How should a data controller process an application for access to health records?
Answer On receiving a request in writing from a data subject or their representative, the data controller should log the application and immediately examine it to confirm its validity as part of best practice. This is very important as patients have a right to have their personal health information kept confidential.
