Document Reference No.
HRPRO014
Download
Policy Summary
This document replaces the Access to Health Records Procedure and sets out NHS Shetland procedures for compliance with requests by individuals to exercise their rights over their own personal data under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA). The document also covers requests for access to a deceased person’s health records under the Access to Health Records Act 1990 (AHRA). This document should be read in conjunction with: • Information Governance Policy • Records Management Policy • Data Protection Policy – in development
Author
Information Governance Manager and Data Protection Officer
Executive Lead
Director of Human Resources and Support Services