Receiving Data Subjects’ Rights Request

A description of the NHSCFA’s Subject request process

Receiving Data Subjects Rights Request Process Swimlane process showing receipt, assessment and handling of Data Subjects Rights requests. Any Staff Member NHSCFA Information Governance and Risk Management Lead / Information Governance Officer Data Subjects’ Rights request received (verbally/via social media/electronic or posted mail). Ensure date and method of receipt is recorded then submit immediately to Information Governance Team (IG) DPArequest@nhs cfa.gsi.gov.uk Check request. Has all relevant information been provided? Yes No Contact data subject, requesting submission of required missing information: Provide 2 month deadline for receipt of requested info. Log receipt of request and refer to relevant Business Unit to consider/action Is an extension of time required? Yes Advise IG Team of the reason(s) together with supporting information why an extension is sought If appropriate IG Team to advise applicant of an extension to response time. No If the request can be complied with, advise IG Team of action taken and the date implemented. IG Team to send written response to applicant confirming the request has been complied with and the action taken. If the request cannot be complied with advise the IG team of the grounds for refusal. IG Team to send written response to applicant refusing the request and grounds for refusal. Applicant to be informed of right to complain to ICO and/or to seek judicial remedy

Help us improve cfa.nhs.uk

Tell us what's happened so we can fix the problem. Please do not provide any personal, identifiable or sensitive information.

Close

Thanks for the feedback!

Close