This policy provides the Practice with a process for the management of requests for personal information (for living individuals) under the Data Protection Act (DPA), the General Data Protection Regulations (GDPR) and (for deceased individuals) the Access to Health Records Act 1990.
It defines a process for achieving legislative requirements and ensuring effective and consistent management of such requests.
The policy ensures that all staff are aware of how a subject access request should be made and to respond quickly.
Subject Access Request Policy for Haddenham Surgery
