EasyEthics, Legal Framework, General PracticeSubject Access Request (SAR), UK GDPRmrcgp aktukmlapane
A GP receives a formal Subject Access Request (SAR) under the UK General Data Protection Regulation (UK GDPR) from a patient asking for a copy of their entire electronic and paper medical record. Assuming the request is valid and the patient's identity is verified, what is the maximum time limit within which the GP practice must comply with this request, unless specific exemptions apply?