Subject Access Requests

A request by a patient, or a request by a third party who has been authorised by the patient, for access under the GDPR (and DPA 2018) is called a Subject Access Request (SAR).

If you wish to request to have a copy of your health records, please complete a Subject Access Request form which you can obtain from the practice reception or you can download and print from the website.

You don’t have to give a reason for wanting to see your records and there is no charge for this service. You will however be required to produce proof of identity before being allowed access to them.

The Practice has up to 1 calendar month to respond to your request. If additional information is needed before copies can be supplied, the 1 month time limit will begin as soon as the additional information has been received.

The 1 month time limit can be extended for two months for complex or numerous requests where the data controller (usually your Practice) needs more time to collate and supply the data. You will be informed about this within 1 month and provided with an explanation of why the extension is necessary.

When requesting a copy of your records, you should say if you:

• want all or just part of them
• would like your records to be given to you in a specific format that meets your needs, and we will endeavour to accommodate your request
• If you request your records to be emailed, you will be sent an encrypted email from the practice to ensure your email is secure before the records are released.

You will need to fill in an Application Form and give proof of your identity. The Practice has an obligation under the GDPR and DPA2018 to ensure that any information provided for the patient can be verified.