AtlacareUnder UK GDPR, a patient can ask for a copy of all the personal data you hold about them — a Subject Access Request (SAR) — and you must respond, normally within one month. Atlacare gives you a one-click export for exactly this.
Run the export
From the patient's record, use the export / SAR option. Atlacare gathers everything relating to that one patient — profile, appointments, clinical notes, invoices, forms, files and consent history — into a single downloadable file you can review and provide to them.
Before you send it
A few things to check, because a SAR has rules of its own:
- Third-party data. If a note mentions another identifiable person, you may need to redact that part before disclosing. The export gives you the material; the judgement on redaction is yours.
- Confidential/safeguarding content. There are narrow grounds to withhold information (e.g. serious-harm risk). Review sensitive notes before releasing.
- Timing. The clock is one calendar month from the request; keep a record of when it came in.
Keep a record
The export is logged in your audit trail, so you have evidence of what was provided and when — useful if the request is ever queried.
This covers a single patient. To export your whole organisation's data (e.g. leaving, or a backup), see exporting your data.