NHS Cybersecurity Governance — Freedom of Information Dataset Nov 2025 – Jan 2026

Dataset accompanying the manuscript "Architectural Accountability: Designing Algorithmic Systems That Respect Digital Rights" (DAP-2026-0033), submitted to Data & Policy. FOI requests were submitted to 205 NHS trusts between November 2025 and January 2026 under the Freedom of Information Act 2000. The dataset (DAP_FOI_dataset.csv) contains 205 rows, one per trust, with governance structure data extracted from responses. Response summary: 170 substantive responses; 20 refusals; 15 no reply. Column reference Column Description ods_code NHS ODS identifier org_name Full trust name org_type Trust type: NHS_ACUTE / NHS_MENTAL / NHS_COMMUNITY / NHS_AMBULANCE / NHS_SPECIALIST response_date Date FOI response received (YYYY-MM-DD) wdtk_url Permanent URL to the original FOI response on WhatDoTheyKnow response_status SUCCESSFUL / REFUSED / NOT_REPLIED A2_count Board/committee cyber review frequency (times per year). Common values: 12 = monthly, 4 = quarterly, 1 = annual, 0 = ad hoc or never. Non-standard values reflect the trust's own characterisation. A3_most_recent_review_year Year of most recent board/committee paper on cyber resilience (YYYY) A4_reporting_line Cybersecurity reporting chain, nodes separated by → (e.g. CISO → CIO → Board) A4_oversight_body_count Number of nodes in A4_reporting_line A9_board_last_training_year Last year board-level cybersecurity training was held (YYYY) Coding conventions: NULL — data not provided or request refused. NONE — trust explicitly confirmed absence of the practice. Original FOI requests are publicly accessible via the wdtk_url column (whatdotheyknow.com).