Subject access requests to GP practices increased by a third under GDPR

The number of subject access requests (SARs) GP practices receive each month has increased by a third since the introduction of the GDPR - and more than three-quarters of these are being made by companies acting on behalf of patients, the BMA has said.

GPC chair Dr Richard Vautrey
GPC chair Dr Richard Vautrey

The findings echo the result of a GPonline investigation last month, which found that over half of GP practices had seen an increase in SARs since the GDPR was introduced in May, resulting in extra workload and costs for practices.

According to a BMA poll of 1,500 GPs, practices received an average of 11.7 SARs requests last month compared with just 8.5 a month before the GDPR was introduced - a rise of 36%.

The survey also found that, on average, more than three-quarters (77%) of requests were made by companies acting on behalf of the patient, such as solicitors.

SARs cover requests for access to records by patients, or by third parties who have been authorised to have access by the patient. Before the new regulations came into effect, GPs were allowed to charge a fee to cover the administrative costs of completing SARs, but GDPR means that information must now be provided free of charge.

GP workload

Producing the information required by a SAR can also involve significant work for practices because they need to check each record to ensure they are not unwittingly providing details about any third parties. Last month, GPonline found that some practices were spending over seven hours a week dealing with SARs, for which they receive no funding.

GPC chair Dr Richard Vautrey said: ‘These findings reflect what we’d been hearing anecdotally for some time – that GP practices are facing a significant increase in the number of subject access requests now that GDPR legislation has come into force, meaning the double hit of an increase in work and a decrease in funding, at a time when most are already under enormous pressure.

‘While patients have every right to access their own medical records, the majority of these requests are from companies potentially exploiting a system by which they no longer have to pay out of their own pocket and so the cost is transferred to the NHS – coming at a serious price for general practice.’

Before the GDPR came into effect the BMA recommended that practices could charge up to £50 for providing a hard copy of records to patients, or up to £10 for computerised records. Some practices would charge more than this for solicitor requests.

Government support

Dr Vautrey said he wanted GP practices in England to be provided with funding and support to meet the requirements of the GDPR and that the GPC were pushing for this in contract negotiations.

‘If practices are expected to meet the demand for these requests and practices are unable to charge a fee for reports to cover their costs, then the government must provide funding, and we are actively pushing for this in ongoing contract negotiations,’ he said.

‘Furthermore, if the secretary of state for health and social care is serious about his digital revolution in the NHS, he should commit to an IT solution that would allow all practices to offer patients access to their entire record in a safe and secure way. This would relieve GPs and their staff of some of the administrative workload burden of dealing with such requests, prove far more cost effective in the long-term and empower patients by having a greater understanding of their care.’

Earlier this month, Scottish health secretary Jeane Freeman pledged to provide data protection officers at 'no cost' to practices to ease some of the impact of GDPR.

Have you registered with us yet?

Register now to enjoy more articles and free email bulletins

Register

Already registered?

Sign in

Follow Us:

Just published

GP training: What does the new prescribing assessment involve?

GP training: What does the new prescribing assessment involve?

The RCGP is completing a mandatory pilot of a new assessment of GP trainees' prescribing...

Essex practices run by Virgin Care lost more than 1,600 patients last year

Essex practices run by Virgin Care lost more than 1,600 patients last year

GP practices in Essex run by private provider Virgin Care have lost more than 1,600...

New QOF Prevalence Check tables launch on Medeconomics

New QOF Prevalence Check tables launch on Medeconomics

GPonline's sister site Medeconomics has launched new interactive tables that allow...

GPs report longer waits for appointments amid workforce crisis and rising demand

GPs report longer waits for appointments amid workforce crisis and rising demand

Nearly three quarters of GPs say waiting times for appointments at their surgeries...

TV ad highlights 'stress and anxiety' of booking GP appointments

TV ad highlights 'stress and anxiety' of booking GP appointments

A leading health union has hit out over the impact of NHS underfunding on waiting...

BMA backs stop-gap plan to end pension tax trap but demands GP guarantees

BMA backs stop-gap plan to end pension tax trap but demands GP guarantees

The BMA has formally backed short-term plans to tackle punitive pension tax rules...