Access to data we hold about you

Terms used

Data Controller

This is the controller of the data and the system, as defined in the Act. In this case the Controller is Great North Medical Group.

Data Subject

This is the person whose image is within the system, and who has rights of access as determined under the Act.

Third Party

A person or body other than the Data Subject who requests access, or to whom an image may be provided.

DATA PROTECTION ACT

The UK Data Protection Act and EU GDPR specify the rights of access of Data Subjects.

All requests for access must be in writing on a Data Access form which will be provided on request.

The form must be fully completed.  A response will be provided as soon as possible, and in any event within 1 month.

Where an application is declined, a reason will be given. In some circumstances, some parts of your record may be withheld.

How to make an access request

• Request a form from the Practice
• Ensure that the form is fully completed, using a separate sheet of paper if necessary, and return it to the address below.
• Your request will be completed within 1 month

There is no facility for immediate access.

Send the application to:

Great North Medical Group

Chestnut Avenue

Carcroft

Doncaster

DN6 8AG

Information and third parties

The practice may share your personal information with other NHS organisations where this is appropriate for your healthcare.

In other circumstances we may approach you for specific consent to release personal information to third parties.

Information will not normally be released to other family members without written patient consent.

In some circumstances there are statutory or ethical obligations to disclose information to others (such as public health issues) which may not require your consent, however you may be consulted about these in advance.

All staff have access to your medical and personal details which is required in relation to their roles, and have completed confidentiality agreements.