A patient asks for a copy of her GP record under a subject access request. What is the standard UK GDPR response time and fee?
Answer and explanation
Correct answer: A. Within one month, usually free of charge
- Step 1: The Data Protection Act 2018 and UK GDPR give individuals a right of access.
- Step 2: Requests must generally be answered within one month and without a fee unless excessive.
Answer
Within one month, usually free of charge.
Why not the others: Within 24 hours, with no exceptions: 24 hours is not required. Only with the consent of the GP partners: Consent of the GP is not a condition. Within one year, with a fee of 200 pounds: A year is far beyond the limit.
Practise more Confidentiality and information governance.
Free questions with an explanation for every one, and full timed PLAB 1 (GMC, international medical graduates) mock tests.
More Confidentiality and information governance questions
- A 40-year-old taxi driver with epilepsy has a seizure and tells you he will keep driving. You advise him to stop and inform the DVLA, but he…
- A man diagnosed with HIV refuses to tell his regular partner, who is at risk, despite repeated advice. What is the GMC position on disclosur…
- A police officer phones the surgery asking for the address and health details of a patient who was involved in a minor assault. The patient…
- A 22-year-old man arrives at the emergency department with a stab wound to the abdomen from an assault. He asks you not to tell anyone. What…
- A patient's sister rings the practice asking about the results of her adult brother's blood tests. He has capacity and has not given permiss…
- A doctor posts a photograph of an X-ray on a personal social media account to ask peers about interesting findings. The image shows no name…