Focus on Subject Access Requests

email stock image

Under Data Protection legislation, data subjects have the right to access their personal data and supplementary information.

These types of requests are commonly referred as subject access requests (SARs). Generally requests under the Data Protection Act 2018 (DPA) require a response within 1 calendar month.

The Release of Information team deal with requests, specifically from, but not limited to, the police, patients, and members of staff, Coroners, healthcare organisations and external companies.

HR previously processed employees SARs however this has been moved across to the RFI/Subject Access Request team who now handle these requests. Please see below the contact information if you wish to submit a SAR.

REMEMBER: A request does not have to include the phrase ‘subject access request’ or reference the DPA or General Data Protection Regulation (GDPR), it can also be made in any format, such as email, SMS text or via social media; however it has to be clear that the requester is asking for their own personal data held by the Trust. For more information on right to access please visit:

If you receive a request for person identifiable information from any source, including our own staff, you should forward it to the Trust’s RFI Team without delay. All requests for non-personal identifiable information should be sent to the FoI team


Contact Details:

Please use the following contact emails for any queries about these topics


Information Governance training

If you haven’t done so already, please remember to complete your mandatory update on Evolve which includes Information Governance!

Published 12th December 2019

Leave a Comment
Name (required)
Email Address (required, never displayed)
Enter a message

(all comments are moderated - your submission will be posted on approval.)