Data Subject Access Request (DSAR)
Click here to download the application form for access to health records (PDF, 221KB).
Under EU and UK law, individuals have the right to know what personal data an organisation processes about them and how it is used. Patients can exercise this right by submitting a Data Subject Access Request - DSAR
How long do organisations have to respond to a DSAR?
There is a subject access request time limit. DSARs must be fulfilled “without undue delay”, and at the latest within one month of receipt.
Where requests are complex or numerous, organisations are permitted to extend the deadline to three months. We will still respond to the request within a month and explain why the extension is necessary.