You have a right under the Data Protection Act 1998/2018 and General Data Protection Regulation (GDPR) to request access to view information or obtain copies of the information the practice holds about you, and to have it amended or removed should it be inaccurate. This is known as ‘The Right of Subject Access’.

  • If you would like to make a ‘Subject Access Request’, please complete a Data Subject Access Request form. For information solely related to the hospital you should write directly to them. Requests can be made by other means, including verbal requests if appropriate however you will likely be contacted by a member of our team to confirm the details relating to the request.
  • The Practice has the right enquire as to what (the amount, date range or specific details) information you are requesting, and to act accordingly to transfer the data to you. The Practice has the right to reject your request if it is seen to be excessive. An example of where we may reject a request is that you request full copies of your records and the following month, you request the same information to be transferred into your care.
  • You have the right to sign up for an online ‘Patient services’ account, and request that the Practice change the default settings on its clinical system, to enable you to view the information we hold about you in an electronic format. If you don’t have an online / Patient services account, or want more information on what a Patient services account is, please visit reception or the practice website.

The information will be provided free of charge within one month however, the practice may charge a reasonable fee to comply with requests for further copies of the same information or if it felt that the requests are manifestly unfounded or excessive.

Any changes to this notice will be published on our website or available from reception.

The practice is registered as a data controller under the Data Protection Act 1998.
You can find your practice registration details by entering this Practice’s details into the following Information Commissioner’s Office (ICO) search at www.ico.org.uk

Registration Number: Z6133644
Name: Enderley Road Medical Centre
Address: 41-45 Enderley Road, Harrow Weald, Middlesex
Postcode: HA3 5HF

Download the application form for Data Subject Access Request