I have been notified by my consultant that a subject access request was made in my name to access my health records. They asked for my consent and I refused as I did not make the request. I know exactly who it will have been - ex-DH. At the moment the health authority is looking into the source and I haven’t heard anything further.
What are the next steps? Nothing was released as I refused consent but clearly there is fraudulent intent. Is there any chance of proving the source? What are my rights and options?