[Home] [Databases] [World Law] [Multidatabase Search] [Help] [Feedback]
	First-tier Tribunal (General Regulatory Chamber)
You are here: BAILII >> Databases >> First-tier Tribunal (General Regulatory Chamber) >> Ryan v Information Commissioner & Anor [2024] UKFTT 580 (GRC) (05 July 2024) URL: http://www.bailii.org/uk/cases/UKFTT/GRC/2024/580.html Cite as: [2024] UKFTT 580 (GRC)

[New search] [Printable PDF version] [Help]

First-tier Tribunal
General Regulatory Chamber
Information Rights

		On: 8 December 2024
		Decision Given On: 5 July 2024

Decision

1. The appeal is Dismissed.
REASONS

Background and Request

2. This appeal is brought under section 57 of the Freedom of Information Act 2000 ("FOIA") against the Commissioner's Decision Notice dated 5 December 2022 ("the DN") with reference IC-146236-ROF1 which is a matter of public record.
3. The Tribunal conducted a hearing by CVP and considered an Open Bundle ("OB") of 921 pages, a Closed Bundle ("CB") of 384 pages and Skeleton Arguments from Mr Ryan and Mr Hopkins, on behalf of NHS England ("NHSE").
4. It is necessary to withhold the information in the closed bundle because it contains the withheld information and to do otherwise would defeat the purpose of the proceedings.
5. The Closed Bundle included unredacted versions of the withheld information, correspondence between NHSE, the third party healthcare providers and the Commissioner as part of the Commissioner's investigation.
6. The Tribunal heard a submission from Mr Hopkins, on behalf of the NHSE, and a submission and evidence from Mr Ryan.
7. In reaching its decision the Tribunal took into account all the evidence before it and made findings on the balance of probabilities.
8. The full details of the background to this appeal, the Mr Ryan's request for information and the Commissioner's decision are set out in the DN.
9. On 6 April 2021, Mr Ryan made a FOIA request to NHSE in the following terms:

"1. Invoicing documents

In relation to the national contracts with the private hospital sector for the provision of additional healthcare capacity, in the period March 2020 to the date of receipt of this request, could I be provided with:

A) invoices,

B) 'reconciliation/validation reports', and

C) payments made;

To and from Circle Health and Spire Healthcare.

In effect, I would like to receive the costs submitted to NHSE by these providers (the invoices), information on how that figure was adjusted based on private activity or other parameters (reconciliation reports) and the sums of money that were ultimately paid out (payments made).

I would expect to receive the original documents or datasets, rather than figures extracted from them.

I would expect the information to be provided in the form of machine-readable digital documents, i.e. word documents or searchable PDF. I would prefer not to receive scanned or photocopied documents, even in digital form, that cannot be searched, but would accept an alternative format if this would incur significant processing time or costs.

2. Cost-benefit analysis dataset/s

Could I also be provided data on the financial impact and value for money of these contracts, in relation to all providers on the national contract for the period March 2020 and the date of receipt of this request. At minimum, this should record the payments made to each provider each month or week.

I would prefer to receive the information in its natural format, i.e. a full copy of whatever dataset the department itself uses to track and analyse the financial impact and value for money on these contracts.

This could be in the form of a curated spreadsheet, an export from financial management software, exports from internal databases or reports prepared for internal consumption. And while I would expect the minimum dataset to record amounts paid to each provider, when the department carries out an analysis of the cost-benefit of these contracts I might also expect to see other fields of data such as: amounts billed, amounts paid, data on provider capacity, provider activity etc.

I appreciate that some of this data may be incomplete in light of the fact contracts are only recently terminated, and in particular the validated final payments. If this is the case, I would like to receive whatever is available on the date of receipt this request.

In summary, I would like to receive the same dataset that the authority uses to analyse the financial impact of these contracts. I cannot be more precise, because the department hasn't furnished the public in general, or me personally with the information to do so."

10. On 26 August 2021 the NHSE provided its response to the Request and on a couple of occasions during the Commissioner's investigation. Mr Ryan was provided with or sent a link to the following information:

a) Payments made to Circle Health and Spire Health, referred to as 'Published

Spend' in NHSE's Response;

b) Redacted copies of KPMG's Validation Reports with redactions under ss 40(2) and 43(2) FOIA and 41(1) FOIA;

c) Unredacted activity dataset of each independent service provider, referred to

as the 'Activity Data Set' in the NHSE's Response.

11. The NHSE asserted that it was withholding the actual invoices under section 31(1) FOIA as well as maintaining the reliance on section 40(2), section 43(2) and section 41 in respect of the redactions to the KPMG Validation Reports. NHSE believed the same information was exempt under section 43(2) and section 41 and the redacted Validation Reports reflect this. NHSE confirmed it did not hold anything further in scope of Part 2 of the request.

The Decision Notice

12. On 5 December 2022 the Commissioner issued the DN. The decision was as follows:

• NHS England is entitled to withhold entire copies of the actual invoices it holds under section 31(1) of FOIA and the public interest favours maintaining the exemption in that respect. However it would be possible to disclose a little of the information in each of the invoices – as presented in each invoice - without the risk of potential fraud occurring. Section 31(1) is not engaged in respect of that specific information.

• NHS England is entitled to withhold the validation reports under section 43(2) and the public interest favours maintaining this exemption.

• NHS England breached section 10(1) and section 17(1) as it did not communicate the information it held to the complainant or issue a refusal notice in respect of exempt information, within the required timescale of 20 working days following the date of receipt of the request.

The Commissioner requires NHS England to take the following step to ensure compliance with the legislation:

• Disclose the 'Line 1' information in the requested invoices as this information is presented in those invoices, and as discussed in paragraphs 17-21 of this notice.

NHS England must take this step within 35 calendar days of the date of this decision notice. Failure to comply may result in the Commissioner making written certification of this fact to the High Court pursuant to section 54 of the FOIA and may be dealt with as a contempt of court.

13. On 25 May 2023 Mr Ryan appealed the Commissioner's DN.

Legal Framework

14. Section 1(1) FOIA provides that any person making a request for information to a public authority is entitled (a) to be informed in writing by the public authority whether it holds information of that description and (b) if so, to have that information communicated to him.
15. Part II of the Act contains a range of exemptions from the general right of access to

information in section 1(1) FOIA.

16. Section 43 FOIA provides as follows:

(1) Information is exempt information if it constitutes a trade secret.

(2) Information is exempt information if its disclosure under this Act would, or

would be likely to prejudice the commercial interests of any person (including

the public authority holding it).

17. In Department for Work and Pensions v Information Commissioner & Zola [2016]

EWCA Civ 758, the Court of Appeal endorsed the First-tier Tribunal's analysis in

Hogan & Oxford City Council v Information Commissioner [2011] 1 Info LR 588 as

providing the correct approach to the issue of prejudice in this context

"29. First, there is a need to identify the applicable interest(s) within the

relevant exemption…

30. Second, the nature of the "prejudice" being claimed must be considered.

An evidential burden rests with the decision maker to be able to show that some causal relationship exists between the potential disclosure and the prejudice and that the prejudice is, as Lord Falconer of Thoroton has stated, "real, actual or of substance" (Hansard HL, Vol. 162, April 20, 2000, col. 827). If the public authority is unable to discharge this burden satisfactorily, reliance on "prejudice" should be rejected. There is therefore effectively a de minimis threshold which must be met…

…

34. A third step for the decision maker concerns the likelihood or occurrence of prejudice. A differently constituted division of this Tribunal in John Connor Press Associates Limited v Information Commissioner (EA/2005/0005) interpreted the phrase "likely to prejudice" as meaning that the chance of prejudice being suffered should be more than a hypothetical or remote possibility; there must have been a real and significant risk. That Tribunal drew support from the decision of Mr Justice Munby in R (on the application of Lord) v Secretary of State for the Home Office [2003] EWHC 2073 (Admin), where the comparable approach was taken to the construction of similar words in the Data Protection Act 1998 . Mr Justice Munby stated that "likely": connotes a degree of probability where there is a very significant and weighty chance of prejudice to the identified public interests. The degree of risk must be such that there "may very well" be prejudice to those interests, even if the risk falls short of being more probable than not".

35. On the basis of these decisions there are two possible limbs on which a prejudice-based exemption might be engaged. Firstly, the occurrence of prejudice to the specified interest is more probable than not, and secondly there is a real and significant risk of prejudice, even if it cannot be said that the occurrence of prejudice is more probable than not."

18. 'Commercial interests' should be interpreted broadly. The ICO Guidance states that a commercial interest relates to the ability to participate competitively in a commercial activity.
19. The exemption is prejudice based. 'Would or would be likely to' means that the prejudice is more probable than not or that there is a real and significant risk of prejudice. The public authority must show that there is some causative link between the potential disclosure and the prejudice and that the prejudice is real, actual or of substance. The harm must relate to the interests protected by the exemption.
20. Section 31 FOIA provides an exemption for information relating to law enforcement. Amongst other things, information will be exempt if its disclosure would, or would be likely to, prejudice the prevention or detection of crime (section 31(1)(a)).
21. The public interest test: sections 43 and 31 FOIA are "qualified" exemptions meaning that, where they are engaged, the right to have information communicated under section 1(1)(b) FOIA does not apply "if or to the extent that…in all the circumstances of the case, the public interest in maintaining the exemption outweighs the public interest in disclosing the information".
22. On an appeal under section 57 FOIA the question for the Tribunal pursuant to section 58(1)(a) FOIA is whether the notice against which the appeal is brought is "in accordance with the law." The Tribunal is entitled to review any finding of fact on which the notice in question was based: section 58(2) FOIA. The Tribunal stands in the shoes of the Commissioner and takes a fresh decision on the evidence. The Tribunal does not undertake a review of the way in which the Commissioner's decision was made.

Grounds of Appeal

23. Mr Ryan set out the background to the request in his Grounds of Appeal documents at pages 24 to 27. In the light of the disclosure of information by the NHSE, Mr Ryan submits the focussed grounds of appeal as follows:

a) He began this request with a sincere desire to communicate with NHSE and to perform public interest research into a significant expense, on a problematic policy, during a time of national crisis.

b) He has not been 'advised and assisted' and has been mistreated throughout the process. NHSE has failed its basic function and, therefore, he does not know how to refine his request.

c) He did everything NHSE and its processes asked him to do.

d) His repeated requests would indicate that something is missing.

e) The scope of the request was not interpreted correctly.

f) There are issues with the application of section 31 to the invoices and the Commissioner has overestimated the prejudice arising from disclosure.

g) Section 43 the public interest in disclosure outweighs public interest in maintaining the exemption.

h) The 'Line 1" information provided is not new information and is the same information published as part of the NHSE's 'spend over £25K records.' He is surprised that the request for detailed information about the billing process could result in the production of information which is already in the public domain.

i) More information under Part 2 of the Request should be held. In relation to the second part of his request he expected this to be a summary of both costs and of what was delivered under the contract which officials were using to track expenditure and plan for how to use the healthcare resources they had purchased.

j) If there is concern about fraudulent use by providing copies of invoices then this could be avoided by disclosing redacted copies while leaving the content intact rather than withholding the entire documents. The headers, footers and other details could be redacted.

k) It is not clear whether there is further 'Line 2' information which forms part of the invoices but has been withheld under section 31.

l) He understands that it would be extraordinary to receive detailed invoices and auditors reports about the internal affairs of a private business but this was an extraordinary contract.

m) There is public interest in the information being disclosed because the taxpayer was picking up the tab for a whole array of internal costs such as payroll, goods and services, finance costs, rent and capital expenditure. The NHSE has failed in its promise of transparency and this should be corrected by disclosure of the dispute information releasing detailed breakdowns of what taxpayers paid for and what they received in return in order to provide scrutiny, transparency and accountability.

n) In relation to commercial interests as the entire private hospital sector was on exactly the same contract it is hard to argue that there is any particular effect of competitors getting some unique insight into how this contract operated.

The Commissioner's Response

24. The Commissioner submits the following grounds:

a) The Commissioner found NHSE were entitled to withhold entire copies of the actual invoices it holds under section 31(1) of FOIA and the public interest favours maintaining the exemption in that respect. However it would be possible to disclose a little of the information in each of the invoices – as presented in each invoice – without the risk of potential fraud occurring. The Commissioner understands NHSE provided this information to the Mr Ryan on 9 January 2023.

b) The Commissioner found NHSE entitled to withhold the redactions to the Validation Reports under section 43(2) and the public interest favours maintaining this exemption. The Commissioner did not address s41 in his DN as he decided to investigate reliance on s43 first, which he was entitled to do so. The Commissioner also noted some redactions to personal data in the Validation Reports which are not disputed by any party.

c) The Commissioner found NHSE breached section 10(1) and section 17(1) as it did not communicate the information it held to the Mr Ryan or issue a refusal notice in respect of exempt information, within the required timescale of 20 working days following the date of receipt of the request.

d) The Commissioner and NHSE interpreted the scope of the request and this ground of appeal should be dismissed.

e) The Commissioner rejects the ground that NHSE should have provided advice and assistance.

f) The Commissioner is satisfied with the explanation provided by NHSE why no further information is held under Part 2 of the request. This was not considered in the DN so is outside the scope of the Tribunal's jurisdiction.

g) The Commissioner agreed with NHSE's arguments for applying section 31 in relation to the original documents and the public interest favoured maintaining the exemption. In any event the Line 1 information has been disclosed without redactions so this ground should be rejected.

h) The Commissioner maintains the public interest in maintaining section 43 outweighs the public interest in disclosure. This ground of appeal should be dismissed.

NHSE's Response

25. The NHSE submits the following grounds:

a) NHSE has disclosed the so-called "line 1" information from each invoice, namely the costs submitted to NHSE by Circle Health and Spire Healthcare over the relevant period. The term "line 1" should not be read overly literally: NHSE disclosed all lines from all relevant invoices that contained information on the sums claimed by the invoicing provider. This information tells Mr Ryan, on an invoice-by-invoice basis, what sums each provider claimed for.

b) Mr Ryan argues that the invoices must have contained more data beyond the line 1 information that has been disclosed to him. NHSE has confirmed to him that this is not correct. The IC has considered the relevant invoices and concurs. The Tribunal is invited to consider examples of invoices in the closed bundle and to concur likewise. This aspect of Mr Ryan's appeal is misplaced.

c) NHSE withheld the remaining information that would be disclosed by means of copies of the invoices themselves, in reliance on section 31(1)(a) FOIA. The concern is that disclosure of copies of original invoices would be likely to assist those seeking to submit fraudulent invoices to NHSE, because they would know how to make their fraudulent invoices look as authentic as possible. This concern was borne out by actual experience. This ground of appeal is misguided. Mr Ryan does not explain what additional information he requires from the invoices. FOIA applies to information rather than documents per se.

d) The public interest favours maintaining the exemption of section 31(1)(a) FOIA. No good would be served in disclosing copies of actual invoices and would create a risk of attempts at fraud.

e) The appeal should be dismissed. Mr Ryan and the public have all the relevant information from the invoices i.e. the amounts for which the two private healthcare providers claimed.

f) NHSE did not unquestioningly make payment in the invoiced amounts. It scrutinised whether each sum claimed by the private healthcare providers was justified. It did so by commissioning KPMG to assess the invoiced sums against granular cost data submitted by the relevant providers. In relation to the period and providers covered by Mr Ryan's FOIA request, there were 12 such reports. These are the adjustment reports that NHSE has disclosed to Mr Ryan in redacted form.

g) The costing data has been withheld in reliance on sections 41(1) FOIA (actionable breach of confidence) and 43(2) FOIA (prejudice to the commercial interests of the providers and also NHSE). The IC's analysis focused on section 43(2): he was satisfied that the exemption applied and did not need to consider section 41(1). NHSE maintains that the information redacted from the adjustment reports is exempt under both of those exemptions.

h) It is clear from the unredacted versions of the adjustment reports that the redacted information comprises detailed cost data provided to KPMG (and thus NHSE) by the two providers to demonstrate that the sums they were claiming were properly payable according to the detailed payment provisions of their contracts with NHSE. That is precisely the sort of information that falls within the contractual confidentiality provisions imposed by contract. Such information goes to the heart of a business' commercial interests.

i) Section 41(1) FOIA is engaged and is an absolute exemption, The redacted information is exempt. Unless Mr Ryan can establish a public interest in disclosure that would be strong enough to defeat an action for breach of confidence. That is a high hurdle: there is a presumption that confidences will be respected. The public interest defence under section 41(1) FOIA entails a different test and more onerous test than the section 2(2)(b) FOIA public interest balancing test. That high hurdle is not met here, in particular because there is a wealth of other relevant information that would assist the public in understanding the sums claimed and the sums paid. Sums over £25k are and were published on a provider-by-provider, invoice-by-invoice, month-by-month basis in NHSE's publication scheme and the published contracts governing how payment worked.

j) If NHSE were to have disclosed in or around April 2021 the information it redacted from the KPMG adjustment reports for reasons unrelated to its FOIA obligations (which is the test laid down in section 41(1)), the providers would have been able to take action against NHSE for breach of confidence, and they would have been very likely to win.

k) The redacted information is exempt, also, under section 43(2) FOIA by reference to the providers' commercial interests as stated by the Commissioner:

"The payment mechanism under the contract was a cost-based formula designed to ensure transparency, consistency, and fairness across all private providers who contracted with NHS England. It required each independent service provider to submit detailed cost and revenue information to facilitate verification by an independent auditor (KPMG). This information, particularly that relating to rent, finance costs, staffing costs, supplier contracts, capital expenditures, and private patient revenue represents detail of the most significant drivers of the independent service providers' business models and cost-base. This detailed information is not currently in the public domain for the very reason that disclosing it would prejudice the independent service providers' commercial interests. The reports requested contain itemisation of individual costs, including staff salaries, rental costs for sites, and other cashflow items. Even the relative ratios of these costs are valuable financial information that could be used by competitors to understand a provider's operating model and cost base. The information contained within the reports gives insight into the operating cost base, including fixed and variable costs, which would all be valuable in the context of takeover bids and competitive tenders for services contracts. It also gives insight into staff costs, ratios and other highly sensitive information. This type of management accounting / business information is not available in the public domain, not even from published accounts, and is closely guarded by all commercial entities."

l) With reference to the commercial interests of NHSE the Commissioner noted as follows:

"This is because the terms of the contracts created a clear expectation of costing materials submitted to KPMG being used solely for the purposes of the payment reconciliation process, and not for any other purpose. NHSE says that if it were to disclose this information it would be seen by providers as a breach of trust and of the letter and spirit of their contract with NHSE. In turn, this would be likely to have an adverse impact on their willingness to enter into similar arrangements with NHSE which would be prejudicial to NHS's commercial interests as it would not be able to obtain 'value for money'."

m) At the time of Mr Ryan's FOIA request in April 2021 there was a real prospect of NHSE needing to enter into further arrangements comparable to those at issue in this appeal. Its ability to do so, or to do so on favourable terms, would have been harmed by the disclosure of the information NHSE has redacted from the KPMG adjustment reports.

n) Mr Ryan appears to accept that he seeks the public disclosure of highly sensitive commercial information.

o) The public already has ample information by which to assess what providers claimed, what they were actually paid, and how the contractual arrangements for their services and payments worked. The incremental benefit (if any) from the publication of the information redacted from these KPMG adjustment reports is much weaker than the harm that disclosure would cause.

p) In relation to the request for payments made this data has all been published on a provider-by-provider, invoice-by-invoice, month-by-month basis in NHSE's publication scheme.

q) The NHSE has made clear that it has provided the only information it holds in relation to the so-called "activity dataset." The NHSE does not hold any other information. NHSE holds information relating to invoice sums, KPMG's adjustment analysis of those invoices and the resulting payments.

r) The NHSE identified all of the recorded information it held that met Mr Ryan's request, and it disclosed it (subject to justifiable exemptions). It did not – and does not – need to engage in further dialogue on this request. Mr Ryan's insistence on dialogue is misplaced and has the character of an open-ended fishing expedition that FOIA does not require public authorities to facilitate.

s) Mr Ryan's vague speculations as to additional information he thinks was held and should have been disclosed lack foundation in fact or law. His reliance on section 16 FOIA takes matters no further, and while he understandably highlights the delays in NHSE's responses to his request and internal review communications (for which NHSE apologises), none of that demonstrates that NHSE holds any further information that, on a fair and objective reading of this request, it held and should have disclosed.

Discussions

26. Mr Ryan told the Tribunal that he had Autism but had received no diagnosis, had only spoken to his GP about this, was high functioning and required no reasonable adjustments at the hearing to enable him to engage fully.
27. At the hearing Mr Ryan argued that under section 16 the NHSE, like all regulators, had an obligation to assist him and he felt that if he had told the NHSE that he had Autism he would have been shown more consideration and received more help with his request. He expected to be advised about the breadth of his request and offered assistance in refining it. He believed that the duty under section 16 should include regard for his needs notwithstanding that he had no diagnosis and had not informed NHSE that he believed he was neurodivergent.
28. He expressed disappointment about the length of time it had taken for there to be disclosure.
29. Mr Ryan asked that the Tribunal satisfy itself that the invoices included in the Closed Bundle contained no other undisclosed information.
30. Mr Hopkins submitted that the duty on the NHSE under section 16 of FIOA was to provide advice and assistance "so far as it would be reasonable to expect" and this did not include making suggestions to Mr Ryan about what he might wish to request or what other requests he could make. Mr Hopkins referred to section 8(1)(c) FOIA which framed what a request is namely a "request for information" that describes the information requested. He submitted that this section does not describe a regime whereby a dialogue is opened in which a requester could make enquiries about what information may be available that would be of assistance. The regime of the FOIA requires a requester to state what information they want to receive. In relation to the section 16 duty Mr Hopkins submitted that this did not stretch to officers telephoning Mr Ryan and suggesting other lines of enquiry by way of assistance.
31. Mr Hopkins submitted that having disclosed the requested information, it was hard to know what else the NHSE could do.
32. Mr Ryan accepted that if Line 1 information was all the information available on the invoices he had received all the information in his request.

The Closed Hearing

33. The Tribunal conducted a closed session to ask questions of Mr Hopkins, on behalf of the NHSE. Mr Sivers asked two questions to assist the Tribunal relating to the invoices in the closed bundle. Mr Hopkins drafted The Gist of the closed session which was provided to Mr Ryan who stated that if all the information on the invoices had been disclosed he had all the information he required. The answers to the questions established that:

•    Although it was not known whether standard industry invoice documents were used in terms of layout and font or whether an NHSE template was used, it made no difference in relation to the S.30 concerns.

•    Weight should be attached to the providers' concerns that disclosure of granular cost data would impact negotiations with insurers who would gain insights into the providers' margins. This point was considered in Royal Marsden NHS Foundation Trust v IC ad Rowland (EA/2021/0047) and the prejudice to commercial interests for public disclosure of information relating to profit margins.

34. Mr Hopkins answered by reference to (i) the providers' own indications of concern about e.g. the impact of negotiations with insurers, who would gain insights into the providers' margins if they had sight of this granular cost data, and (ii) by way of practical illustration in Tribunal case law: the Royal Marsden case cited at para 29 of NHSE's skeleton, in which the Tribunal considered evidence of exactly that concern, i.e. how disclosure of cost data would prejudice a private provider's negotiations with insurers.

Conclusions

35. On an appeal under section 57 FOIA, the task for the Tribunal is to determine whether the DN is in accordance with the law (section 58(1)(a) FOIA). The Tribunal is entitled to review any finding of fact on which the notice in questions was based (section 58(2) FOIA).
36. In reaching its decision the Tribunal took into account all the evidence before it whether or not specifically referred to in this Decision. The Tribunal applied the legislation and case law as set out above.
37. The background to the Mr Ryan's request is that in the light of the strain on the capacity of NHS facilities during the Covid-19 pandemic in 2020 NHSE entered into contracts with private healthcare providers to reserve parts of their capacity. The contracts were entered into pursuant to the National Health Service Commissioning Board (Coronavirus) Directions 2020.
38. There is an example set of contractual documentation and those contracts specify the services covered and details of how payments would work (pages 696 to 713).
39. The Tribunal found that the contracts contained an express provision for certain information to be treated as confidential, for example, in clause 7 (pages 675, 826 and 847).
40. The Tribunal found that payments made under the contracts by NHSE were checked against invoices submitted by the private healthcare providers.
41. The Tribunal found that KPMG as auditors scrutinised the invoiced sums and the data relating to the sums claimed and the services provided and KPMG produced regular reconciliation reports.
42. The Tribunal found that the NHSE disclosed the 'Line 1' information from each invoice. This provided the costs submitted to the NHSE by Circle Health and Spire Healthcare over the relevant period in the Mr Ryan's request namely from March 2020 to 6 April 2021. The Tribunal found that the NHSE disclosed all the lines from the relevant invoices and provided information on the sums claimed by the invoicing providers. The information provided gives on an invoice-by-invoice basis what sums each provider claimed for.
43. The Tribunal considered the invoices in the Closed Bundle and found that having considered the relevant invoices they do not contain more data beyond the information provided.
44. The Tribunal finds that there was no confusion as to the scope of the request and what Mr Ryan was seeking. This was not mentioned in the DN, so it was not before the Tribunal in any event.
45. Mr Ryan sought the original documents rather than the data extracted from them. NHSE applied section 31 to all the invoices. The Commissioner agreed with the arguments for applying section 31 and that the public interest favoured maintaining the exemption.
46. The Commissioner decided that NHSE was entitled to withhold entire copies of the actual invoices under section 31(1) of FOIA and the public interest favours maintaining the exemption. The Commissioner required NHSE to disclose the 'Line 1' information in the requested invoices.
47. The Tribunal found that when the NHSE invoices were cross-referenced with the information about the same invoices in the public domain the useful information was the information in the 'Line 1' information. The Tribunal found that the 'Line 1' information was disclosed and that with this information Mr Ryan can compare what was invoiced with what was paid and that this satisfied his request.
48. The Tribunal found that section 31(1)(a) FOIA was engaged in relation to the original invoices submitted by Circle Health and Spire Healthcare because disclosure would be likely to prejudice the prevention or detection of crime.
49. The Tribunal found in relation to the public interest test that there is greater public interest in NHSE avoiding making payments against potentially fraudulent invoices and that public interest in transparency about the payments the NHSE makes is adequately met through the information published.
50. The Tribunal found that section 43(2) of FOIA is engaged in relation to the request for a 'reconciliation/validation report.' This is because disclosure would be likely to prejudice the commercial interests of any person including the NHSE. The Tribunal found that disclosing the validation reports would prejudice the commercial interests of Circle Health and Spire Healthcare. The redacted granular financial and operational information differed by provider and the fact that they were on the same contracts was irrelevant, but the Tribunal found that there was likely harm to the providers' commercial interests on the basis of the examples in the Closed Bundle. The Tribunal was satisfied that Mr Ryan was seeking public disclosure of sensitive commercial information. This was dealt with by the Commissioner who stated:

"This is because the terms of the contracts created a clear expectation of costing materials submitted to KPMG being used solely for the purposes of the payment reconciliation process, and not for any other purpose. NHSE says that if it were to disclose this information it would be seen by providers as a breach of trust and of the letter and spirit of their contract with NHSE. In turn, this would be likely to have an adverse impact on their willingness to enter into similar arrangement with NHSE which would be prejudicial to NHS's commercial interests as it should not be able to obtain 'value for money'"

51. The Tribunal found that the public interest favoured withholding the information because the matter of transparency was met through the information the NHSE routinely publishes and has released. How the NHSE manages public funding is independently audited by KPMG. There is a greater public interest in providers of healthcare services being able to support the NHSE and being able to compete for contracts fairly and there is public interest in the NHSE having access to as wide a range of potential providers as possible.
52. The Tribunal found that the public interest in maintaining section 43 outweighed the public interest disclosure. The Tribunal found that proper reliance was placed on sections 31(1), 41 and 43(2) of the FOIA.
53. The tribunal found that the duty under section 16 is to provide advice and assistance as far as it would be reasonable for the NHSE to do so. There was no fault in the NHSE not offering reasonable adjustments taking into account that Mr Ryan did not tell the NHSE that he believed he was neurodivergent even though he has no medical diagnosis of any relevant condition. The Tribunal found that the NHSE provided appropriate advice and assistance and complied with its obligations under section 16.
54. The Tribunal has borne in mind that the Commissioner's Code of Practice does not state what Authorities should be required to do beyond that it should be reasonable.
55. The Tribunal found that the NHSE did not comply with sections 10(1) and 17(1) of FOIA.
56. The Tribunal found there was no error of law in the Commissioner's DN and there was no flaw in the exercise of his discretion.
57. Accordingly, the appeal is dismissed.

Signed: Judge J Findlay

Date: 8 December 2023