Your right to access your health records under the Data Protection Act 2018
Information about your personal treatment and care is confidential and will normally be something you will discuss with the healthcare professionals you meet. All patients have the right to see their own health records. This is referred to as a Subject Access Request. The request can be made verbally or in writing and the Trust has one month to respond to the request. This is provided free of charge. How to access your medical records (northamptongeneral.nhs.uk).
You have the right to obtain:
- confirmation that the Trust is processing your personal data;
- a copy of your personal data; and
- any other supplementary information
Please see our Privacy Notice for further details about collection and use of the information we hold about you.
Your right to rectification
All individuals have the right to have inaccurate personal data rectified, or completed if it is incomplete. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request. The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, taking into account whether the request is repetitive in nature. In some cases, if the request is considered to be manifestly unfounded or excessive , the Trust may request a "reasonable fee" to deal with the request.
Further information about your right to rectification can be obtained from the Information Commissionner's Office website.
Your right to erasure
If you are concerned that information we are holding about you is incorrect, then you have the right to request that this information be changed or erased. This would apply to personal details, like a change of address or name. However the absolute right to erasure, under the General Data Protection Regulation 2016, does not apply to medical record information as it falls under ‘special category data’. The decision whether to change or erase information in the medical records is reviewed by a clinician or doctor and a decision made with regard to whether changes or erasures can be made. Your written objection to any information that is not removed can be filed in your record. Please contact the relevant consultant/department concerned or you can e-mail: ngh-tr.pals@nhs.net.
Further information about your right to rectification can be obtained from the Information Commissionner's Office website.
Your right to restrict processing
You have the right to request the restriction or suppression of your personal data. This means that you can limit the way the Trust uses your data. In addition to restriction, you can request the erasure of your data. This is not an absolute right and only applies in certain circumstances. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request. The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, taking into account whether the request is repetitive in nature. In some cases, if the request is considered to be manifestly unfounded or excessive , the Trust may request a "reasonable fee" to deal with the request.
Further information about your right to restrict processing can be obtained from the Information Commissionner's Office website.
Your right to object to the processing of your personal data
You have the right to object to the processing of your personal data in certain circumstances, for example to stop your data being used for marketing purposes. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request. The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, taking into account whether the request is repetitive in nature. In some cases, if the request is considered to be manifestly unfounded or excessive , the Trust may request a "reasonable fee" to deal with the request.
Further information about your right to restrict processing can be obtained from the Information Commissionner's Office website.
Your right to data portability
All individuals have the right to data portability. This means individuals can obtain and reuse their personal data for their own purposes across different services. It allows individuals to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. This request can be made verbally or in writing and the Trust has one calendar month to respond to the request. The Trust can refuse to comply with your request if it is manifestly unfounded or excessive, taking into account whether the request is repetitive in nature. In some cases, if the request is considered to be manifestly unfounded or excessive , the Trust may request a "reasonable fee" to deal with the request.
Further information about your right to rectification can be obtained from the Information Commissionner's Office website.