Summary of Your Digital Rights
When you request your medical records under UK GDPR Article 15, NHS trusts frequently "flatten" or scan digital documents into image-only PDFs before sending them to you. This practice strips out active computer metadata, search functionality, and background system audit logs. Under data protection law, you have the statutory right to request records in their original, machine-readable digital format.
1. What Is "PDF Flattening" and Why Does It Matter?
Modern NHS Electronic Patient Record (EPR) systems store consultation notes, diagnostic test results, and audit trails as structured database entries rich with metadata—including precise creation timestamps, user login IDs, system revisions, and digital signature layers.
When responding to a Subject Access Request (SAR), disclosure departments often print these digital files to paper or run them through image conversion software to produce a single "flattened" PDF.
- Loss of Searchability: Text cannot be highlighted or searched using keyboard shortcuts (CTRL+F), making long medical histories difficult to audit.
- Stripped Metadata: System creation times, edit histories, and staff access tags are completely removed during conversion.
- Statutory Right to Format (UK GDPR Art. 15(3)): The law specifies that data must be provided in a "commonly used electronic form"—meaning raw electronic exports cannot be lawfully degraded into degraded image files upon request.
3. Flattened Image PDFs vs. Raw Digital Exports
Compare what you receive in a standard printed PDF bundle against what exists in the hospital's live electronic patient database:
| Feature / Data Layer | Standard Flattened PDF | Raw Electronic Export |
|---|---|---|
| Text Searchability | Disabled / Scanned Picture | Fully Searchable Text |
| Background Timestamps | Stripped / Hidden | Exact Server Timestamps & Logins |
| Edit & Revision History | Only shows final static text | Complete audit trail of changes |
4. How to Request Native Digital Files in Your Follow-Up Letter
If you receive a flattened, image-only PDF pack from an NHS trust, submit a formal follow-up notice citing ICO Subject Access Request Guidance:
🔍 Deep Technical & Forensic Audit Link
This guide summarizes technical rights detailed in our main public interest audit. Jump directly to technical telemetry analysis on the main domain: