Data security

Key resources

Data Protection and Security Toolkit checklist

This checklist provides a guide to the information you will need and advice on how to complete the Data Protection and Security Toolkit.

Downloadable policy: Data security policy template

This data security policy can be downloaded and adapted for use in your practice.

Subject access requests

How to respond to a subject access request for medical records

MDU medico-legal adviser Dr Ellie Mein explains the steps practices need to take when patients request access to their medical record.

Redacting information from medical records - medico-legal advice

MDU medico-legal adviser Dr Ellie Mein provides advice on redacting information from medical records when complying with subject access requests or providing patients with access to their full online records.

GDPR and fees for access to medical records

When practices can charge a fee and when they should provide information for free under a subject access request.

BMA guidance on subject access requests

The BMA has updated its guidance on subject access requests in light of the GDPR. Below is a summary of the changes.


More data security advice