The complainant has requested information relating to the hereditary angioedema (HAE) service at University College London Hospitals NHS Foundation Trust (Trust). The Trust provided some information but redacted other information relying on section 40(2) (third party personal data) and section 43(2) (prejudice to commercial interests) of FOIA. The Commissioner’s decision is that the Trust has correctly relied on section 40(2) to withhold the third party personal data, has not demonstrated that section 43(2) of FOIA applies to the remaining withheld information; and on the balance of probabilities, does not hold any further information falling within the scope of the request. The Commissioner requires the Trust to disclose to the complainant the information that the Trust has relied on section 43(2) to withhold.