Subject Access Requests
The Legalities
A patient may ask you for the information you hold about them. The request can be made in writing, by email or verbally. It can be submitted to any part of the organisation and does not have to be directed to a specific person. If you have other forms of records about the patient that are not held in a digital format, SARs will also apply to those records as well.
It is a legal requirement of the UK GDPR for an organisation to respond to a SAR. Failure to comply with a legitimate SAR request results in a risk of breaching the UK GDPR and a potential sanction by the ICO.
The Benefits Of Our Service
We provide a standalone SAR service to help GP practices respond to the ever growing number of SAR requests in a timely manner.
Our service does not require DPO input and we do not obligate a percentage share of your income generating work such as medicals reports.
GP Specialists is carries out the work under full NHS approved cybersecurity certification to ensure the highest levels of compliance with data handling.
Frequently Asked Questions
Get In Touch
Do you need help with processing SARs?
Please fill out the form to request a call-back and we look forward to discussing how we can help you.