In a seven part request, the complainant has requested information about an information governance incident from Midlands Partnership NHS Foundation Trust (‘the Trust’).  The Trust addressed two parts of the request, disclosed information within scope of one part, advised it does not hold information relevant to another part and withheld information within scope of the remaining three parts under section 40 of the FOIA (personal data).  The Trust subsequently withdrew its reliance on section 40 and confirmed it does not hold the information requested in these parts. The Commissioner’s decision is as follows:  On the balance of probabilities, the Trust does not hold any further information within scope of the request and has complied with section 1(1)(a) of the FOIA. The Trust’s response breached section 10(1) of the FOIA as it did not fully comply with section 1(1)(a) within 20 working days. The Commissioner does not require the Trust to take any remedial steps.