Do you need access to your medical records, or maybe just parts of them? Do you need a copy of your immunisations, blood results, or a copy of clinical letters? Do you need a form completed for your employer or any other third party?
These are some of the types of requests that we get on a daily basis; and we’re happy to say that we are processing these requests quicker than we’ve ever been able to in the past. The normal timelines for Subject Access Requests (SARs) and GDPR is 28 days, and that timeline may be used in extremis, but we aim to have most SARs completed within 24 hours of receipt within a working day. So if you request at 20:00 then we would try to have the request completed 24 hours from 08:00 the next working day.
If, after submitting your request, you haven’t heard from us within 24 hours of a working day, then contact us using the web form. Please be advised that you may not get your answer by phoning us (and waiting in a telephone queue can be time-consuming and frustrating) – the staff who answer the phones are not part of the Data Access Request Team and won’t be able to provide you with the information needed; rather they can record your request and pass it on to the appropriate team. Rudimentary timescales are that blood results and immunisations should be completed within 24 hours of a working day’s request; but full or specific areas of medical records could take about 5 working days to complete.
Check the following links to see the categories of what you may be requesting.
iGPR
We use a programme called iGPR to process your requests. It’s easier and quicker for us to process, and provides you with a secure PDF with your request. Following on from your e-submission, you will receive an email, and an SMS if you have provided us with a mobile telephone number. There are some simple instructions that are automatically generated for you to follow, and you will have the information.
This will be automatically recorded in your medical record that you have requested for information and that you have been sent it. We will also be informed electronically that the request has been accessed (viewed), and each time, thereafter, the iGPR link has been used for that request.
GDPR and the Law Society of Scotland
Children’s Consent. In Scotland, under the UK Data Protection Bill, a child who has reached the age of 12 can generally be deemed competent to provide consent on his or her own behalf and exercise their own data subject rights
Spanish Visa Medical Certificates IHR 2005
Please be advised that we do not undertaken any work pertaining to the IHR 2005 legal form. This is particularly for anyone applying for a Visa for Spain. You may wish to visit the medispot website for any help on this matter.
