Can I access my own medical records in the UK?

Yes. Under UK GDPR and the Data Protection Act 2018, you have an absolute right to access your medical records — both NHS and private. Requests must be fulfilled within 30 days and should be free of charge.

How do I request my medical records from the NHS?

Write to the practice manager at your GP surgery or the data protection officer at the hospital trust. You can request records verbally, by email, or in writing. They must respond within 30 days. If refused, escalate to the Information Commissioner's Office.

Your Medical Records in the UK: What You're Entitled To and How to Get Them

Your medical records belong to you. Not to your GP. Not to the hospital. Not to the consultant. Under UK data protection law, you have an absolute right to access every piece of medical information held about you.

Yet most people have never seen their own records, don't know what they contain, and wouldn't know how to get them if asked.

What you're entitled to

Under the UK GDPR and the Data Protection Act 2018, you can request access to your complete medical records — GP records, hospital notes, consultant letters, imaging reports, blood results, discharge summaries, mental health records, and anything else held by an NHS or private provider.

This is called a Subject Access Request (SAR). The organisation must respond within 30 days. It must be free of charge.

How to request them

GP records: Write to your GP practice or use the NHS App, which now provides digital access to your GP record including test results, medications, and consultation notes.

Hospital records: Contact the hospital's medical records or information governance department. Most NHS trusts have an online SAR form. You'll need to provide ID and specify what you're requesting.

Private providers: The same legal rights apply. Write to the data controller at the private hospital or clinic.

Why this matters

When I take on a new client, the first thing I do is compile their complete medical history from all providers. Without fail, there are gaps. A consultant letter that was never forwarded. Test results that were filed but never acted on. A diagnosis from years ago that's relevant to the current situation but has been forgotten.

Having your records isn't about distrust. It's about having the complete picture in one place — which no single provider currently holds. When you see a new specialist, you can provide context that would otherwise be missing. When you seek a second opinion, you can share the full evidence base.