Your health records

The General Data Protection Regulation (GDPR), implemented through the Data Protection Act 2018, gives individuals (the ‘Data Subject’) the right to access, correct or erase personal data that is held about them by any health or care organisation. This right of access is applied through a “Subject Access Request” (SAR).

Access to your health records  

Your health records are kept on the Trust’s secure electronic record system.

Records may include the following information: 

  • Basic details about you such as your name, address, date of birth
  • Notes and reports about your assessments, treatment and care provided
  • Results of tests, investigations, diagnostic test carried out 
  • Information from other professionals involved in your care or from relatives or other people who care for you. 
  • Any information you provided to us during your consultation or encounter with the Trust.

Access to your health record can be made by sending a written request to the Trust.

You can ask someone else or a Third party to submit a Subject Access Request on your behalf e.g. a solicitor or family member. A written consent that you have asked them to do this will be required.

Children age 13 and over can make a request for information held about them, as long as they are deemed competent to do so. Where a Child does not have sufficient understanding to exercise their rights themselves, a person with parental responsibility can submit a request for a SAR on their behalf.

Access to a Deceased Person Health Record

The Access to Health Records Act 1990 provides certain individuals right to access a deceased person’s record. This includes a person who can prove they are a benefactor or has a claim to the deceased person’s estate or is a Personal Representative or an Executor of the deceased person Will. Evidence in the form of the deceased person WILL or Certificate such as marriage certificate, must be provided with the request, before the records can be provided.

Response timescale

We will respond to Subject Access Request and Access to Health Records request within 30 days from the date the verification and receipt of proof of requestor identification is completed. In some exceptional cases the response time may extend beyond 30 days if the request is complex and requires more time to process. You will be notified if this will apply to your request before the end of the 30 days timeline.

Exemptions

In some exceptional circumstances, your right to see some details in your own health records may be restricted or withheld if an exemption under data protection law applies. 

The Data protection Act 2018 provides several exceptions which allow information request to be withheld from individuals. This may be based on several factors such as clinical judgement, employers right including legal advice or legal proceedings and management planning.

A request for health and care records may also be withheld if it is believed to be “manifestly unfounded or excessive”. In exceptional circumstance if we choose to respond to this category of request, we may charge a reasonable fee for doing so.

To help us provide you with the right information at the right time, we ask you to make your request in writing. This should be accompanied with proof of ID, such as a copy of your passport or driving license, WILL or Marriage Certificate for access to deceased person records request. Please note that if the information provided in your request is not sufficient to confirm your identity, you may be asked to provide more information.

Charging a fee

No fee is charged for providing Subject Access Request, correction or erasure under GDPR, unless the SAR / Information request is considered to be “manifestly unfounded” or “excessive in nature” in these circumstances a reasonable fee will be charged.

To make it as easy as possible to apply to see your records or those of someone you care for the Trust has created a single contact point for requests.

Requests should be emailed to the records mailbox beh-tr.records@nhs.net or alternatively posted to: 

Medical Records Department
Block P2, St Ann's Hospital
St Ann's Road
London, N15 3TH 

Download a copy of the SAR form [Microsoft Word document]

Download a copy of the Information Request Guidance Leaflet [PDF document]

Further information about your right can be found here: ICO - The right to be informed