Subject Access Request Assistant
The closing date is 14 September 2025
Job summary
The post holder will provide specialist administrative support for the management of Subject Access Requests (SARs) under the Data Protection Act (2018) and UK GDPR, as well as requests under the Access to Health Records Act. This will include the retrieval, preparation, redaction, and disclosure of health records, ensuring that requests are processed lawfully, accurately, and within statutory deadlines.
The role requires excellent attention to detail, a sound understanding of confidentiality and data protection principles, and effective communication with patients, families, solicitors, coroners, and other stakeholders.
Derbyshire Support and Facilities Services Limited currently do not offer a Certificate of Sponsorship, any applications which require sponsorship will not be considered
Main duties of the job
o Manage the receipt, logging, and acknowledgement of Subject Access Requests in line with published policy and statutory requirements.o Retrieve, copy, and prepare patient records, ensuring accurate redaction of third-party or sensitive information not subject to disclosure.o Ensure that requests are completed and dispatched within strict statutory timeframes (as per the service SLAs).o Liaise with clinical and non-clinical staff to obtain supporting information where required.o Provide clear, professional written and verbal communication with patients, relatives, and external requestors (e.g. solicitors, police, coroners).o Maintain a robust audit trail of all SARs processed to demonstrate compliance with legislation and internal policies.o Use the Trust's electronic health record systems and databases to track, retrieve, and record case progress.o Handle telephone, email, and in-person enquiries courteously and effectively, escalating complex cases when necessary.o Support the wider Information Governance / Health Records team in meeting regulatory compliance and good practice standards.o Always ensure confidentiality and information security, in line with NHS policy and the Caldicott Principles.
About us
Derbyshire Support and Facilities Services Ltd. (DSFS) is a subsidiary company that's 100% owned by Chesterfield Royal Hospital NHS Foundation Trust.
DSFS has just over 900 staff across Soft and Hard Facilities Services, and our corporate services including, ICT, Patient Records, Switchboard, Procurement, Finance and Clinical Engineering. Very much part of the 'Chesterfield Royal family', DSFS builds on solid NHS foundations to offer a more commercial approach that's dynamic, flexible, and proactive.
DSFS are proud to be striving to achieve a truly diverse and inclusive flexible workforce by valuing and welcoming everyone's abilities, uniqueness, and individuality. All our colleagues have the right to and should be able to feel 100% themselves at work; we believe that all our people add to and should improve our culture and not just fit in with it. By embracing our diverse backgrounds and differences our culture becomes richer and makes us stronger together.
Derbyshire Support and Facilities Services Limited currently do not offer a Certificate of Sponsorship, any applications which require sponsorship will not be considered
Please see below link for the DSFS website.
DSFS - Derbyshire Support & Facilities Services Limited | DSFS
When applying for roles please complete all sections of the application form.
Details
Date posted
29 August 2025
Pay scheme
Other
Salary
£23,875 a year pro rata per annum
Contract
Bank
Working pattern
Flexible working
Reference number
166-DSFS-7441669
Job locations
DSFS-Chesterfield Royal Hospital
Top Road
Chesterfield
S44 5BL
Employer details
Employer name
Chesterfield Royal Hospital NHS Foundation Trust
Address
DSFS-Chesterfield Royal Hospital
Top Road
Chesterfield
S44 5BL
Employer's website
https://www.chesterfieldroyal.nhs.uk/ (Opens in a new tab)






Employer contact details
For questions about the job, contact:
Supporting documents
Privacy notice
Chesterfield Royal Hospital NHS Foundation Trust's privacy notice (opens in a new tab)