Subject Access Requests
A request by a patient, or a request by a third party who has been authorised by the patient, for access under the GDPR (and DPA 2018) is called a subject access request (SAR). If you want to see your health records, or wish a copy, please complete a Practice Subject Access Request Form (click the button above to access form [Please Note: it can take up to 28 working days to process a copy of medical notes]). If you cannot access this form online, please contact the Practice and we will provide you with our paper form. You don’t have to give a reason for wanting to see your records. There is no charge for this service. We will always ask for proof of identity unless the patient is known to the staff.
The practice has up to 28 days to respond. If additional information is needed before copies can be supplied, the 28-day time limit will begin as soon as the additional information has been received.
The 28-day time-limit can be extended for two months for complex or numerous requests where the data controller (usually your practice) needs more time to collate and supply the data. You will be informed about this within 28 days and provided with an explanation of why the extension is necessary.
When writing/calling, you should say if you:
- Want all or just part of them.
- Would like your records to be given to you in a format that meets your needs, and we will endeavour to accommodate your request.
If you request your records to be emailed, then we will secure your or your representative’s agreement (in writing or in email) that they accept the risk if sending unencrypted information to a non-nhs email address.
You may also need to fill in the application form above and give proof of your identity. The Practice has an obligation under the GDPR and DPA2018 to ensure that any information provided for the patient, can be verified. Please note we never send original medical records because of the potential detriment to patient care should these be lost.