Subject Access Request Assistant

Subject Access Request Assistant Join to apply for the Subject Access Request Assistant role at Derbyshire Support & Facilities Services Limited The post holder will provide specialist administrative support for the management of Subject Access Requests (SARs) under the Data Protection Act (2018) and UK GDPR, as well as requests under the Access to Health Records Act. This will include the retrieval, preparation, redaction, and disclosure of health records, ensuring that requests are processed lawfully, accurately, and within statutory deadlines. The role requires excellent attention to detail, a sound understanding of confidentiality and data protection principles, and effective communication with patients, families, solicitors, coroners, and other stakeholders. Derbyshire Support and Facilities Services Limited currently do not offer a Certificate of Sponsorship; any applications which require sponsorship will not be considered. Responsibilities Manage the receipt, logging, and acknowledgement of Subject Access Requests in line with published policy and statutory requirements. Retrieve, copy, and prepare patient records, ensuring accurate redaction of third-party or sensitive information not subject to disclosure. Ensure that requests are completed and dispatched within strict statutory timeframes (as per the service SLAs). Liaise with clinical and non-clinical staff to obtain supporting information where required. Provide clear, professional written and verbal communication with patients, relatives, and external requestors (e.g. solicitors, police, coroners). Maintain a robust audit trail of all SARs processed to demonstrate compliance with legislation and internal policies. Use the Trust’s electronic health record systems and databases to track, retrieve, and record case progress. Handle telephone, email, and in-person enquiries courteously and effectively, escalating complex cases when necessary. Support the wider Information Governance / Health Records team in meeting regulatory compliance and good practice standards. Always ensure confidentiality and information security, in line with NHS policy and the Caldicott Principles. About the Company DSFS is a subsidiary company that’s 100% owned by Chesterfield Royal Hospital NHS Foundation Trust. DSFS has just over 900 staff across Soft and Hard Facilities Services, and our corporate services including ICT, Patient Records, Switchboard, Procurement, Finance and Clinical Engineering. Very much part of the ‘Chesterfield Royal family’, DSFS builds on solid NHS foundations to offer a more commercial approach that’s dynamic, flexible, and proactive. DSFS is proud to be striving to achieve a truly diverse and inclusive flexible workforce by valuing and welcoming everyone’s abilities, uniqueness, and individuality. All our colleagues have the right to and should be able to feel 100% themselves at work; we believe that all our people add to and should improve our culture and not just fit in with it. By embracing our diverse backgrounds and differences our culture becomes richer and makes us stronger together. Contact For further details / informal visits contact: Name: Eddie Lewis; Job title: ICT Quality & Governance Manager / DPO; Email address: EddieLewis@nhs.net; Telephone number: 01246 513 199 Seniority level Entry level Employment type Full-time Job function Administrative Industries Facilities Services Location Chesterfield, England, United Kingdom Application Details When applying for roles please complete all sections of the application form. #J-18808-Ljbffr