Accessing Your Medical Records (Subject Access Requests - SARs)

Under the General Data Protection Regulation (GDPR), all patients have the right to access the personal information held about them by their GP practice. This is known as a Subject Access Request (SAR).

To submit a request, please:

  1. Complete the form below, or contact us via email, telephone or in-person. Please state exactly what information you are requesting.

  2. We will require two forms of ID when processing your request:
    • One photo ID (passport, driving licence, etc.)
    • One proof of address (utility bill or bank statement dated within the last 3 months)

We cannot begin processing or release any information until both the completed form and valid ID have been presented in person to reception and verified.

As part of the form, we will ask for the following details:

  • Your first and last name
  • Date of birth
  • Sex
  • Postcode
  • Email address
  • Phone number
  • If applicable, the full details of the person you are completing the form on behalf of

To support efficient and secure processing, we outsource our SARs administration to iGPR, an NHS-approved provider. Once your request and ID have been validated, iGPR will securely process your information on our behalf, in line with UK data protection laws (UK GDPR and the Data Protection Act 2018).

We will process your request within 28 days of receipt of your validated application.

Accessing Your Medical Records (Subject Access Requests - SARs)

Page last reviewed: 30 June 2026
Page created: 30 June 2026