How do I access information you hold about me?
Under the General Data Protection Regulations, living individuals have a number of rights relating to the personal information that organisations hold about them. One of these is the right to view or obtain copies of the information that we hold about you, including your medical records. This is known as a subject access request or SAR.
SARs can be made verbally or in writing and although you do not have to complete our application form, we would ask you to read it so that you can see the information we need in order to handle your request efficiently.
To be valid, your request/completed application form must include the necessary evidence of your identity, so that we can be sure that you are entitled to receive the requested information.
If you are applying on someone else’s behalf, we will also need evidence of their consent. Alternatively, you may have a legal right to represent a patient, for example, where they are unable to manage their own affairs and you have a Lasting Power of Attorney (Health and Welfare); or, in the case of a young child, you have parental responsibility.
Access to a deceased patient’s medical records can be given only to:
- The patient’s personal representative (this will be the executor of the will or the administrator of the estate)
- Any person who may have a claim arising out of the patient’s death
The Trust has a duty to maintain the confidentiality of all medical records and this duty persists even after death. Next of kin and close relatives of the deceased do not have automatic right of access to patient records unless they are either the personal representative of the patient or have a claim arising out of the patient’s death.
You can read more about the process, the fees and the evidence of identity required in the Accessing your personal information leaflet and on our application form.
If you would like to use our application form you can download a copy below. Once you have completed your application form please send it to us at the address below.
Surrey and Sussex Healthcare NHS Trust
East Surrey Hospital
Redhill, Surrey RH1 5RH Or via email to: Sash.email@example.com
Please note requests for copies of a child’s records will be forwarded to our Legal department for processing.
In accordance with the Department of Health guidance to NHS organisations, we will always try to provide information within 21 calendar days if it is at all possible to do so. However, the General Data Protection Regulations allows us a legal timescale of one month to respond. The month starts when we receive your request together with all the required supporting information.
Please make sure that you describe clearly the information you would like to receive as we may otherwise have to contact you for clarification, which would delay your request.