Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, you have the right to request access to personal information that our organisation holds about you. This is known as a Subject Access Request (SAR).
Who can make a Subject Access Request?
Anybody can make a SAR for access to their personal information held by the ICB. In addition, an individual may nominate a representative, such as a solicitor, relative, or friend, to make the request on their behalf. Where this is the case, there must be valid consent signed by the data subject. If the data subject does not have capabity, then the relevant legally appointed representative may authorise the access.
How to make a request
If you wish to access any information that NHS Herefordshire and Worcestershire ICB may hold about you, these request can be made verbally or in writing:
- Email: hwicb.sarrequests@nhs.net
- Phone: 0330 053 4356
- Address: Public Contact and Information Team, John Comyn Drive, Perdiswell, Worceste, WR3 7NS.
What happens if I am unhappy with the response I receive or the way that the request was handled?
You can contact the ICB and ask for clarification in relation to the response that you have received.
If you are dissatisfied with the handling of your request, please contact the ICB's Stakeholder and Public Liaison and Information Team by email at hwicb.sarrequests@nhs.net.
If you remain unhappy with the outcome, you can apply to the Information Commissioner’s Office, who will consider whether the organisation has complied with its obligations under the Act, and can require the organisation to remedy any problems.
You can find out more about how to do this, and about the Act in general, on the Information Commissioner’s Office website at: Your right of access | ICO
Complaints to the Information Commissioner’s Office should be sent to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
