The Data Protection Act 2018 (DPA) and the General Data Protection Regulations (GDPR) gives an individual the right to ask for a copy of the information an organisation holds about them – this right is commonly known as a Subject Access Request (SAR). Subject Access Requests can be made as follows:
NHS England is the data controller of GP health records where an individual is not currently registered with a GP or is deceased. To request access to your own health records or those of a deceased person, the most efficient way to submit the request is to complete the application form which can be downloaded here. This will ensure all the relevant details are captured and will avoid confusion or misunderstanding. The application form contains information regarding your rights and how your application will be dealt with. Please take the time to read it carefully.
To receive a copy of a medical record, appropriate identification documents must be provided. If you are making the application as an individual’s legal representative (e.g. a solicitor), we need to receive written authorisation from the applicant for you to act on their behalf and receive their medical record.
Please send your completed application form and copies of relevant identification documentation via email to firstname.lastname@example.org. If you are unable to submit your request via email please forward your completed application to the following postal address:
FAO Access Team
Primary Care Support England
3 Caxton Road
If you have any queries please email us at: email@example.com or call us on: 0333 014 2884.
You can find more information about accessing health records on the NHS Choices website.
You can find more detail on your information rights on the NHS England website here.
To download an overview of the access to health record process, please click here.
Patients should contact their GP practice directly for any queries regarding their registration.