Data Subject Access Requests

Introduction

In accordance with the General Data Protection Regulation, patients (data subjects) have the right to access their data and any supplementary information held by Betts Avenue Medical Centre; this is commonly known as a data subject access request (DSAR). Data subjects have a right to receive:

  • Confirmation that their data is being processed
  • Access to their personal data
  • Access to any other supplementary information held about them

Options for access

As of April 2016, practices have been obliged to allow patients access to their health record online. This service will enable the patient to view coded information held in their health record. Prior to accessing this information, you will have to visit the practice and undertake an identity check before being granted access to your records.

In addition, you can make a request to be provided with copies of your health record. To do so, you must submit a Data Subject Access Request (DSAR) form. Alternatively, a paper copy of the DSAR is available from reception. You will need to submit the form online or return the completed paper copy of the DSAR to the practice. Patients do not have to pay a fee for copies of their records.

Time frame

Once the DSAR form is submitted, Fenham Hall Medical Group will aim to process the request within 28 days; however, this may not always be possible. The maximum time permitted to process DSARs is one calendar month.

Exemptions

There may be occasions when the data controller will withhold information kept in the health record, particularly if the disclosure of such information is likely to cause undue stress or harm to you or any other person.

Please find below the form you will need to complete to arrange for a copy of your medical records.  Please complete the form in full and ensure it is returned with the identity documents as required.

Please also keep any copies you subsequently receive safe as requests for further copies of the same information may be charged for or refused.

Please note GDPR states that the timeframe for practices to supply this information is 30 calendar days.

Please consider online access as that may provide better access to your records on an ongoing basis.

For access to online services you will be asked to provide a form of photographic identity verification.

Children aged 13 and over are deemed able to provide their own consent under the UK data protection regulations so will need to complete their own requests.  Parents can request to have access to their children's record on-line until the age of 11.  Children ages 11-13 will need to be accessed for Gillick Competence to have access in their own right.



Call 111 when you need medical help fast but it’s not a 999 emergencyNHS ChoicesThis site is brought to you by My Surgery Website