The article discusses a case that explores the interface between data protection and freedom of information regarding healthcare. It discusses the suit filed by an individual against the Common Services Agency for the Scottish Health Service, in violation of the Freedom of Information (Scotland) Act 2002 (FOISA).