Privacy and data export

GDPR patient rights — data-subject access requests made simple.

header-x
Privacy and data export

Patients have the right to access, export and understand the personal data your practice holds on them. Xircuit's privacy module supports your GDPR obligations by enabling self-service data exports and centralised consent management without time-consuming manual processes.

Request a demo

GDPR compliance built into every account.

  • Patients submit data-export requests from their own profile — no staff involvement required for standard requests.
  • Consent for treatment records, health-data sharing and marketing is managed centrally by your admin team.
  • A full consent and export audit trail supports compliance documentation for GDPR reviews.

Xircuit's privacy and data-export module lets members request a full export of their personal data and lets admins manage consent settings — all from within the platform. It supports your GDPR obligations without manual data-handling processes or third-party tools.

Self-service data export

Members request a personal data export from their own profile page — no admin involvement needed for standard requests.

Consent management

Admins configure and update consent settings for marketing and health data from a central privacy panel.

Structured data package

Exported data is delivered in a structured, machine-readable format so members and their representatives can review it clearly.

Consent withdrawal support

Members can withdraw specific consents at any time — the platform updates data handling accordingly.

Audit trail

Consent changes and data-export requests are logged so you can demonstrate compliance if asked.

Privacy and data export

Health practices that process data-subject access requests through Xircuit typically fulfil them within the required legal window without any manual data extraction — and use the audit trail to demonstrate compliance quickly during regulatory reviews.

Frequently Asked Questions

How does a member request their personal data?

Members open their profile privacy settings and submit a data-export request. The export is prepared and delivered to their registered email address — no admin action is required for standard requests.

Does this satisfy a GDPR data-subject access request?

Xircuit's data-export feature supports your GDPR data-subject access request process by providing a comprehensive export of personal data held within the platform. Always consult your own legal or compliance adviser for jurisdiction-specific obligations.

How do admins manage consent settings?

Admins access the privacy panel within the organisation settings to configure consent categories, update consent copy and review individual consent records — all in one place.

Related features

Ready to see Xircuit in action?

Request a demo Get the app