FOI_8871

Internal Reference Number: FOI_8871

Date Request Received: 21/08/2025 00:00:00

Date Request Replied To: 26/08/2025 00:00:00

This response was sent via: By Email

Request Summary: notification of data breach

Request Category: Companies


Question Number 1: I am writing under the Freedom of Information Act 2000 to request the following information; Has your organisation been notified of any data breach or security incident in the last 3 years involving systems built upon or integrated with Salesforce?

Answer To Question 1: The Trust is not aware of any data breaches or security incidents, which may have affected the Trust, in the last 3 years.

Question Number 2: Has your organisation experienced, or been informed of, any incidents relating to procurement or contract management systems that operate using Salesforce, namely the Atamis e-Procurement suite of software? Please provide details of; • The date the incident occurred • The nature of the compromised data (such as commercial, personal, financial) • If the breach was reported to the Information Commissioner’s Office • Any remedial action taken by your organisation

Answer To Question 2: N/A

Question Number 3: Further to this, has your organisation undertaken any risk assessments in relation to the use of systems integrated with Salesforce. If so, please provide a summary of the findings.

Answer To Question 3: Prior to entering into any contracts for IT / IS systems, the Trust will perform due appropriate diligence checks, including but not limited to: - Digital Technology Assessment Criteria ("DTAC") - Data Protection Impact Assessment ("DPIA") These documents are used, in part, to scope any levels of risk associated with the proposed system. The only contract we are aware of for a system which sits within the Salesforce infrastructure is 'Atamis', which is used as an eProcurement platform. As the contract for this system was implemented and owned by the Department of Health and Social Care ("DHSC"), these checks were performed at that level, and provided to local authorities for information.

To return to the list of all the FOI requests please click here

Our staff at Salisbury District Hospital have long been well regarded for the quality of care and treatment they provide for our patients and for their innovation, commitment and professionalism. This has been recognised in a wide range of achievements and it is reflected in our award of NHS Foundation Trust status. This is afforded to hospitals that provide the highest standards of care.