Introduction
In accordance with the Data Protection Act 2018 and Access to Health Records Act 1990, patients (data subjects) have the right to access their data and any supplementary information held by Blackheath PMS; this is commonly known as a data subject access request (DSAR). Data subjects have a right to receive:
- Confirmation that their data is being processed
- Access to their personal data
- Access to any other supplementary information held about them
Options for access
Practices are obliged to allow patients access to their health record online. This service will enable the patient to view coded information held in their health record. Prior to accessing this information, you will have to visit the practice and undertake an identity check before being granted access to your records.
In addition, you can make a request to be provided with copies of your health record. To do so, you must submit a Data Subject Access Request (DSAR) form, a paper copy of which is available from reception. Patients do not have to pay a fee for copies of their records.
Time frame
Once the DSAR form is submitted, Blackheath PMS will aim to process the request within 21 days, however, this may not always be possible. The maximum time permitted to process DSARs is one calendar month.
Exemptions
There may be occasions when the data controller will withhold information kept in the health record, particularly if the disclosure of such information is likely to cause undue stress or harm to you or any other person.
Data controller
At Blackheath PMS the data controller is Dr N Ratnarajan and should you have any questions relating to accessing your medical records, please ask to discuss this with the named data controller.