Get UK Bitterne Surgery Subject Access Request Form/Access To Health Records 2020-2024

To obtain a copy of your hospital records you will need to apply in writing to the hospital's records manager at the hospital where you received your treatment. Links to the various NHS hospital trusts: NHS England: NHS Choices website.

You have the legal right to request a copy of the information we hold about you, in line with the General Data Protection Regulation (GDPR). If you want to see copies of your medical records, you should ask your GP or the health setting that provided your care or treatment.

An exemption applies to personal data that you process for management forecasting or management planning about a business or other activity. Such data is exempt from the right of access to the extent that complying with a SAR would be likely to prejudice the conduct of the business or activity.

An organisation normally has to respond to your request within one month. If you have made a number of requests or your request is complex, they may need extra time to consider your request and they can take up to an extra two months to respond.

A SAR is a request that can be made in writing, by email or verbally asking for access to the personal information a company or organisation holds on you. This is a legal right that any individual in the UK is entitled to exercise at any point for free.

With good reason, an employee can even request that certain data is deleted from their personnel file. A SAR request would typically include emails between senior or middle management, HR and others, in which the employee is named and which may have a contractual or potentially life-changing impact on that employee.

Therefore, a worker can make a SAR verbally or in writing, including by social media. Workers can make requests to any part of your organisation, and they do not have to direct it to a specific person or contact point. However, you should have a designated person, team and email address for SARs.

An individual can make a SAR verbally or in writing, including on social media. A request is valid if it is clear that the individual is asking for their own personal data. An individual does not need to use a specific form of words, refer to legislation or direct the request to a specific contact.