The General Data Protection Regulation (GDPR) gives people the right to know what personal information an organisation has about them. To use this right, you can make what is known as a ‘subject access request’.
Only the following people may apply for access to personal information.
- The person who the information is about.
- Someone acting on behalf of the person who the information is about.
You have a right to know whether or not we have any information about you, and a right to have a copy of that information. You have a right to know the following.
- What kind of information we keep about you.
- The reason we are keeping it and how we use it.
- Who gave us your information
- Who we might share your information with and who might see your information.
You also have the right to have any codes or jargon in the information explained.
You won’t be able to see information that could:
- cause serious harm to your physical or mental health, or anyone else’s
- identify another person (except members of NHS clinical staff who have treated the patient), unless that person gives their permission.
If you need any more advice about your rights under the General Data Protection Regulation, please contact our Data Protection Officer, Carol Stewart.
A request form can be submitted to the practice but must be sent in with identification.
Subject Access Request Form