skip to main content

Data protection subject access — GPhC CRA MCQ

Instant feedback + full explanation. One question, done properly.

ModeratePharmacy Law and EthicsData protection subject accessGPhC CRA

A patient asks for a printed copy of their own pharmacy medication record. The pharmacy team member says records belong to the pharmacy and cannot be shared. What is the legal classification/requirement?

Educational content. Not a substitute for clinical judgement or local policy.

Reveal the answer and explanation

Correct answer: E — Manage the request according to data protection subject access procedures

Patients have rights to access their personal data under data protection law, subject to appropriate identity checks and procedures. The pharmacy should handle the request through its information governance process. Records should not be disclosed to the wrong person. Deleting records to avoid access would be unlawful and unsafe.

Reference: UK GDPR; Data Protection Act 2018; MEP