1. How do you process Subject Access Requests?
2. What tools do you use to ensure that what needs to be redacted from patient records is redacted when responding to SARs?
3. How do you share/send personal/patient information with insurance companies or solicitors when you receive such a request?
