GDPR changes to Subject Access Requests and fees from 25 May 2018
The General Data Protection Regulations and the Data Protection Act 2018 replaced the Data Protection Act 1998 on 25 May 2018, bringing in widespread changes to UK data protection legislation. For GPs the act brings in a number of changes, specifically the charges that were in place for undertaking Subject Access Requests.
Since 25 May, in most cases, patients must be given access to their medical records as a Subject Access Request (SAR) free of charge, including when a patient authorises access by a third party such as a solicitor.
If the request is for a medical report to be created, or for interpretation of information within a medical report/record, this will fall under the Access to Medical Report Act (AMRA) - as these both require new data to be created, which is out with the scope of the GDPR and Subject Access Requests. In these cases, a fee can be charged.
A medical report/record that already exists will be accessible, for free, as an SAR. A ‘reasonable fee’ can be charged for SAR if the request is manifestly unfounded or excessive, however, these circumstances are likely to be rare.
The following user(s) said Thank You: Gordon, sally-jane, Orangeblossom, Waylay
We use cookies on our website. Some of them are essential for the operation of the site, while others help us to improve this site and the user experience (tracking cookies). You can decide for yourself whether you want to allow cookies or not. Please note that if you reject them, you may not be able to use all the functionalities of the site.
