A Subject Access Request (SAR) and an Access to Health Records Act (AHRA) request both involve accessing personal information, but they apply in different circumstances.
-
SAR (Subject Access Request):
Applies to living individuals under the UK GDPR and Data Protection Act 2018. It allows individuals to access the personal data organisations hold about them. -
AHRA (Access to Health Records Act 1990):
Applies to deceased individuals and allows access to their medical records by specific people, such as the personal representative or a person with a legitimate claim.
Understanding this distinction ensures requests are processed under the correct legal framework and with the appropriate safeguards in place.



