General Data Protection Regulations – came into effect on 25th May 2018
The GDPR requires the practice to process data ‘fairly’ and in a ‘transparent manner’ which is ‘easily accessible and easy to understand’. This means that we must provide information to patients about how the practice processes patient data in the form of ‘practice privacy notices’.
Subject Access Request
In accordance with the Data Protection Act 1998 and Access to Health Records Act, patients may request to see their medical records. Such requests should be made through the practice manager and are free of charge. However, where the request is unfounded or excessive this maybe subject to an administration charge. No information will be released without the patient consent unless we are legally obliged to do so.