In accordance with the General Data Protection Regulation, patients have the right to access their data and any supplementary information held by Llanfyllin Group Practice this is commonly known as a Data Subject Access Request (DSAR). Data subjects have a right to receive:

• Confirmation that their data is being processed
• Access to their personal data
• Access to any other supplementary information held about them

Accessing your information

As a patient, you can request a copy of your health record. To do so, you must submit your request via email to enquiries.llanfyllin@wales.nhs.uk or in writing to the following address:

Llanfyllin Group Practice
High Street
Llanfyllin
Powys
SY22 5DG

Patients do not have to pay a fee for copies of their records.

Time frame

Llanfyllin Group Practice will aim to process the request within 28 days, the maximum time permitted to process DSARs is one calendar month.

Exemptions

There may be occasions when the data controller will withhold information kept in the health record, particularly if the disclosure of such information is likely to cause undue stress or harm to you or any other person.

Data controller

At Llanfyllin Group Practice the data controller is the Practice and should you have any questions relating to accessing your medical records, please ask to discuss this with the Practice Manager