Right of Access

The Data Protection Act 2018 and the UK General Data Protection Regulation 2016 provides living individuals with a number of rights in respect of their personal data. The main right being the right to request access to personal records that are held by an organisation. This is commonly referred to as a Data Subject Access Request or “DSAR”.

Who can make a Data Subject Access Request?

Anybody can make a Data Subject Access Request for access to their personal data held by NHS Nottingham and Nottinghamshire ICB. In addition an individual may nominate a representative (such as a solicitor, relative or somebody that they trust) to apply on their behalf. In such an instance, there must be a valid consent signed by the individual who is authorising the release of the information unless the individual does not have capacity. In those circumstances the relevant legally appointed representative may authorise the access.

Will I be charged for access to the records?

In most cases we will not charge a fee to comply with a Data Subject Access Request.

However, where a request is manifestly unfounded or excessive we may charge a reasonable fee for the administrative costs of complying with a request.

We may also charge a reasonable fee if an individual requests further copies of their data following a request.  The fee will only be based on the administrative costs of providing further copies

Making a request

Your request can be made verbally or in writing.

Email: nnicb-nn.igteam@nhs.net

Letter to:
Information Governance Team
Nottingham and Nottinghamshire ICB
Sir John Robinson House
Sir John Robinson Way
Arnold
Nottingham
NG5 6DA

What happens when my request is received?

Your request will be acknowledged and we will supply the information you have requested if we hold it within one month unless an exemption applies. If an exemption applies we will explain that to you.

What happens if I am unhappy with the response I receive or the way that my request was handled?

You can email the Information Governance Team and ask for clarification in relation to the response that you have received.

If you remain unhappy with how your request has been handled you can contact the Data Protection Officer.

Email: nnicb-nn.igteam@nhs.net

Nottingham and Nottinghamshire ICB
Sir John Robinson House
Sir John Robinson Way
Arnold
Nottingham
NG5 6DA

If you remain dissatisfied with the outcome, you can apply to the Information Commissioner’s Office, who will consider whether the organisation has complied with its obligations under the Act, and can require the organisation to remedy any problems.

You can find out more about how to do this, and about the Act in general, on the Information Commissioner’s Office website at: Your right of access | ICO

Complaints to the Information Commissioner’s Office should be sent to:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF