You will appreciate that health data relating to any individual is highly confidential and the Practice must ensure that it releases such data only to the person to whom it relates, or to a person authorised to act on his or her behalf. If you require to see any health data, please complete this online Request Form as fully and accurately as possible to enable us to locate the exact information you require.
The General Data Protection Regulations (GDPR) gives you the statutory right of access to any information, manual (paper) or computerised. You may wish to authorise someone else to make your application on your behalf and if you have parental responsibilities you may make an application to see your child’s notes.
You do not have to give a reason for applying for access to your General Practice records. If you do not need access to your entire records, it would be helpful if you would inform us of the periods and area of your health records that you require, along with details which you feel may have relevance (e.g. clinic type, location, dates).
We use a processor, iGPR Technologies Limited (‘iGPR’) to assist us with responding to report requests relating to your patient data, such as subject access requests that you submit to us (or that someone acting on your behalf submits to us) and report requests that insurers submit to us under the Access to Medical Records Act 1988 in relation to a life insurance policy that you hold or that you are applying for. iGPR manages the reporting process for us by reviewing and responding to requests in accordance with our instructions and all applicable laws, including UK data protection laws. The instructions we issue to iGPR include general instructions on responding to requests and specific instructions on issues that will require further consultation with the GP responsible for your care.
Timescale
The Practice will deal with your request as quickly as possible. The information should be available to you within one calendar month of receipt of your accurately completed form and confirmation of consent. Under certain circumstances, this period can be extended to 3 months but we will keep you informed of the progress of your request during this extended period.
Fees
We will not make a charge for the first request for access to your medical records. We may, however, charge for subsequent requests or if we deem that the volume of information requested is excessive. You have the right to simply view your records (i.e. not receive a copy in a permanent form); information on how to arrange this is detailed below.
Type of request
If you request to see the original records, you will be invited to make an appointment at a mutually convenient time to view them. If you request copies, these will be ready within the allocated timescales specified by the Regulations, and we will telephone you when they are available for you to come to the Practice to collect them.
The age of Consent
The law in Scotland states that all children aged 12 and over are deemed to have capacity to give consent to accessing their medical records, unless there is a medical reason that they do not have capacity.
By LAW, they are entitled to make the decision as to who can assess their records and what information is provided. The GP is also entitled to speak to a child of this age on their own, to ensure there is no pressure from either parent (however they can have a medical member of staff as a chaperone).
We cannot discuss any clinical information with parents of children aged 12 and over without their consent. Please note, for parents phoning up for advice regarding their children of this age, or to discuss medication, we will need consent from your child.
Proof of identity
Two forms of identity must be provided (one of which must be photographic). This is to ensure information is not released to unauthorised individuals. The table below outlines the proof of identity we can accept.
TYPE OF APPLICATION | IDENTIFICATION REQUIRED |
Patient applying for their own Can be waived if the applicant is known to the Staff Member accepting the request | One which must be photographic i.e. passport. One containing individuals name and address |
Third Party Applying. Consent of Patient will be required BEFORE the request will be processed | One containing Third Party name and address One must be Photographic ID of Third Party |
Applying on behalf of a child We will ALWAYS obtain consent for release of records from a child age 12+ to <16 if a third party is making request | One which must be Child’s birth certificate Photographic ID of person with parental rights |
If you are completing this application on behalf of another person, the Practice will require their authorisation before we can release the data to you. The person whose information is being requested should sign the relevant section within the online form. If the patient is a child (i.e. under 16 years of age) the application may be made by someone with parental responsibilities – in most cases this means a parent or guardian. If the child is capable of understanding the nature of the application, his or her consent should be obtained or, alternatively, the child may submit an application on their own behalf. Children will, generally, be presumed to understand the nature of the application if aged between 13 and 16 however, all cases will be considered individually.