This is called Subject Access in the Data Protection Act
The practice has a protocol which we adhere to for patients who wish to gain access to their records. The following is a summary of the procedure:
The appropriateness of the request for access is assessed
We like to have this in writing from the patient which is signed by themselves. The Data Protection Act does allow the practice to withold access but this is very rare.
The request for access is logged in a secure document
Some record is kept of who required access and how this was provided
Two reasons why access could be denied
1. Where the information released may cause serious harm to the physical or mental health or condition of the patient, or any other person.
2. Or where access would disclose information relating to or provided by a third person, this would not be a health professional who had not consented to that disclosure.