Introduction

In accordance with the UK General Data Protection Regulation, patients (data subjects) have the right to access their data and any supplementary information held by this organisation. This is commonly known as a subject access request (SAR).

Data subjects have a right to receive:

• Confirmation that their data is being processed
• Access to their personal data
• Access to any other supplementary information held about them

Options for access

Patients can access information in their GP health record online, usually through the NHS App or another approved online service. Patients are normally provided with access to new information added to their record, including consultation information, test results, medication and correspondence, subject to appropriate clinical and safeguarding restrictions. Access to historic records can also be requested.

You can request a copy of information from your health record by making a Subject Access Request (SAR). Requests can be made verbally or in writing. To help us process your request, we provide a SAR form on our website and from reception, although use of this form is not mandatory. Subject access requests are normally free of charge. In certain circumstances, a reasonable fee may be charged where a request is manifestly unfounded or excessive, particularly if it is repetitive.

Time frame

We will respond to your request without undue delay and normally within one month of receiving it. In certain circumstances, for example where a request is complex, this period may be extended in accordance with data protection legislation. We will inform you if an extension is required.

Exemptions

In certain circumstances, information may be withheld or redacted where an exemption under data protection legislation applies. This may include information relating to another person, or information where disclosure would be likely to cause serious harm to the physical or mental health of the patient or another person.

Data Controller and Data Protection Officer

Nutgrove Villa Surgery is the Data Controller for the personal information contained within your GP health record.

Our Data Protection Officer (DPO) service is provided by Mid Mersey Digital Alliance. If you have any questions about accessing your medical records or how your information is handled, please contact the practice in the first instance.

SAR Application Form

Please click here to download the SAR application form.
 

Nutgrove Villa Surgery

Published: November 2024
Reviewed: September 2026
Next review: September 2027