ICO The complainant has requested a copy of an internal audit report into the Electronic Patient Records (EPR) system. The Trust has disclosed the majority of the report but has applied the section 40(2), 43(2) and 36(2) exemptions to withhold the remaining information. The Commissioner decision is that the section 43(2) exemption is not engaged and the public interest favours disclosing information withheld under the section 36(2) exemption. He has also concluded that the section 40(2) exemption is not engaged in relation to the information withheld on page 9 of the EPR report. He therefore requires the Trust to disclose the information withheld on pages 6, 7, 9 and 11 of the EPR report. The Commissioner has also found that the information withheld on pages 16 and 20 does not engage the section 40(2) exemption and should therefore be disclosed. The information withheld on page 22 -‘ the list of interviewees -‘ does engage the section 40(2) exemption and the Trust has correctly withheld this information. The Commissioner requires the public authority to disclose the information withheld on pages 6, 7, 9, 11, 16 and 20 of the EPR report.
Section of Act/EIR and Finding: FOI 36 – Complaint Upheld, FOI 40 – Complaint Partly Upheld, FOI 43 – Complaint Upheld
 UKICO FS50514631
England and Wales
Updated: 06 December 2021; Ref: scu.527771