Subject Access Requests (SAR)

Page {{ paginatorProps.current }} of {{ paginatorProps.total }} ({{ paginatorProps.percentage }}% completed)
Introduction

Application for Patient Data Access Request

You will appreciate that health data relating to any individual is highly confidential and the Practice must ensure that it releases such data only to the person to whom it relates, or to a person authorised to act on his or her behalf. If you require to see any health data, please complete this online Request Form as fully and accurately as possible to enable us to locate the exact information you require.

The General Data Protection Regulations (GDPR) gives you the statutory right of access to any information, manual (paper) or computerised.  You may wish to authorise someone else to make your application on your behalf and if you have parental responsibilities, you may make an application to see your child’s notes, if they are under the age of twelve years.

You do not have to give a reason for applying for access to your General Practice records. If you do not need access to your entire records, it would be helpful if you would inform us of the periods and area of your health records that you require, along with details which you feel may have relevance (e.g. clinic type, location, dates).

Timescale

The Practice will deal with your request as quickly as possible. If you request copies of all or part of your medical record, these will be ready within the allocated timescales specified by the Regulations (which is currently 30 days from receipt of your accurately completed form and confirmation of consent). Our Records Administrator will contact you when your request has been completed and agree whether to send your records securely electronically or to come to the Practice to collect them.

Under certain circumstances, this period can be extended to 3 months, which the practice will make you aware of at the time of your request.

Fee

We will not make a charge for the first request for access to your medical records. We may, however, charge for subsequent requests or if we deem that the volume of information requested is excessive.

You have the right to simply view your records (i.e. not receive a copy in a permanent form); information on how to arrange this is detailed below.

Type of Request

If you request to see the original records, you will be invited to make an appointment at a mutually convenient time to view them. If you request copies, these will be ready within the allocated timescales specified by the Regulations, and we will telephone you when they are available for you to come to the Practice to collect them.

Proof of Identification

Two forms of identity must be provided (one of which must be photographic). This is to ensure information is not released to unauthorised individuals. The table below outlines the proof of identity we can accept.

Type of Application

  • Patient applying for their own: Can be waived if the applicant is known to the Staff Member accepting the request
  • Third Party Applying: Consent of Patient will be required before the request will be processed
  • Applying on behalf of a child: We will always obtain consent for release of records from a child age 12+ to <16 if a third party is making request.

Identification Required

  • One which must be photographic i.e. passport. One containing individual’s name and address
  • One containing Third Party name and address One must be Photographic ID of Third Party  
  • One which must be Child’s birth certificate Photographic ID of person with parental rights

Suitable forms of identity 

  • Passport
  • Driving Licence
  • Photo Identify Card
  • Birth Certificate
  • Utility Bill
  • Bank Statement

If you are completing this application on behalf of another person, the Practice will require their authorisation before we can release the data to you. The person whose information is being requested should sign the relevant section within the online form.

If the patient is a child (i.e. under 16 years of age) the application may be made by someone with parental responsibilities – in most cases this means a parent or guardian. If the child is capable of understanding the nature of the application, his or her consent should be obtained or, alternatively, the child may submit an application on their own behalf.  Children will, generally, be presumed to understand the nature of the application if aged between 13 and 16 however, all cases will be considered individually.

Processing

All questions marked with a * are mandatory

I am: *
Processing
Applicant's Details
Patient's Details
Please included any former names
Please double check you've entered the correct email address

Help Us To Help You 

Providing a NHS Number means that we can find a patient record more accurately, saving time and resources. 

How to find your NHS Number 

If known
Would there have been a former postal address we would have on record?: *
Processing
Additional Information

Under the Data Protection Act you do not have to provide a reason for applying for access to health records.

  • However to help us save time and resources, it would be helpful if you could provide details informing us of periods and parts of the health records you require access to, along with details which you may feel are relevant
e.g. radiology results, information relating to a specific accident
Proof of Authority

If you are making an application on the behalf of somebody else we require evidence of your authority

Please upload a copy of your evidence

  • You can upload a document, photo or scan
Only following file extensions are allowed: jpg, jpeg, png, webp, pdf, doc, docx, pptx
Details of where medical records are to be sent
Processing
Declaration

You are requesting access to the records for

  • Name: 
  • NHS Number: 

Please return to the previous pages to make any amendments

  • If there is any doubt about the applicant’s identity or entitlement, information will not be released until further evidence is provided. You will be informed if this is the case.
  • Under the terms of the Data Protection Act, Subject Access Requests will be responded to within one calendar month after receiving all necessary information and/or fee required to process the request.
  • Under the terms of Section 7 of the Data Protection Act, Information disclosed under a Subject Access Request may have information removed; this is to ensure that the confidentiality is maintained for third parties referred to who have not consented to their information being disclosed.
  • Please note that we will contact the patient by telephone (using the information on their records) to verify the patients request and identity
Processing

Privacy Consent

Processing

There appears to be a problem loading the form, please refresh the page.
If the error persists please contact us.