To think the NHS is far too secretive about our health records?

It doesn’t need to be certified, you just show passport/driving licence, utility bill or similar.

I would just do it and save yourself the bother. Surely they'll require the same for the SAR (to prove who you are).

Why don't you just provide the ID?

Up to 12 weeks for routine request here's at the moment. So it's entirely possible that the report is not there because it's just not been fully reported and signed off

Your problem is that you're thinking about the NHS as a homogeneous blob of an institution. You imagine that the different departments have good communication, that the IT systems are joined up, the the infrastructure has been stress tested, that it functions effectively and and efficiently. It doesn't.
Half of it is outsourced, contracts go to the lowest bidder. Integration between systems, processes, teams is patchy to non existent.

So you provided ID for an app, and made a request through that app. It would make logical sense that the approved ID check on the app could be passed on to the process that pulls up your record and sends it to you. But in practice it won't function like that. Blame capaltism, blame the dismantling of the NHS, blame the people selling it off in chunks to private business. Blame the rich and the media for pushing a narrative.

Once your gp has received the report it will be uploaded to your records and visible on the app. You can chase this by ringing the department and asking to send them across asap. We need the SAR & ID for legal auditing purposes. We'd get slammed by CQC if we didn't have this in place.

But she was already in the app where all her confidential information already is!

you may disagree but that doesn’t mean you are right

She IDed herself to get into the app. They're just making it harder for her.
YANBU OP.

Firstly, every test requested in hospital will have a named consultant, even if you didn't see them, this is how it works, in the same way that a manager in a shop is ultimately responsible for staff conduct and decisions, even they didn't meet you, someone appropriately qualified is ultimately responsible for the care you get in hospital.

The restrictions on access are there to protect your privacy, and it's not just the NHS, it's the government and in some cases, the EU that were responsible for these laws being passed. This is not just a UK/Europe thing - in the US there is HIPAA. The risks of providing a required process to access your records are much less than the risks of that information being released to someone with no legitimate reason for access.

You may also not be aware that your health records have to be checked for information about 3rd party data before they are released, or we have breached that 3rd party's right to privacy. For example - separated parents, NRP requests access to child's records, but the records contain information about RP's address or information about the RP that should not be disclosed.

(Edit: information can also be withheld from your notes if there is a concern that the specific information may be harmful to the person requesting the notes - this is incredibly rare though)

If you have attended hospital then there will 100% be things in your record that aren't visible on the app - nursing notes would be the most obvious thing, but also more detailed notes about assessment and conversations with other healthcare professionals, so having access on the app is not the same as seeing your entire record.

While I appreciate that you want to know ASAP, a 4 week timeframe is not unreasonable, especially in the circumstances that you have outlined.

I hope that you get the information that you need soon.

It’s because these records are very confidential and this is completely right to make sure the information is going to the correct person. Imagine if someone else could access your records!

Same as a police statement that you've signed, you can only get a copy via a SAR. All sorts of public bodies may have reports etc. about you, but they won't just hand them out willy nilly.

Not according to the law.

Yes but they either trust the security processes they put in place when setting up their app and giving us information to some of our data - in which case give us all of it.

or they don’t feel it’s secure enough in terms of data privacy - in which case why give access to any sensitive medical data?

The report should also have been sent to your GP. Could you contact them?

If you only had a scan two weeks ago are you certain there is a full report yet? If you were diagnosed and discharged from ED your scan might still be in the system for full review by radiology and reporting. Initial reporting especially if out of hours/weekend will look for acute causes and treatment, not take a longer term view.

There is a process for getting this stuff and it is always slow. Understaffed I guess - but I would rather funds went to frontline staff TBH.

Meanwhile all the GDPR protection is to ask your name, DOB and address. All public knowledge facts. I pretend to be my husband (with his permission) to talk to the doctors all the time for him and they never even question why ‘mans name’ sounds like a young woman

YABU, our personal data SHOULD be difficult to get to avoid strangers accessing it. As for complaining about the 28 day SAR wait! Do you think you are the only patient?? The 28 days is set by law not by the NHS and it allows data processors time to gather the information.
You sound incredibly naive about data protection and very impatient.

Just to add that I have private healthcare and get emailed all my test results and health information by encrypted email. If private hospitals can do it why cant the NHS?