SAR Administrator – NHS Health Records (Onsite)

NHS Professionals; Stoke Mandeville; On-site; GBP 21,000 - 26,000; Full time

Benefits offered by this job

Competitive pay

24/7 support

Multi locational

Shift portal access

Ad hoc/long-term placements

Training opportunities

Holiday accrual

Pension

Job summary

NHS Professionals is seeking a Subject Access Request Administrator to join the Access to Health Records team at Buckinghamshire Healthcare NHS Trust, based at Stoke Mandeville Hospital. You will process SARs, medico-legal requests and other patient information requests in line with GDPR, the Data Protection Act 2018 and the Access to Health Records Act 1990, ensuring timely, accurate disclosures.

The role offers onsite working hours, 37.5 per week, 6-month duration, with on-site training and

Qualifications

• Strong accuracy and attention to detail when preparing, scanning, checking, redacting and releasing patient information.
• Understanding of Information Governance, confidentiality, UK GDPR, Data Protection Act 2018 and safe records handling.
• Ability to follow SOPs, work to statutory/service deadlines, prioritise urgent requests and escalate when needed.
• Good basic IT skills, including Evolve/EDMS, scanning equipment and case management/tracking systems; training can be provided.

Responsibilities

• Process Subject Access Requests (SARs), medico-legal requests and other requests for patient information in accordance with GDPR, Data Protection Act 2018 (DPA18) and the Access to Health Records Act 1990, ensuring all requests are completed within statutory timeframes.
• Exercise independent judgement, following data protection guidance, in determining what information can be released, obtaining appropriate consent and disclosure sign-off, and escalating complex, sensitive or high-risk cases to the Access to Health Records Officer.
• Verify the identification and consent of requestors prior to disclosure of personal and sensitive information, maintaining accurate and auditable records of decisions made.
• Utilise Trust systems, including the electronic patient record and case management systems, to log, track and monitor the progress of all requests, ensuring records are accurate, complete and retrievable.
• Identify, locate and retrieve records, both electronic and paper, across Trust sites, including casualty cards, x-rays and records held by other departments, co-ordinating with any external storage or retrieval provider as required.
• Review and prepare collated information for disclosure, applying redactions as directed and checking for third‑party or other sensitive information prior to release.
• Act as a point of escalation for complex enquiries from solicitors, police, coroners, external agencies, patients and relatives, using tact, discretion and sensitivity.
• Advise Trust staff at all levels on the requirements of the GDPR, DPA18 and the Access to Health Records Act 1990 in relation to their duties and responsibilities.
• Monitor progress against statutory deadlines, proactively flagging cases at risk of breach to the Access to Health Records Officer / Deputy Medical Records Manager, and reporting any data security incidents or breaches of confidentiality in line with Trust policy.
• Propose and help implement improvements to departmental working procedures and practices.
• Undertake regular audits and quality checks of own and team members' work to ensure accuracy and compliance, feeding back findings to the Team Leader.
• Produce regular activity and performance reports as requested by the Access to Health Records Officer.
• Respond effectively and professionally to telephone, written and in‑person enquiries, ensuring patient confidentiality is maintained at all times, escalating to the Team Leader where necessary.
• Travel to other Trust sites as required to retrieve records or attend meetings and training.
• Undertake any other duties commensurate with the band, as reasonably directed by the Access to Health Records Officer or Deputy Medical Records Manager.

Skills

Accuracy

UK GDPR

Information Governance

IT Skills

Job description

NHS Professionals is seeking a Subject Access Request Administrator to join the Access to Health Records team at Buckinghamshire Healthcare NHS Trust, based at Stoke Mandeville Hospital. You will process SARs, medico-legal requests and other patient information requests in line with GDPR, the Data Protection Act 2018 and the Access to Health Records Act 1990, ensuring timely, accurate disclosures.

The role offers onsite working hours, 37.5 per week, 6-month duration, with on-site training and