King's College Hospital NHS Foundation Trust

The complainant has requested a KPMG report (the report) about a cyberattack suffered by an organisation that provides pathology services to King’s College Hospital NHS Foundation Trust. (Trust) The Trust disclosed a heavily redacted copy of the report, but withheld the remaining information citing section 41 of FOIA (Information provided in confidence). The Commissioner’s decision is that based on the circumstances of the case and the nature or information that has been withheld, the Trust should have relied on section 31 of FOIA to withhold the information. The Commissioner does not require further steps to be taken.