Meeting the requirements of the UK General Data Protection Regulation and Data Protection Act 2018
The UK GDPR should be read alongside the UK Data Protection Act 2018 (DPA 2018). Detailed guidance
and resources on the legislation can be found on the Information Commissioner’s website.
This guidance sets out a range of circumstances in which healthcare professionals may receive, and
respond to, requests for access to health records. It reflects the common enquiries received by the BMA.
The guidance is divided into the following areas.
– Defining a health record (part 2)
– Advice on record-keeping (part 3)
– Subject access requests (part 4)
– Requests for access made on behalf of others (part 5)
– Requests from the police (part 6)
– Requests from insurers (part 7)
– Deceased patients (part 8)
– Records retention (part 9)
Accelerated Access to GP-held Patient Records Guidance
1013103_20220511-accelerated-access-to-gp-v3
What access to medical records are GPs required to offer?
Accelerating access to GP records – FAQs
official guidance and support tools final
Practice guidance Offering patients prospective record access
Prospective-records-access-practice-guide-v1.2
Latest -Online access to patient records – NHS Digital and automatic switch on-
In response to the declarations made by EMIS and TPP on 30 October 2022 and doubtless following the announcement by the Secretary of State in the House of Commons yesterday that online access would be enabled, NHS Digital has issued a further statement.
supplementary bulletin Latest Online access NHS Digital
Police information requests to NHS Organisations, GPs and other healthcare providers in respect of potential homicide investigation, proof of life enquiries and more general enquiries to trace missing persons