What are my GDPR obligations as a hospital?

Under GDPR you must complete the request within one month

We already have a request form

Your standard forms are not compulsory, GDPR Guidance. The patient is allowed to request using ShareMyXray