We’re receiving SAR’s from insurance companies such as Target Medical and Mobile Doctors. These appear to be asking for insurance reports for a personal injury claim but calling them Subject Access Requests so they don’t have to pay. I know we can’t charge patients for copies of their medical records but can we charge insurance companies for an SAR?

27th February 2019

Advice obtained directly from the ICO states:

“As subject access requests made on behalf of others (including by insurance companies) are treated the same as a normal sar made directly by the data subject, the GP practice would not be able to charge a fee. “