Use of SARS

We have been made aware that there is an ongoing issue with insurance companies requesting access for full patient records rather than full GP reports. We have now received a response from the GPC.

"The GPC has received a reply from the ICO regarding the use of Subject Access Reports (SARS) under the Data Protection Act rather than requesting GP reports.

"The ICO has ruled that this use is inappropriate. In particular note the first paragraph of the Summary:

'The right of subject access is a key element of the fundamental right to the protection of personal data provided for under Article 8 of the EU Charter of Fundamental Rights which is conferred upon individuals. It is not designed to underpin the commercial processes of the life insurance industry. The Commissioner takes the view that the use of subject access rights to access medical records in this way is an abuse of those rights.'"

To see the ruling letter in full, click here.

In light of this, we would recommend that practices do not respond to these SARS requests. We will update you very soon with further information