A member of staff has been referred to the company occ health Doctor who has dictated a letter in the data subjects presence as to his condition. The doctor states in the letter that the subject is fully aware of its contents. The letter now remains in the subjects HR file. The subject wants a copy, the doctor says he doesn't want the letter released but not for any medical reason. Who has juristriction here, is it access to medical records or DPA?. The subject has sent in an SAR, do we release the letter or not bearing in mind the doctor admits no harm will come to the data subject as he is already aware of the content of the letter. Is there a confidentiality issue here ? any ideas please .... ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ If you wish to leave this list please send the command leave data-protection to [log in to unmask] All user commands can be found at : - www.jiscmail.ac.uk/user-manual/summary-user-commands.htm all commands go to [log in to unmask] not the list please! ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^