Freedom of information and environment policy
The Freedom of Information Act and its application.
The NHS Counter Fraud Authority (NHSCFA) supports the Government’s commitment to greater openness in the public sector, furthering the aims of the Freedom of Information Act 2000. Enabling members of the public to apply to access key documents, to scrutinise and question the decisions of public authorities more closely and judge whether functions performed, or services provided are properly delivered.
NHSCFA wishes to facilitate a climate of openness and dialogue with all stakeholders, to improve access to information about the organisation that will help support this aim. NHSCFA will make such information available in a range of formats, required to meet the needs of the individual requesting the information.
NHSCFA recognises that individuals also have a right to privacy and confidentiality. This policy does not overturn the common law duty of confidentiality or the statutory provisions that prevent disclosure of person identifiable information. The release of such person identifiable information is covered by the General Data Protection Regulation (GDPR) 2016 and the Data Protection Act 2018 and is dealt with in associated information governance policies.
This document outlines the Freedom of Information and Environmental policy for the NHSCFA.
The purpose of this policy is to ensure that the provisions of the Freedom of Information Act 2000 and the Environmental Information Regulations 2004 are adhered to. Both regimes have been fully in force since 1 January 2005.
The Minister for the Cabinet Office under section 45 and the Secretary of State under section 46 of the Freedom of Information Act, have issued codes of practice. These provide guidance to relevant public authorities as to the practice which in their opinion, would be desirable for authorities to follow in connection with the discharge of their functions under Part 1 of the Act; as well as the practice to be followed in connection with the keeping, management and destruction of their records.
The purpose of this policy is to ensure timely access to information held by the NHSCFA to promote greater openness, provide increased transparency of decision making and to build public trust and confidence. These aims will be balanced against the need to ensure the confidentiality of some information relating to areas such as personal privacy, operational and/or commercial sensitivity and where disclosure would not be in the public interest.
The policy and procedure will be reviewed periodically by the NHSCFA Senior Management Team (SMT), with recommendations made to the Board. Where review is necessary due to legislative change this will be undertaken immediately.
In line with NHSCFA policies this policy will not discriminate, either directly or indirectly, on the grounds of gender, race, colour, ethnic or national origin, sexual orientation, marital status, religion or belief, age, union membership, disability, offending background or any other personal characteristic.
The main features of the Act are:
This chamber is one of 7 chambers of the First-tier Tribunal which settles legal disputes and is structured around particular areas of law. The chamber is responsible for handling appeals against decisions made by government regulatory bodies in cases relating to information rights.
The main features of the Regulations are:
Section 19 of the Act makes it the duty of every public authority to adopt a Publication Scheme approved by the Commissioner and proactively publish the information of the authority.
NHSCFA has adopted the Model Publication Scheme issued by the Information Commissioner in 2015, which gives an overview of the information that the organisation publishes and intends to publish in the future. It details the format in which the information is available and whether a charge will be made for the provision of that information.
The Publication Scheme is available on the NHSCFA website https://cfa.nhs.uk The organisation’s compliance with the requirement to publish information as set out in the ICO’s guidance will be regularly reviewed by the Information Governance and Risk Management Lead and the content of the website will be updated accordingly.
Information in the Publication Scheme will be made automatically and proactively available. In most cases information which is made available via the Publication Scheme will be downloadable from the website. In the event that an enquirer is unable to download the information, applications for the information to be supplied in another format may be made verbally or in writing.
Charges and fees will only be levied in exceptional circumstances, for example where large volumes of hard copy materials are requested, in which case the NHSCFA will follow the Fees Regulations . In general, no charge will be made.
The NHSCFA has established systems and procedures in place to ensure that the organisation complies with the duty to respond to requests within 20 working days of receipt, in accordance with Section 10 of the Act. All staff are required to comply with the requirements of these procedures by ensuring that requests are forwarded to the appropriate persons in a timely manner.
Section 102 of the Protection of Freedoms Act 2012 adds new provisions to the Freedom of Information Act (section 11) regarding datasets.
A dataset consists of a collection of information held in electronic form, which has been obtained or recorded for the purpose of providing information in connection with the provision of a service or the carrying out of any function of the authority.
It is factual information which is not the product of analysis or interpretation other than calculation. It is not statistical information and remains presented in a way (other than forming part of the collection) that has not been organised, adapted or otherwise, materially altered since it was recorded.
The new provisions relate to how information is released and any information the NHSCFA holds as a ‘dataset’, which is a defined term in the new provisions. If the NHSCFA provides information that constitutes a dataset and the requester has expressed a preference to receive the information in electronic form, the organisation must provide it in a re-usable format so far as reasonably practicable.
In accordance with the Re-use of Public Sector Information Regulations 2015 a public authority has to make information and metadata available through standard licences and machine-readable formats wherever reasonably practicable.
Metadata is data that describes other data it is connected to, whether that data is video, photography, web pages, content or spreadsheets. It summarises basic information about data such as its author, date created, usage, file size etc.
The dataset provisions do not only create a duty under the Freedom of Information Act section 11(1A), for the NHSCFA to provide datasets in a form that is technically ‘capable of re-use’, but also a duty under section 11A (2) to provide datasets that are relevant copyrighted works under a license that permits re- use. These provisions do not remove those rights and any third party rights also need to be taken into consideration.
The NHSCFA will grant re-use of any datasets that it owns/holds under the Open Government License (OGL) that can be re-used without charge.
The NHSCFA regards the lawful and correct management of all its information as critical to the success of its functions and to maintaining the confidence of those with whom it works and provides services to.
We must ensure that at all times the NHSCFA manages this resource lawfully and correctly. The NHSCFA acknowledges its obligations as set out under the Freedom of Information Act and the Environmental Information Regulations. It fully endorses the requirement to provide greater accessibility to all information, thereby promoting a culture of openness, enabling greater public scrutiny.
The NHSCFA accepts everyone has a general right of access to information it holds and therefore the following rights as set out within the Act will be adhered to:
The NHSCFA will not release information to which any of the exemptions detailed in the Act and set out below applies.
Procedural Exemptions (no requirement to consider the test for public interest):
Absolute Exemptions (no requirement to consider the test for public interest):
Qualified Exemptions (consider whether it is in the public interest to disclose the information):
If access to information is refused because of an exemption, the applicant has a right to appeal against the decision for it to be reviewed. This will initially be dealt with by NHSCFA’s Information Governance and Risk Management Lead. If the appeal is not resolved, the applicant will have the right to appeal to the Information Commissioner (IC) for an independent review. The NHSCFA also has the right to appeal to the Information Commissioner in regard to a complaint or appeal from an applicant.
Note: An appellant can appeal to the Information Commissioner at any time during the processing of their request, but it is unlikely they will accept the appeal unless the requester has exhausted all of the NHSCFA’s internal appeals processes.
Information that can be downloaded from the NHSCFA’s website will be free of charge. The NHSCFA aims to publish as much relevant information on its website as possible. There may be additional charges for work undertaken to obtain and provide the information requested, where information is not included within our publication scheme or where considerable expense will be involved in enabling the release of this information. The charges for these will not exceed the level prescribed by the Fees Regulations.
Where NHSCFA has existing processes in place for providing information to members of the public and other persons, these will not be superseded by this policy. Requests for information generated as part of NHSCFA’s existing processes may be answered as ‘business as usual’ if it is deemed reasonable to do so.
Requests for information outside of ‘business as usual’ processes, or those specifically defined as FOI requests, will be managed by the Information Governance Team within the Finance and Corporate Governance Unit.
To meet all of the requirements of a valid Freedom of Information request as outlined in section 8 of the Act, a request must:
The term ‘in writing’ covers requests submitted by letter and electronic means, including those sent via social media (e.g. Twitter and Facebook). The request does not have to make any direct reference to the Freedom of Information Act or be the sole or main theme of the requester/applicant’s correspondence.
We will only accept applications to exercise the general right of access under the Act if it is clear that you are applying from a valid email address and using your real identity to do so. Where doubt is cast on this matter you will be asked to provide further information until we are satisfied that you meet these requirements.
Under sections 16 and 45 of the Freedom of Information Act, the NHSCFA has a duty to provide advice and assistance to individuals making requests. NHSCFA will endeavour to undertake all reasonable steps to meet this obligation.
NHSCFA recognises that in some cases the disclosure of information pursuant to a request may affect the legal rights of a third party, for example where the information is subject to the common law duty of confidentiality. Unless an exemption applies in relation to any particular information, NHSCFA will be obliged to disclose the information in response to a request.
Where disclosure of information cannot be made without the consent of a third party and would constitute an actionable breach of confidence such that an exemption would apply, NHSCFA will consult that third party with a view to seeking their consent, unless such consultation is impracticable.
NHSCFA will undertake consultation where:
NHSCFA may consider that consultation is not appropriate where the cost of consulting with the third party would be disproportionate. In such cases it will consider the most reasonable course of action to take in light of the requirements of the Act. Consultation will be not be necessary where:
Where the interests of a number of third parties may be affected by a disclosure and those parties have a representative, the NHSCFA if it considers consultation appropriate, may consider that it would be sufficient to only contact some of those third parties.
If an approached third party does not respond to a consultation request, it does not relieve NHSCFA of its duty to disclose information under the Act, or its duty to reply within the specified timeframes. In all cases, it is for NHSCFA not the third party, to determine whether or not information should be disclosed. A refusal to consent to disclosure by a third party does not automatically mean the information will be withheld.
It is acknowledged that as a public authority, justification may exist in certain circumstances exist for the disclosure of certain employee names and contact details.
Information regarding remuneration of NHSCFA employees, will where appropriate be published on the website as part of our existing publication scheme. This will be provided where applicable, by providing Agenda for Change pay bands.
In addition to proactively updating its Publication Scheme, NHSCFA will maintain an online disclosure log that identifies the main types of requests received and the responses given.
A disclosure log lists responses to requests made to us under the Freedom of Information Act and Environmental Information Regulations which are felt to be of wider public interest.
NHSCFA will assess each response to determine if it should be published in the disclosure log and will make a judgement accordingly by using the following criteria:
The NHSCFA recognises its responsibility under the Freedom of Information Act to provide a general right of access to information held. Overall responsibility for this policy rests with the Board.
Section 77 of the Freedom of Information Act makes it an offence for any person to alter, deface, block, erase, destroy or conceal any record held by the public authority, with the intention of preventing the disclosure by that authority of all, or any part of the information, the communication of which the applicant would have been entitled.
The Board have delegated adherence to the provisions of the Freedom of Information Act and the Environmental Information Regulations to the Information Governance and Risk Management Lead.
The Information Governance and Risk Management Lead’s responsibilities include:
Penalties can be imposed upon the NHSCFA and all staff, including temporary and contract staff can be penalised for breaching the Act.
All employees have a legal duty to preserve business records; ensuring information is recorded correctly, accurately and appropriately named (or indexed) for easy retrieval or publication. Poor records management practices which do not facilitate the proper preservation of information records are not offences in themselves, however this may lead to an inability to comply with requirements of the Freedom of Information Act.
All employees are responsible for ensuring that any request for information they receive is dealt with under the Act in compliance with this policy.
This policy is designed to avoid discrimination and comply with the provisions of the Human Rights Act 1998 and the Equality Act 2010.
This policy will be reviewed at least biennially under the authority of the NHSCFA Board. Associated Freedom of Information and Environmental Information Regulation standards will be subject to ongoing development and review.
Was this page helpful?
Tell us what's happened so we can fix the problem. Please do not provide any personal, identifiable or sensitive information.