During a hospital stay, when requesting a copy of blood test results from doctors or nurses, unfortunately patients are often met with the response "Your request must be made in writing and must be made to the hospital admin department".
This is in contrast to the guidance from the information comissioner's office on GDPR which states that subject access requests can be made verbally [1] and can be made to any employee of the organisation [2].
How should a patient respond in this scenario?
Guidance from the information commissioners office on GDPR: https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/711097/guide-to-the-general-data-protection-regulation-gdpr-1-0.pdf
1: Page 61: "Individuals can make a subject access request verbally or in writing".
Page 62: "The GDPR does not specify how to make a valid request. Therefore, an individual can make a subject access request to you verbally or in writing."
Page 63: "... even if you have a form, you should note that a subject access request is valid if it is submitted by any means, so you will still need to comply with any requests you receive in a letter, a standard email or verbally."
2: Page 62: "... It [The request] can also be made to any part of your organisation (including by social media) and does not have to be to a specific person or contact point."
