Data Subject Access Request
What is Data Subject Access?
Data protection legislation gives individuals the right to request access to personal data held on them by organisations. This is known as a Data Subject Access Request (DSAR).
What is Personal Data?
Personal data is defined, in the regulation, is anyone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural/living person.
What is a Health Record?
A "Health Record" is any record which consists of information relating to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status which has been made by or on behalf of a health professional in connection with the care of that individual.
Who can make a Data Subject Access Request?
Any individual can make a Data Subject Access Request (DSAR). In addition an individual may nominate a representative (such as a solicitor or relative) to apply on their behalf. In this case, there must be a valid consent signed by the individual who authorises the release of information to the representative.
A person who has parental responsibility for a young child can request access to the child's records. Release of records is usually only made in the best interests of the child. Children may apply themselves - where it is considered that the child has the competence to be able to understand the nature and implications of making a DSAR. If they are considered competent, they should also be consulted regarding any request that has been made for their records by another individual, i.e. a person with parental responsibility. The competence of the child in respect of requests for records can be considered from the age of 12.
For mentally incapacitated adults a person may make a request on their behalf if they have been granted power of attorney or agent by a court to manage their affairs. The request must be made in relation to the management of their health and welfare.
Organisations may charge a fee if it has been defined as manifestly excessive or unfounded. You will be advised of this during the request process if this is the case.
What about medical records regarding deceased persons?
The Access to Health Records Act 1990 allows certain individuals to request access to a deceased patient's health records.
How can I make a Data Subject Access Request?
If you wish to make a Data Subject Access Request, please contact:
Lincolnshire Community Health Services NHS Trust
Data Protection and Compliance Team
Witham Park
Beech House
Waterside South
Lincoln
LN5 7JH
Telephone: 01522 459510
You can also email requests to LHNT.DSAR@nhs.net
You will be required to provide sufficient information or complete the standard Data Subject Access Request form (below) so that we have all relevant information to process your request.
