UK GDPRHealthcare

University Hospital of Southampton NHS Foundation Trust

Data Subject Rights

Authority

ICO

Country

United Kingdom

Date Issued

March 24, 2024

Industry

Healthcare

Summary

The ICO issued a reprimand to University Hospital of Southampton NHS Foundation Trust for failing to respond to 59% of Subject Access Requests within the statutory 30-day timeframe during the period from August 2022 to July 2023, violating UK GDPR data subject rights obligations.

Violation Types

Data Subject Rights

Articles Violated

View original enforcement decision

Related Enforcement Actions

Reddit, Inc.

ICO · UK GDPR · February 22, 2026

€17M

Capita plc and Capita Pension Solutions Ltd

ICO · UK GDPR · October 14, 2025

€16M

TikTok Inc.

ICO · UK GDPR · May 14, 2023

€15M

Advanced Computer Software Group Limited

ICO · UK GDPR · March 25, 2025

€4M

LastPass UK Ltd

ICO · UK GDPR · November 19, 2025

€1M

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.

Talk to an Expert