Please ensure Javascript is enabled for purposes of website accessibility
We Are Open

What is a Subject Access Request (SAR)?

A Subject Access Request (SAR) is a formal request to see or receive a copy of the personal information a health or care organisation holds about you. This includes details like consultation notes, test results, diagnosis, and referrals. You have this legal right under the UK GDPR and the Data Protection Act 2018.

Who can make a Subject Access Request?

Anyone aged 16 or over can request their own records. Parents can make requests for children under 13. For ages 13–15, the child’s consent is usually required unless they are not deemed able to understand the request. Requests can also be made by someone with legal authority, such as a carer, solicitor, or someone with … Continued

Can I request records on someone else’s behalf?

Yes, if you have legal permission. This includes written consent from the individual, parental responsibility for a child under 13, legal guardianship, power of attorney, or being a personal representative for someone who has died. Proof of authority is usually required.

How long does it take to get a response?

GP practices and health organisations must respond within one calendar month of receiving your request. If the request is complex, this may be extended to up to three months, but you’ll be informed if that’s the case.

What information can I ask for?

You can ask for all or part of your record, such as consultation notes, test results, treatment plans, referral letters, medication history, and letters from other NHS services. You can also specify which parts you do or do not want included.