All manual and computerised health records about living people are accessible under the General Data Protection Regulation (GDPR) 2018 and the UK Data Protection Act 2018. Access must be given equally to all records regardless of when they were made.
A health record exists to provide an account of a patient’s contact with the healthcare system. Health records consist of information relating to the physical or mental health or condition of an individual made by a health professional in connection with the care of that individual.
When new patients register and we receive any paper records from a previous GP we scan them onto the electronic system.
The information is most commonly recorded in electronic form, however, some records are in a manual form or a mixture of both. ‘Information’ covers expressions of opinion about individuals as well as facts. Health records may include notes made during consultations, correspondence between health professionals such as referral and discharge letters, results of tests and their interpretation, X-ray films, videotapes, audiotapes, photographs, and tissue samples taken for diagnostic purposes. They may also include reports written for third parties such as insurance companies.
A request by a patient, or a request by a third party who has been authorised by the patient, for access under the GDPR (and DPA 2018) is called a subject access request (SAR). Individuals have a right to apply for access to health records irrespective of when they were compiled. To access your records at Newburn Surgery you will need to complete a SAR.
You can collect this form from reception or download the Subject Access Request form.
The form must be fully completed and failure to do so may result in delays in us getting your records to you.
Below you will find information on how records can be accessed. We take keeping your data safe seriously and we strongly advise you to read the important information that follows. There is a lot to read, however, we explain fully how we are bound by legislation to make decisions regarding your data and also what you are entitled to access when it comes to your medical records.
SARs can be made electronically, in writing or verbally.
Electronically: We would encourage patients to access their records online via SystmOnline.If you are not already registered for online access please speak to reception staff. If the request is made electronically access should normally be given in electronic format.
Where patients request the medical record to be emailed to them we strongly recommended you reconsider due to the risk
of unauthorised interception of the data as you are receiving your data via unencrypted means to a non-NHS email address.
If you do insist we will need to document each patient’s agreement (expressed in writing or via email) to receive their data via
It is acceptable if the patient requests, to use a USB stick or a CD as alternative electronic formats , however, these are to be supplied by the patient.
In Writing: You can also make a request in writing or
In person at reception, however, you will need to come to the surgery to complete the SAR form (or download from website and bring it in).
We will need to verify your identity before giving you access to records.
The form must be completed in full before we can deal with the request. The form should be given to reception staff who will ensure all the details are correct. We will then start the process and aim to have the request completed in the timeframe (see below).
Once the request has been received and verified we must provide the individual with a copy of their data without undue delay, and at the latest within 28 days from the date of the request.
Patients with capacity have a right to access their own health records via a SAR (see below). Patients may also authorise a third party such as a solicitor to do so on their behalf. Competent young people may also seek access to their own records. It is not necessary for patients to give reasons as to why they wish to access their records.
Where a child is competent, they are entitled to make or consent to a SAR to access their record.
When assessing a child’s competence we are bound to explain the issues in a way that is suitable for their age. Where, in the view of the appropriate health professional, a child lacks competency to understand the nature of his or her SAR application, the holder of the record is entitled to refuse to comply with the SAR.
Where a child is considered capable of making decisions about access to his or her medical record, the consent of the child must be sought before a parent or other third party can be given access via a SAR.
Not all parents have parental responsibility.
Despite the widespread use of the phrase ‘next of kin’, this is not defined, nor does it have formal legal status. A next of kin cannot give or withhold their consent to the sharing of information on a patient’s behalf. As next of kin they have no rights of access to medical records.
We will not send original notes and records to patients or solicitors (or any other external parties) because of the potential detriment to patient care should the records be lost.
There are several reasons we may refuse.
Generally not, unless the the request is "manifestly unfounded" or "excessive", which is expected to be a rare occurrence.
If you have any queries please contact the Practice Manager in the first instance.
Where access has been refused we will give you an explanation as to why this decision was made and you do have the right to make a complaint to the Information Commisioner's Office (ICO).
You can write to the ICO at the following address or contact by telephone.
Information Commissioner's Office
Telephone: 0303 123 1113
Fax: 01625 524510
Updated Jan 2020
111 is the NHS non-emergency number. It’s fast, easy and free. Call 111 and speak to a highly trained adviser, supported by healthcare professionals.
How likely are you to recommend this Surgery to friends and family if they needed similar care or treatment? Please spend 2 minutes to take the Friends and Family Test.
The NHS website. Take control of your health and wellbeing. Get medical advice, information about healthcare services and support for a healthy life.
Patient is one of the most trusted medical resources online, supplying evidence based information on a wide range of medical and health topics to patients and health professionals.