Skip to main content

Data Protection: General Practitioners

Question for Department for Digital, Culture, Media and Sport

UIN 190964, tabled on 13 November 2018

To ask the Secretary of State for Digital, Culture, Media and Sport, what assessment he has made of the potential merits of exempting General Practices from the General Data Protection Regulation that data controllers can no longer charge for processing subject access requests.

Answered on

19 November 2018

The fundamental purpose of the General Data Protection Regulation is to provide individuals with greater protection and control over their personal data.

Allowing General Practices to charge for providing responses to subject access requests would weaken the rights of patients. General Practices can still charge for repeat or excessive requests made by data subjects and for requests made by third parties such as insurers under the Access to Medical Reports Act 1988.

The Information Commissioner’s Office has updated its guidance on the Right to Access, which can be viewed on its website at

Named day
Named day questions only occur in the House of Commons. The MP tabling the question specifies the date on which they should receive an answer. MPs may not table more than five named day questions on a single day.