Under the Data Protection Act/GDPR, subject to certain conditions, as a patient/patient representative you are entitled to be:

  • told whether any personal data is being processed;
  • given a description of the personal data, the reasons it is being processed and whether it will be given to any other organisations or people; and
  • given a copy of the information comprising the data; and
  • given details of the source of the data (where this is available).

The following leaflet provides patients and their representatives with a process for the management of requests for personal information (for living individuals) under the Data Protection Act (DPA), the General Data Protection Regulations (GDPR) and (for deceased individuals) the Access to Health Records Act 1990.

For full information on this process please click here to download our leaflet.