Under the GDPR, service users have the right to request access to their personal data including their medical information. When a service user requests to see or get a copy of their personal information in a care setting, we as healthcare workers should facilitate this where possible.
HSE Guidance for Point of Care Data Access (PDF, 230 KB, 6 pages)
Information request at a point of care
Giving service users information about their healthcare is a normal part of day-to-day care in the HSE. In most cases, this does not require a service user to request information as a Data Subject Access Request (SAR) or Freedom of Information (FOI) request.
You should aim to provide a copy of the information if the request is:
- a low volume of information
- about a current or recent episode of care
- readily available to staff upon request
- easy to respond to orally or by sharing the information (such as a printout of a blood test result)
- free from third-party information that should not be included
Related content
Subject Access Request Form (PDF, 75 KB, 1 page)
FOI Request for Access to Records (Word, 40 KB, 2 pages)
Contact
Email: dpo@hse.ie