Public Information Booklet

Creating a safe environment for your personal medical information

Access to medical records
The Data Protection Act 1998 is the legislation that safeguards the processing of your information. You are allowed by law to see what is contained in your medical records under this Act. Requests for access to your personal information should be in writing to your GP, or the Health Records Office if applying to a hospital. The organisation must respond to your request within 40 days and a charge of up to £50 may be made for this. The NHS has a duty to keep medical records up to date and accurate. If you feel anything has been added to the record that is factually incorrect, you have the right to have it amended or deleted in accordance with the guidance in the Act.

Can any of my records be withheld?
Yes, any information contained in your records, which is likely to cause harm to your mental or physical state or that of other people may be withheld. However, a senior clinician will always make this decision. Also, any third party information contained in your record would not be revealed without the consent of those involved.

For further information about accessing your personal information, see the leaflet "Using the law to protect your information" published by the Information Commissioner (Tel: 01625 545700) or you can visit their website at www.dataprotection.gov.uk.

Each of the organisations listed below has a Caldicott Guardian, who is responsible for agreeing and reviewing protocols for governing the disclosure of personal information across organisational boundaries.

This information is produced for the following NHS organisations