- Ask what information the company holds about them and why?
- Ask how to gain access to it.
- Be informed how to keep it up to date.
- Be informed how the company is meeting its data protection obligations.
If an individual contacts the company requesting their information, this is called a Subject Access Request.
Subject Access Requests from individuals should be made by email, or in writing and be addressed to the Practice Manager of PONHC. The Practice Manager can supply a standard request form, though individuals do not have to use this.
Individuals will be charged £10 per Subject Access Request. The Practice Manager will aim to provide the relevant data within 40 days.
The Practice Manager will always verify the identity of anyone making a subject access request before handing over any information.
Disclosing Data for Other Reasons
In certain circumstances the Data Protection Act allows personal data to be disclosed to law enforcement agencies without the consent of the data subject.
Under these circumstances PONHC will disclose requested data. However the Practice Manager will ensure that a request is legitimate, seeking assistance from the Principal and legal advisors where necessary.