We use cookies to make this site work. We'd also like to set optional cookies so we can understand how the site is used and improve it. We will not set optional cookies unless you accept them. You can change your choice at any time from the Cookie settings link in the footer.
Strictly necessary cookies
These cookies are required for the site to work. They store your cookie preferences and keep your session secure. They are exempt from consent under PECR Regulation 6(4) because they are essential to deliver the service you have requested.
Optional cookies
Optional cookies help us understand how the site is used and provide additional features such as analytics, accessibility tools and translation. We will only set them if you accept.
The Access to Medical Records Act 1988 allows both employers and insurers to a request medical report from a GP. Employers and Insurers are required to seek a patient’s consent prior making a request and a patient must be informed of their right to withhold consent during the process. Patients may also request a copy of the report however, there are some exemptions to this right that can be applied in certain circumstances such as:
- Where serious harm to the physical or mental health of the individual or others or would indicate the intentions of the practitioner in respect of the individual;
- Where the report reveals information about another person, or reveals the identity of another person who has supplied information to the practitioner about the individual.
Controller contact details
St Paul's Cottage Surgery
114 Augustus Road
Wimbledon
London
SW19 6EW
Telephone: 0203 092 2556
Data Protection Officer contact details
swl.gpdpo@swlondon.nhs.uk
Purpose of the processing
To provide the Employers and Insurers with a Medical Reports following the consent of the patient.
The lawfulness conditions and special categories
The legal basis will be:
- Article 6(1)(a) “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”
And
- Article 9(2)(a)”the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”
Recipient or categories of recipients of the shared data
The data will be shared with the specified employment or Insurance organisation or specified Officers. Patients may also request a copy of a report.
Rights to object
You have the right to object to some or all of the information being shared with Employers or Insurers. Contact the practice.
Right to access and correction
You have the right to access the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.
Retention period
The data will be retained for active use during the processing and thereafter according to NHS Policies and the law.
Right to complain
You have the right to complain to the Information Commissioner’s Office