The way we use patient data is changing: We aim to provide the highest quality care. To do this, we routinely collect information about you and the care you receive from us. Like other hospitals across England, we are changing how we share and use this data… Find out more

The Dudley Group NHS Foundation Trust Logo
Homepage|About our Trust|Fair Processing and Fraud Prevention

The Dudley Group NHS Foundation Trust is committed to handling personal information lawfully, fairly, securely and transparently.

Fair processing means being clear about how and why personal information is collected, used, shared and protected. It also means ensuring that people can understand their data protection rights and how to raise a concern about the use of their information.

For full information about how the Trust processes personal information, including the purposes of processing, lawful bases, information sharing, retention, individual rights and complaints, please read Trusts General Privacy Notice.

Fraud prevention and detection

The Trust is required by law to protect the public funds it administers. Personal information may therefore be used or shared where this is necessary to prevent and detect fraud, bribery, corruption, error or other financial irregularities.

Information will only be used or shared where there is a lawful basis to do so. Appropriate measures will be applied to protect the confidentiality and security of the information.

National Fraud Initiative

The Trust participates in the National Fraud Initiative, a data-matching exercise operated by the Public Sector Fraud Authority that helps public bodies prevent and detect fraud.

Data matching involves comparing records held by one organisation with records held by the same or another organisation. This may include comparing information from payroll or other relevant records with information held by participating bodies.

A data match does not, by itself, confirm that fraud has occurred. It may identify an inconsistency that requires further investigation. Any decision or further action will be taken only after the relevant information has been reviewed. Other NHS organisations use similar wording to explain that automated matching identifies possible inconsistencies, but human review and decision-making are required before conclusions are reached.

The Cabinet Office carries out data matching under statutory powers, including Part 6 of the Local Audit and Accountability Act 2014. Processing undertaken under these statutory powers does not rely on the consent of the individuals concerned. The usual UK GDPR basis is that processing is necessary for a task carried out in the public interest or in the exercise of official authority.

Further information is available from:

The Cabinet Office’s NFI collection was updated in 2026 and now includes current privacy notices, timetables, data requirements, specifications and guidance. See Link.

Report suspected fraud, bribery or corruption

If you suspect fraud, bribery or corruption involving the Trust’s resources, you can report your concerns to:

Bradley Vaughan
Local Counter Fraud Specialist
Email: bradley.vaughan@rsmuk.com

Chris Walker
Counter Fraud Champion
Telephone: 01384 321070
Email: chris.walker1@nhs.net

You can also report concerns directly to the NHS Counter Fraud Authority:

Please provide as much relevant information as possible. However, you should not investigate the matter yourself or take any action that could place you or another person at risk.