NHS Portsmouth CCG (the CCG) is under a legal duty to comply with ‘individual’s rights’
requests under the Data Protection Legislation, in relation to personal information that it holds. It is a legal requirement that all requests for personal information held by the CCG are handled in accordance with data protection legislation.
This policy and accompanying standard operating procedure (SOP) sets out the approach
that the CCG will take in responding to these requests along with useful guidance and steps to follow when requests are received anywhere within the CCG.