Access to Records & Data Protection

confidential_file

Individuals wishing to exercise their right of access should:

  • Make a written application to the Practice holding the records, including via email
  • Provide such further information as the Practice may require to sufficiently identify the individual

An individual may also raise a request using this form however this is not mandatory.

Under GDPR the Practice musts provide information free of charge.  However, we can charge a “reasonable fee” when a request is manifestly unfounded or excessive, particularly if it is repetitive.  The fee must be based on the administrative cost of providing the information only.

 

Requests must be complied with without delay and at least within one calendar month of receipt of the request.  This period can be extended for a further two months where requests are complex or numerous, however the Practice must inform the individual within one month of receipt of the request and explain why the extension is necessary.