Who can access a patient’s Medical Records?
• the patient • the parent or guardian of a patient under 16 with their consent if they are at an age where they are able to understand matters. If consent is not possible the parent or guardian may access the records only if it is considered by the NHS provider involved to be in the best interests of the child • a court appointed representative of someone who is not able to manage his or her own affairs • where the patient is deceased, the personal representative, usually being the Executor, or anyone with a claim on the estate. How to Apply Responsibility for dealing with an access request lies with the “data controller”. A data controller is the person who determines the purposes for which and the manner in which any personal data about an individual are, or are to be, processed. Any request for access to health records must be made in writing or electronically to the data controller, that is • the applicant’s local GP or Practice Manager, for GP records • the Records Manager at the
