In accordance with Article 15 of the UK GDPR, individuals have the right to access their data and any supplementary information held by this practice. SARs are predominantly used for access to, and the provision of, copies of medical records. This type of request need not always be in writing (e.g., letter, e-mail). However, applicants should be offered the use of a SAR application form which allows for an explicit indication of the required information.
The reason for granting access to data subjects is to enable them to verify the lawfulness of the processing of data held about them. In addition, data subjects can authorise third party access, e.g., for solicitors and insurers, under the UK GDPR.
When a data subject (individual) wishes to access their data, they are to be encouraged to submit a request through askmyGP.