Managed Disclosure & Subject Access Requests
Our information law consultants come from a healthcare background. This, combined with the years that we have provided primary care Data Protection Officer services, gives us great insight for our Managed Disclosure Service (KMDS).
We are passionate about supporting primary care.
Our primary care customers will sometimes use, ‘Subject Access Requests (SARs or DSARs)’ as a ‘catch-all’ term for releasing personal data to any third parties. Actually, SARs are a specific right under data protection law that allows people to request access to the personal data held about them. Other types of requests include access to records of the deceased, police disclosures, court-ordered information, safeguarding disclosures and firearms or armed forces disclosures. These request types all have different rules, timeframes and procedures.
At Kafico, we deliver all types of copy disclosure requests on behalf of our customers, and we call this our ‘Managed Disclosure’ service. It is so much more than subject access requests!

Patients are at the heart of our service, we aim to support their rights whilst reducing the burden to our healthcare. This is complex work and our customers can feel assured that they have professionals in their corner.
Our service will consider all legal exemptions and assists the customer with complexities of parental rights, court orders, safeguarding and liaising with the police.
We believe our patient centric approach achieves a high standard of upholding patient rights and protecting the duty of confidentiality.
GPs / primary care providers routinely manage a high volume of disclosure requests; from subject access requests to court orders.
The burden on administrative staff can be significant as it is a complex and time consuming activity.
The Kafico Managed Disclosure Service (KMDS) provides a full end to end service for managing primary care disclosures as below;
· Initial request and confirmation issued to the organisation
· Holding response sent to requestor (solicitor, patient, police)
· Request logged to be monitored for legal timescales
· Clarifications, power of attorney and ID validation performed
· Direct access to clinical systems
· Application of legal exemptions
· If complex or voluminous, apply time limit extensions
· Third party liaison (social workers, safeguarding etc)
· Apply redactions
· Provide of records directly to the requestor through secure digital route (support requestor with secure email receipt process) or recorded delivery
· Final report to practice
· Respond to any questions or complaints
"We used to have all our notes laying around for what seemed ages waiting for them to be checked. Now we can just pass them over to yourselves. Thank you for doing the hard work!"
GP Practice Customer | Norfolk and Waveney
"You have dealt very well with the substantial workload that we have given you over the last few months. Communication is really good and the team are very friendly, especially when dealing with patients chasing requests. Thank you very much for all your help"
GP Practice Customer | Suffolk