Individuals have the right to access information that the CCG holds about them by making a Subject Access Request (SAR). The GDPR has removed the fees that could previously be charged for SARs and reduced the amount of time that organisations have to respond. This right applies to all individuals including staff, employees of other organisations, service users, visitors to offices, and attendees at events.
Each NHS organisation holds their own records and we can only supply Surrey Heartlands CCG records. If the CCG holds the data requested and it is not legally exempt from disclosure, the information must be supplied within one month (though this can be extended by up to a further two months in some circumstances).