Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of your personal data which this practice holds about you – Make your request directly to the practice. (For information from a hospital or other Trust/ NHS organisation you should write directly to them).
- Be aware that there is no charge to have a copy of the information held about you.
- Be aware that information must be released to you within one calendar month (unless in exceptional circumstances, which you will be informed of a part of the process)
- Be aware you may be asked for key information to process the request (for example full name, address, date of birth, NHS number and details of your request) so that your identity can be verified, and your records retrieved
- The right to request that this practice corrects any personal data if it is found to be inaccurate or out of date – You should tell us so that we can update our records as we are required to keep accurate and up-to-date records at all times. Please contact the Practice as soon as any of your details change, this is especially important for changes of address or contact details (such as your mobile phone number). The practice will from time to time ask you to confirm that the information we currently hold is accurate and up to date.
- The right to request your personal data is erased where it is no longer necessary for the practice to retain such data. Although please note for Patients at this practice, your records will be retained until death;
- The right to withdraw consent to the processing at any time;
- The right to data portability;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to lodge a complaint with the Information Commissioners Office.