Accessing Your Medical Records (Subject Access Requests - SARs)

Accessing Your Medical Records (Subject Access Requests - SARs)

Under the General Data Protection Regulation (GDPR), all patients have the right to access the personal information held about them by their GP practice. This is known as a Subject Access Request (SAR).

To submit a request, please:

  1. Complete a SARs request form (also available from reception).
    • Please state exactly what information you are requesting.
    • If you require your entire medical record, please make this clear on the form.
  2. Provide two forms of ID when returning your form:
    • One photo ID (passport, driving licence, etc.)
    • One proof of address (utility bill or bank statement dated within the last 3 months)

We cannot begin processing or release any information until both the completed form and valid ID have been presented in person to reception and verified.

As part of the form, we will ask for the following details:

  • Your first and last name
  • Date of birth
  • Sex
  • Postcode
  • Email address
  • Phone number
  • If applicable, the full details of the person you are completing the form on behalf of

 

To support efficient and secure processing, we outsource our SARs administration to iGPR, an NHS-approved provider. Once your request and ID have been validated, iGPR will securely process your information on our behalf, in line with UK data protection laws (UK GDPR and the Data Protection Act 2018).

We will process your request within 28 days of receipt of your validated application.

  • Patient Subject Access Request

  • Please confirm the following:

    I request access to the information you hold in my medical records.  I understand that this information is provided via email (please supply address above) free of charge and must be supplied to me within 30 days.

     

    To process Subject Access Requests, we work with Medi2Data (or iGPR), a secure NHS-approved system that enables us to extract and compile your medical record directly from our clinical system.

     

    Your information remains confidential at all times and is handled in accordance with UK data protection laws (UK GDPR and the Data Protection Act 2018).

     

    Please specify below, the type of information you require:

    Full Medical Record (optional)

  • ID:

    I will supply two forms of ID - one photographic and one proving my registered address. 

     

    We cannot begin processing or release any information until both the completed form and valid ID have been presented in person to reception and verified. 

    Date
    For example, 15 3 1984
This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Page last reviewed: 04 December 2025