2026, issue 34
Subject access requests and data shared with defence organisations
A subject access request can sometimes involve patient information shared with your defence organisation. Here’s our advice on what to include - and what to redact.
There may be an assumption…that under the SAR, there is an obligation on the data controller to provide copies of all the documents that include personal data. That is not correct.