When supplying medical information due to a SAR or DSAR do we have to redact third party information i.e., health visitor notes, info about other members of the family? Or is it the record as it stands?