Accessing your health information - Stockport NHS Foundation Trust

Under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), you have the right to access the personal information we hold about you. This is called a Subject Access Request (SAR).
You do not have to make your request in writing. However, using the Access to Health Records form (found below) can help us find the information you need. If you are requesting information for someone else, the Subject Access Request Team will tell you what documents we need to process the request.
We will acknowledge your request and may ask for more information to confirm your identity or help us locate your records. We will respond within one month of receiving everything we need.

Most requests are free of charge. In some situations we may charge a fee (for example, if a request is clearly unfounded or excessive). If a fee applies, we will explain this to you when you make your request.

To make a request, contact the Subject Access Request Team (details below). If you choose to use the form, please send the completed Application for Access to Health Records with your request.

Subject Access Request Team,
Stockport NHS Foundation Trust,
Stepping Hill Hospital,
Stockport
SK2 7JE

Tel: 0161 419 5425
Email: [email protected]

How long will it take?

We will aim to respond within one month of receiving your request, proof of identity, and any other information we reasonably need to find your personal data.

If you are not satisfied with our response

If you are not satisfied with our response to your SAR, please contact the Subject Access Request Team first (using the details above). You can also contact the Data Protection Officer at [email protected].

If you still want to make a complaint, you can use the Trust’s complaint process (see the Making a Complaint page) or raise your concern with the Information Commissioner’s Office (ICO).

You can contact the Information Commissioner’s Office if you are concerned about how the Trust (or another organisation) is using your personal data.

The ICO is the UK’s independent regulator for data protection. They will usually expect you to have tried to resolve the issue with the organisation first.

What information we need from you

Please include your current address. This helps us find your records and is the address we will normally use to send our response.

We normally need two documents to confirm your identity and that you are entitled to receive the information. We accept two of the following:

Current passport
Current driving licence
Utility bill – less than 6 months old

If you cannot provide a passport or driving licence, or if you are requesting information for someone else, we may ask for different or additional evidence.

Please tell us as clearly as you can what information you want (for example, dates, departments, or types of record). This helps us find the right information more quickly. If we need to ask you for more detail, it may take longer to respond.

We will usually send copies by Recorded Delivery, unless you ask for a different method.

Can someone else request information for me?

Yes. You can ask someone to act for you (for example, a friend, relative, solicitor, or someone from an advice organisation). Before we share your information with them, we must have written confirmation from you that they are authorised to act on your behalf.

Children and young people

Children and young people can ask for access to their own records. There is no set age for this. If a child or young person is able to understand what the request means and the information that will be provided, we may accept the request directly from them (for example, many young people aged 13 and over are able to make their own request, but this is assessed case by case). If a parent, guardian, or another adult is requesting information on a child’s behalf, we will ask for evidence that they have parental responsibility or other legal authority, and we will consider the child/young person’s views, their ability to understand, and whether sharing the information is appropriate and in their best interests.

Contact: