PI&DP Your Individual Rights

You have the right to access your health medical records under the Data Protection Act 2018

Information about your personal treatment and care is confidential and will normally be something you will discuss with the healthcare professionals you meet.  All patients have the right to see their own health medical records. This is referred to as a Subject Access Request (SAR). The request can be made verbally or in writing and the Trust has one month to respond to the request. This service is provided free of charge.  

You have the right to obtain

1.    Confirmation that the Trust is processing your personal data
2.    A copy of your personal data
3.    Any other supplementary information.

Please see our privacy notices for more information about collection and use of the information we hold about you.

Your right to rectification (amendment)

All individuals have the right to have inaccurate personal data amended, or completed if it is incomplete. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request.  The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, considering whether the request is repetitive in nature.  In some cases, if the request is manifestly unfounded or excessive, the Trust may charge a "reasonable fee" to deal with the request.

Your right to erasure (removal)

If you are concerned that the information that we are holding about you is incorrect, then you have the right to request that this information be changed or removed. This would apply to personal details, like a change of address or name. However, the absolute right to erasure, under the General Data Protection Regulation 2016, does not apply to medical record information as it falls under ‘special category data’.

The decision whether to change or remove information in medical records is reviewed by a clinician or doctor and a decision made regarding whether changes or erasures can be made. Your written objection to any information that is not removed can be filed in your record. 

Your right to restrict processing

You have the right to request the restriction or suppression of your personal data.  This means that you can limit the way the Trust uses your data. In addition to restriction, you can request the erasure (removal) of your data.  This is not an absolute right and only applies in certain circumstances. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request.

The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, considering whether the request is repetitive in nature.  In some cases, if the request is manifestly unfounded or excessive, the Trust may charge a "reasonable fee" to deal with the request.

Your right to object to the processing of your personal data

You have the right to object to the processing of your personal data in certain circumstances, for example to stop your data being used for marketing purposes. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request. The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, considering whether the request is repetitive in nature.  In some cases, if the request is manifestly unfounded or excessive, the Trust may charge a "reasonable fee" to deal with the request.

Your right to data portability

All individuals have the right to data portability.  This means individuals can obtain and reuse their personal data for their own purposes across different services. It allows individuals to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request.  

The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, considering whether the request is repetitive in nature.  In some cases, if the request is manifestly unfounded or excessive, the Trust may charge a "reasonable fee" to deal with the request.

Further information about your rights can be obtained from the Information Commissioner’s Office website - For the public | Information Commissioner's Office (ICO)