Subject access requests (SARs) are a legal right under the UK General Data Protection Regulation (UK GDPR), allowing individuals to ask for a copy of their personal data. In general practice, these requests most often come from patients - but can also be made by solicitors, third-party agencies, or even staff. Handled well, a SAR is an opportunity to demonstrate transparency and trust. Handled poorly, it can lead to delays, complaints, or even regulatory action. This guide walks you through the key steps to managing SARs confidently and compliantly, while staying on the right side of the law - and your patients.
This is a companion discussion topic for the original article at https://patient.info/doctor/information-governance-and-security/how-to-handle-a-subject-access-request-sar