Under the GDPR, service users have the right to request access to their personal data including their medical information. When a service user requests to see or get a copy of their personal information in a care setting, we as healthcare workers should facilitate this where possible.
HSE Guidance for Point of Care Data Access (PDF, 230 KB, 6 pages)
Information request at a point of care
Giving service users information about their healthcare is a normal part of day-to-day care in the HSE. In most cases, this does not require a service user to request information as a Data Subject Access Request (SAR) or Freedom of Information (FOI) request.
You should aim to provide a copy of the information if the request is:
- a low volume of information
- about a current or recent episode of care
- readily available to staff upon request
- easy to respond to orally or by sharing the information (such as a printout of a blood test result)
- free from third-party information that should not be included
Launch webinar
Launch webinar (video) of the Point of Care Access to Information by Joe Ryan, National Director of Public Involvement, Culture and Risk Management.
Related content
Subject Access Request Form (PDF, 75 KB, 1 page)
FOI Request for Access to Records (Word, 40 KB, 2 pages)
Contact
Email: dpo@hse.ie