You have a right under the Data Protection Act 1998 and the Data Protection Act 2018 from 25th May 2018, to request access to view or to obtain a copy of what information the organisation holds about you and to have it modified should it be inaccurate. The process to access your records is known as a Subject Assess Request (SAR) and the way it works is outlined below:
- Your SARs request must be made in writing to the organisation’s IG Lead at the address shown above
- The latest regulations state that there is no charge to have a printed copy of your information provided
- The request will be reviewed and if possible completed within one month (subject to our possible requests for further clarification for you)
- You will need to provide adequate proof of your identity before we will release the requested details (e.g. full name, address, date of birth, NHS number and details of your request), you must also provide two forms of identification
In addition to the right of access, under the Data Protection Act 2018, you will also have the following rights:
- Erasure, which is the right to request that your personal data is removed from our systems be they paper or electronic – please note that under certain circumstances we are legal obliged to maintain a copy of your data for contractual and or statutory reasons
- Restriction of processing, this is the right for you to request that we only process certain parts of your data
- Objection – you have the right to object to the way that we are processing your data
- Data portability – this concerns the right to request that we provide a copy of your data in an easily transportable format
- Automatic processing – you have the right to object to the way we automatically process data – in the case of our organisation we do not, at present, carry out automatic processing of your data
- If you have provided us with your consent to process your data for the purpose of providing our services, you have the right to withdraw this at any time. In order to do this should contact us by emailing or writing to the organisation.