Subject Access Requests
Under UK GDPR and the Data Protection Act 2018, you have the right to see or be given a copy of any personal data we hold about you. You can do this by making a Subject Access Request (SAR) to the practice.
Making a Subject Access Request
You may want to authorise someone else to make your application on your behalf, such as a relative, carer or solicitor. You can also make an application to see your child's records, if you have parental responsibility. We may ask your child if they consent for you to access their record, depending on their age and deemed competency.
You do not have to give a reason for applying for access to your records, however, we may ask for the reason behind your request in order to establish urgency and prioritise your request if necessary. If you don’t need access to your entire records, it’s helpful if you tell us the periods and area of your health records that you require, along with details which you feel may have relevance (e.g. clinic type, location, dates).
The quickest and simplest way to view your record is through Patient Access or the NHS App rather than via an SAR. See our page Online services & NHS app for more information on how to sign up.
Timescale
If you request copies of all or part of your medical record, these will be ready within the timescale specified by the above regulations (currently one month from receipt of your accurately completed form and confirmation of consent). If for any reason we cannot complete your request within that timescale, we will let you know as soon as possible.
Once your records are ready, generally we will email them to you, unless you specifically request to receive them via a different method (e.g. we can send a physical copy by post, or you can collect a physical copy at reception).
Fees
Generally, SARs are free of charge. We may, however, charge if multiple requests are made or if we deem that the volume of information requested is excessive.
Proof of identity/authorisation
If we’re not certain of the identity of the person making the request, we may ask for proof of ID (such as a driving license or passport). If you’re completing a SAR on behalf of another person, the Practice will require their authorisation before we can release any information to you.
This is to make sure that we don’t share any information with someone who is not authorised to see it.
