Skip to main content

Do I have the right to know who has accessed my medical records?

Do I have the right to know who has accessed my medical records?

Speak To An Expert

Get clear, personalised advice for your situation.

Jot down a few questions to make the most of your conversation.


Right to Know Who Accessed Medical Records

Understanding Your Rights

In the UK, the confidentiality of your medical records is protected by law. The General Data Protection Regulation (GDPR) ensures that your personal data is handled with care.

You have the right to know how your data is used and who has accessed it. This is part of the broader right to privacy patients hold within the healthcare system.

Access to Medical Records

Medical records are maintained for your health care and treatment. Healthcare providers must follow strict protocols when accessing your information.

Only authorised personnel should access your records, typically for reasons related to your care or treatment. Understanding who these personnel are is crucial for maintaining your privacy.

Requesting Information

You can request to see your medical records, including knowing who has viewed them. This process is facilitated through what's known as a 'Subject Access Request'.

The NHS and private healthcare providers are obliged to respond to such requests. They must provide access to your records within one month of the request.

How to Make a Request

To find out who accessed your medical records, you need to contact the healthcare organisation responsible for them. This could be your GP surgery or hospital trust.

Requests are typically made in writing, specifying the information you seek. You may be asked for proof of identity to ensure your data is shared securely.

Potential Outcomes

Once processed, you will receive a report detailing who accessed your records. The report includes reasons for access, ensuring transparency.

If you notice unauthorised access, you have the right to raise a complaint. This can be followed up with the healthcare provider or escalated to the Information Commissioner's Office (ICO).

Maintaining Trust and Security

Knowing who views your medical records helps maintain trust in the healthcare system. It reassures patients that their sensitive information is handled appropriately.

Healthcare providers are continuously audited to ensure compliance with data protection laws. This auditing forms a part of the NHS's commitment to safeguarding patient information.

Frequently Asked Questions

Yes, under regulations like HIPAA in the U.S., patients have the right to request an accounting of disclosures, which includes who accessed their medical records and when.

You can request an accounting of disclosures from your healthcare provider or the entity maintaining your records, which will list who has accessed your records.

An accounting of disclosures is a record that shows who has accessed your medical records and why, as required under HIPAA law in the U.S.

Yes, certain accesses may not require notification, such as those for treatment, payment, or healthcare operations, but significant disclosures or access by external entities are typically reported.

Under HIPAA, you are entitled to one free request in a 12-month period; additional requests may incur a reasonable fee.

It includes the date of access, the entity or person who accessed the records, and the reason for access.

Healthcare providers involved in your care, billing, or healthcare operations can access your records without explicit permission, but they must comply with privacy laws.

Generally not without your consent, unless you have provided specific authorization or in emergencies where disclosure is deemed necessary.

You should report the incident to the healthcare provider's privacy office and, if necessary, file a complaint with the Department of Health and Human Services in the U.S. or the equivalent authority in your country.

Typically, healthcare providers must provide an accounting of disclosures within 60 days of a request, with a possible 30-day extension under certain circumstances.

Not every access will be included. Routine accesses for treatment, payment, and healthcare operations are typically not listed, but significant disclosures are.

You can request restrictions on certain uses or disclosures of your medical records, but not all requests can be enforced under current laws.

In the U.S., the Health Insurance Portability and Accountability Act (HIPAA) provides rights related to access and disclosure of medical records.

While electronic records offer numerous benefits, including easier access for authorized purposes, they can be vulnerable to breaches without proper security measures.

Yes, you can request a copy of your medical records, and the healthcare provider is required to provide it, typically within 30 days of the request.

Unauthorized access can result in penalties for entities, including fines or other sanctions, especially if it violates HIPAA regulations.

You can file a complaint with your healthcare provider or directly with the Office for Civil Rights under the Department of Health and Human Services in the U.S.

Covered entities must notify you if your information is compromised in a data breach affecting your privacy or security.

You have the right to access, correct, and receive an accounting of disclosures regarding your medical records under regulations like HIPAA.

HIPAA establishes standards for protecting sensitive patient information, ensuring that disclosures of such information are limited and accounted for.

Important Information On Using This Service


This website offers general information and is not a substitute for professional advice. Always seek guidance from qualified professionals. If you have any medical concerns or need urgent help, contact a healthcare professional or emergency services immediately.

Some of this content was generated with AI assistance. We've done our best to keep it accurate, helpful, and human-friendly.

  • Ergsy carefully checks the information in the videos we provide here.
  • Videos shown by Youtube after a video has completed, have NOT been reviewed by ERGSY.
  • To view, click the arrow in centre of video.
Using Subtitles and Closed Captions
  • Most of the videos you find here will have subtitles and/or closed captions available.
  • You may need to turn these on, and choose your preferred language.
Turn Captions On or Off
  • Go to the video you'd like to watch.
  • If closed captions (CC) are available, settings will be visible on the bottom right of the video player.
  • To turn on Captions, click settings.
  • To turn off Captions, click settings again.