FOI release

Freedom of Information request (FOI 22/1077)

Published 17 January 2024

4th November 2022

FOI 22/1077

Dear

Thank you for your information request dated 31st October 2022, where you asked the following information:

MHRA/CPRD has agreed that this report by NHS Digital is accurate:

https://digital.nhs.uk/services/data-access-request-service-dars/data-sharing-audits/2022/data-sharing-remote-audit-cprd

Relating to that report, under the Freedom of Information Act, can you please provide:

1) The terms of reference and findings of the “Risk of re-identification” analysis described in the above audit report;

2) A copy of the most recent audit by CPRD of a data recipient, and copies of the “email answers” provided by the body being audited;

3) A list of all data recipients who have been audited so far.

Regarding Question 1:

I can confirm that we do not hold the information requested.

As the audit was conducted by NHS Digital please contact NHS Digital for the information requested as they may be able to provide the information you requested.

Regarding Question 2:

A redacted copy of the most recent audit is attached to this response.

Redactions have been made where disclosure would be likely to prejudice the commercial interests of any person (Section 43 – Commercial Interests), contains personal data which would identify a living person (Section 40 – Personal information) or contains trade secrets (Section 43 – Commercial Interests).

As the report contains a direct copy of all the “email answers” within the document, the emails requested have not been provided (Section 21 – Information Accessible by Other Means).

Regarding Question 3:

The information is exempt under Section 21 of the FOIA - Information accessible by other means.

The information you have requested is already published on the CPRD website - [Data use audits CPRD](https://cprd.com/data-use-audits)

If you are dissatisfied with the handling of your request, you have the right to ask for an internal review. Internal review requests should be submitted within two months of the date you receive this response and addressed to: info@mhra.gov.uk

Please remember to quote the reference number above in any future communications.

If you were to remain dissatisfied with the outcome of the internal review, you would have the right to apply directly to the Information Commissioner for a decision. Please bear in mind that the Information Commissioner will not normally review our handling of your request unless you have first contacted us to conduct an internal review. The Information Commissioner can be contacted at:

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Yours sincerely,

MHRA Customer Experience Centre Communications and engagement team Medicines and Healthcare products Regulatory Agency 10 South Colonnade, Canary Wharf, London E14 4PU
Telephone 020 3080 6000