Subject Access Request

Location: Walton

Job Title:

Subject Access Request

Location:

Stoke Mandeville Hospital, HP21 8AL

Trust:
Buckinghamshire Healthcare NHS Trust

Payrate:
Band 3, £14.05 per hour

Shift Patterns:
Monday
- Friday (37.5 hours per week) (Onsite)

Duration:
Start: ASAP End date: 6 Months

The post holder will be responsible for processing Subject Access Requests (SARs), medico-legal requests and other requests for patient information, ensuring information is disclosed accurately, securely and within statutory time frames in accordance with UK GDPR, the Data Protection Act 2018 and the Access to Health Records Act 1990.

Working as part of the Access to Health Records team, the post holder will follow established policies and procedures when verifying identity and consent, reviewing information for disclosure, applying appropriate red actions and escalating complex, sensitive or high-risk cases to the Access to Health Records Officer where required.

Responsibilities:

* To process Subject Access Requests (SARs), medico-legal requests and other requests for patient information in accordance with the GDPR, Data Protection Act 2018 (DPA
18) and the Access to Health Records Act 1990, ensuring all requests are completed within statutory time frames.

* To exercise independent judgement, following data protection guidance, in determining what information can be released, obtaining appropriate consent and disclosure sign-off, and escalating complex, sensitive or high-risk cases to the Access to Health Records Officer.

* To verify the identification and consent of requestors prior to disclosure of personal and sensitive information, maintaining accurate and auditable records of decisions made.

* To utilise Trust systems, including the electronic patient record and case management systems, to log, track and monitor the progress of all requests, ensuring records are accurate, complete and retrievable.

* To identify, locate and retrieve records, both electronic and paper, across Trust sites, including casualty cards, x-rays and records held by other departments, co-ordinating with any external storage or retrieval provider as required.

* To review and prepare collated information for disclosure, applying red actions as directed and checking for third-party or other sensitive information prior to release.

* To act as a point of escalation for complex enquiries from solicitors, police, coroners, external agencies, patients and relatives, using tact, discretion and sensitivity, including when dealing with distressed or bereaved individuals.

* To advise Trust staff at all levels on the requirements of the GDPR, DPA
18 and the Access to Health Records Act 1990 in relation to their duties and responsibilities.

* To monitor progress against statutory deadlines, proactively flagging cases at risk of breach to the Access to Health Records Officer / Deputy Medical Records Manager, and reporting any data security incidents or breaches of confidentiality in line with Trust policy.

* To propose and help implement improvements to departmental working procedures and practices.

* To undertake regular audits and quality checks of own and team members' work to ensure accuracy and compliance, feeding back findings to the Team Leader.

* To produce regular activity and performance reports as requested by the Access to Health Records Officer.

* To respond effectively and professionally to telephone, written and in-person enquiries, ensuring patient confidentiality is maintained at all times, escalating to the Team Leader where necessary.

* To travel to other Trust sites as required to retrieve records or attend meetings and training.

* To undertake any other duties commensurate with the band, as reasonably directed by the Access to Health Records Officer or Deputy Medical Records Manager.

System Knowledge:

* Strong accuracy and attention to detail when preparing, scanning, checking, redacting and releasing patient information.

* Understanding of Information Governance, confidentiality, UK GDPR, Data Protection Act 2018 and safe records handling.

* Ability to follow SOPs, work to statutory/service deadlines, prioritise urgent requests and escalate risks appropriately.

* Good basic IT skills, including Evolve/EDMS, scanning equipment and case management/tracking systems; training can be provided.

Who are NHS Professionals?

We specialise in putting people in place to care. Every year we help thousands of dedicated candidates and highly skilled NHS workers enjoy better career opportunities, access to more shifts and a…