When dealing with a subject access request who should the data controller consult?
Answer Once the data controller has all the information he or she needs to deal with the request and is in possession of the fee, he or she should then consult the appropriate health professional, normally the individual who is or was responsible for the clinical care of the patient during the period to which the application refers.