Follow the Records Management NHS Code of Practice
Best Practice guidance states:
All Staff have a legal and professional obligation to be responsible for any records which they create or use in the performance of their duties.
Any record created by an individual, up to the end of its retention period, is a public record and subject to Information requests (FOI and Subject Access).
Subject Access Request?