How you can access your personal information

The Data Protection Act 1998 gives you the right to see the information that NHS England holds about you and why. Requests must be made in writing and you will need to provide:

  • adequate information [for example full name, address, date of birth, NHS number, etc.] so that your identity can be verified and your information located.
  • an indication of what information you are requesting to enable us to locate this in an efficient manner.

A request for information from a health record has to be made with the appropriate data controller, this will be your GP or relevant hospital trust where you were treated.

NHS England is only the data controller of GP health records where an individual is currently not registered with a GP or is deceased. For access to GP health records in these circumstances please use this GP list to direct the request to the appropriate service.

For all other personal information held by NHS England, requests should be sent to the Customer Contact Centre.

Where a fee is applicable under the terms of the Data Protection Act and subsequent legislation, we will inform you in writing. In due course our disbursement scheme (which outlines these fees) will be available.

We aim to comply with requests for access to personal data as quickly as possible. We will ensure that we deal with requests within 40 days of receipt unless there is a reason for delay that is justifiable under the Data Protection Act.

We want to make sure that your personal information is accurate and up to date. If you think any information is inaccurate or incorrect then please let us know through the Customer Contact Centre.