Subject Access Request (SAR)

You will appreciate that health data relating to any individual is highly confidential and the Practice must ensure that it releases such data only to the person to whom it relates, or to a person authorised to act on his or her behalf. If you require to see any health data, please ask our admin team for a SAR form and complete this as fully and accurately as possible to enable us to locate the exact information you require.

The General Data Protection Regulations (GDPR) gives you the statutory right of access to any information. You may wish to authorise someone else to make your application on your behalf and if you have parental responsibilities you may make an application to see your child’s notes.

You do not have to give a reason for applying for access to your medical records. If you do not need access to your entire records, it would be helpful if you would inform us of the periods and area of your health records that you require, along with details which you feel may have relevance (e.g. clinic type, location, dates).

Timescale for subject access requests

The information should be available to you within 28 days of receipt of your accurately completed form and confirmation of consent. Due to demand and certain circumstances, this period can be extended but we will keep you informed of the progress of your request during this extended period.

Two forms of identity must be provided (one of which must be photographic). This is to ensure information is not released to unauthorised individuals. The table below outlines the proof of identity we can accept.

Type of applicationIdentification required
Patient applying for their own 

One which must be photographic i.e. passport.

One containing individuals name and address

Third Party Applying. 

Consent of Patient will be required BEFORE the request will be 
processed

One containing Third Party name and address


One must be Photographic ID of Third Party  

Applying on behalf of a child 

We will ALWAYS obtain consent for release of records from a child age 12+ to <16 if a third party is making request

One which must be Child’s birth certificate

Photographic ID of person with parental rights

NHS ScotlandThis site is brought to you by My Surgery Website