The Subject Access Request Policy below provides the practice with a process for the management of requests for personal information (for living individuals) under the Data Protection Act (DPA), the General Data Protection Regulations (GDPR) and (for deceased individuals) the Access to Health Records Act 1990.
Under the Data Protection Act, subject to certain conditions, an individual is entitled to be:
- Told whether any personal data is being processed.
- Given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people.
- Given a copy of the information comprising the data; and given details of the source of the data (where this is available).
For more information please view our Subject access request policy leaflet (PDF).