By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyse site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
GDPR is the replacement for the data protection Act and came in to effect on the 25th May 2018. Although this isEuropean Legislation the UK will be adopting GDPR in the UK Law even after Brexit. For example, your information may be shared in the following circumstances: Which other organisation’s may see my information? We may also have to share your information, subject to strict agreements on how it will be used, with the following organisation’s;
NHS Trusts / Foundation Trusts
GP’s
NHS Commissioning Support Units
Independent Contractors such as dentists, opticians, pharmacists
Private Sector Providers
Voluntary Sector Providers
Ambulance Trusts
Clinical Commissioning Groups
Social Care Services
Health and Social Care Information Centre (HSCIC)
Local Authorities
Education Services
Fire and Rescue Services
Police & Judicial Services
Voluntary Sector Providers
Private Sector Providers
You will be informed who your data will be shared with and in some cases asked for explicit consent for this happen when this is required.
Accessing my own medical records
The Data Protection Act 2018 (DPA) and the General Data Protection Regulations (GDPR) gives an individual the right to ask for a copy of the information an organisation holds about them – his right is commonly known as a Subject Access Request (SAR). This means that if you are registered with a GP, for example, can you request a copy of your medical records.
The time scale for SAR requests to be completed are 30 working days
A written signed request from the patient is required.
The first request for medical records is free the practice can charge a ‘reasonable fee’ when a request is ‘manifestly unfounded or excessive’, particularly if it is repetitive.
