The complainant has requested information relating to the hereditary angioedema (HAE) service at University College London Hospitals NHS Foundation Trust (the Trust). The Trust provided some information but redacted other information relying on section 40(2) of FOIA (exemption for third party personal data). The Commissioner’s decision is that the Trust has correctly relied on section 40(2) of FOIA to withhold the redacted information. The Commissioner also finds that, on the balance of probabilities, the Trust does not hold any further information falling within the scope of the request. The Commissioner does not require the Trust to take any further steps as a result of this decision notice.