Medical Record Requests from the Police
Update on Medical Record Requests from the Police
The BMA have recently updated their guidance around requests from the police for information from a patient’s medical records. There is clear guidance regarding the obligations that GPs have with respect to copying and/or release of the GP record.
These circumstances are as follows:
If the police do not have a court order or warrant they may request voluntary disclosure of a patient’s health records under section 29 of the Data Protection Act 1998
However, while health professionals have the power to disclose the records to the police where section 29 applies, there is no obligation to do so
In such cases health professionals remain bound by the long-established common law duty of confidentiality and may only disclose information where the patient has given consent, or there is an overriding public interest. They may also be required to defend their decision to disclose before the GMC which is a statutory tribunal
Disclosures in the public interest based on common law are made where disclosure is essential to prevent a serious threat to public health, national security, the life of the individual or a third party, or to prevent or detect serious crime. This includes crimes such as murder, manslaughter, rape, treason, kidnapping and abuse of children or other vulnerable people. Serious harm to the security of the state or to public order and serious fraud will also fall into this category.
GP practices are entitled to a fee for producing the notes. There is no set fee for producing these notes. Therefore it is the responsibility of individual practices to set their own fee for this work.
In order for to proceed with a police request, the police will need to provide each of the following:
- Provide written patient consent to release of their records OR provide written confirmation as to the nature of the serious crime allegedly committed by the patient and an explanation as to why the patient’s records, or other information requested, are considered necessary for the specific purpose you are pursuing. The data holder will require one of these in order to fulfill your responsibilities as the Caldicott Guardian.
- Confirmation in writing that the fee will be paid within 28 days of the police receiving the record. This fee is due to the disproportionate effort placed on an already overburdened GP practice to provide these notes which recognises the need to support the police in their investigation of a crime, where appropriate to do so.
- Written confirmation from a senior police officer – Following discussions with the NPCC (National Police Chief’s Council) regarding signing off we have agreed that the level of police seniority that we recommend to GPs to obtain before considering releasing medical records to the police is lowered from Superintendent to Inspector. We have restated to the NPCC the need for any request from the police for medical records is only made when absolutely necessary.
Please note that this is the only change to the guidance that has been made (Updated November 17).
Once you are in receipt of each of these at the practice, and have checked the appropriateness of release of the records, you should respond to the police authority as soon as possible.
Alternatively, should it be appropriate for the police to view the record (based on the answer to requirement 1 above), then there is the option for them to view the record in the practice in the presence of a practice staff member. In this situation there is no fee chargeable.
GPs should, in all cases where there is no patient consent, consider whether the benefits to an individual or to society of disclosing the records outweigh both the public and the patient’s interest in keeping the information confidential before agreeing to disclose the records.
There is a template letter is available to download in the attachment at the to pf this page.