundation Trust
Edward Jenner Court
1010 Pioneer Avenue
Gloucester Business Park
Brockworth, GL3 4AW
E-mail: louise.moss@ghc.nhs.uk

If you are not content with the outcome of any review, you may apply directly to the Information Commissioner’s Office (ICO) for further advice/guidance. Generally, the ICO will not consider your case unless you have exhausted your enquiries with the Trust which should include considering the use of the Trust’s formal complaints procedure. The ICO can be contacted at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.