GDPR Subject Access Requests

Under GDPR, NHS GP practices and hospitals are no longer able to charge a fee for Subject Access Requests (SARs). Furthermore, GP practices and hospitals have seen a surge in SARs.

In a recent survey of 237 GPs and practice managers, 57% said that their practice had seen an increase in the number of SARs since GDPR came into force in May 2018 (source). And another survey of 1,500 GPs found that SARs have increased over a third (36%) since GDPR (source). 

 

How This Impacts the NHS

This is costing NHS Trusts and GP practices both money and time. Providing the data required by a SAR often involves a significant amount of work because each record must be checked to avoid unwittingly including information about any third parties. In the GPOnline survey, the majority of respondents (62%) said it took them longer than 30 minutes to process just one SAR, with 18% saying it took longer than an hour. Only 8% said it took less than 15 minutes to process SARs, while 30% said it took between 15 and 30 minutes (source).

Under GDPR, you must respond to a SAR within 30 days of receiving the request. The amount of time it takes to process a SAR of course depends on the type of data requested. A SAR for medical records for instance, would likely take less time to process than a SAR for CCTV footage of a patient. 

Recordings and images captured by CCTV systems are considered to be “personal data” and as such, are subject to GDPR. Therefore, any person whose image is recorded on a CCTV system has a right to request a copy of their own personal data from the footage.

Moreover, there is the risk of receiving a hefty fine from the Information Commissioner’s Officer (ICO), the enforcement body for GDPR in the UK. These fines can be €20 million or up to 4% of annual global turnover.

 

A Solution

Ocucon Pixelate harnesses Artificial Intelligence and machine learning to deliver an intelligent web-based video redaction tool for GDPR compliance. Using proprietary automated video redaction technology, Pixelate delivers a cost-effective SaaS solution that significantly reduces redaction times for a fraction of the cost of traditional outsourced redaction services. 

Ocucon has achieved approved supplier status for G-Cloud11 Digital Marketplace. This framework enables public sector organisations to procure Pixelate without the need to run a full tender or competitive procurement process. 

Pixelate’s innovative software has already proved a compelling proposition and is currently being used by a number of leading UK retailers, NHS trusts, local authorities, schools, and major transport providers.   

Pixelate is competitively priced, with 3 different subscription options designed to fit the needs of NHS trusts. View pricing plans for Pixelate here and register for a free, no-obligation web demo to get started.