Your medical records are yours. You have rights to access them, know what they say about you, and correct inaccuracies. Many patients don't use these rights.
What's in your medical records
GP records include: appointments, symptoms you described, diagnoses, medications prescribed, test results, letters from specialists, hospital discharge summaries, your medical history, notes about your lifestyle and habits.
Specialist records include: consultation notes, examination findings, diagnoses, treatment recommendations, procedural notes if you had surgery, follow-up plans.
Hospital records include: admission details, treatment received, medications given, surgical notes (for operations), discharge summary, and any complications.
Requesting your records
Ask your GP surgery or hospital for your records. Most have formal request forms (available on their websites). You can request in person, by post, or sometimes by email.
Response time is 30 days by law. If you're a private patient, private clinicians have 21 days to respond.
Cost: NHS generally provides records free. Some private providers charge (capped at £50 by law). If extensive copying is needed, small charges apply.
Format: You can request paper copies or electronic (increasingly, electronic is standard).
What to look for
Inaccuracies: Dates wrong, symptoms attributed to you that you never reported, medications listed you never took. These should be corrected.
Misunderstandings: Sometimes records reflect a doctor's misunderstanding of what you said. These can usually be clarified and corrected.
Missing information: If something important isn't recorded (you think you mentioned symptoms that aren't in the notes), you can add a note requesting information be updated.
Correcting errors
Contact the provider who made the error. Explain what's wrong and why. They should amend the record. This might take 2-4 weeks. You get confirmation once changed.
If they disagree with your version, you have the right to add a note to your records stating your version. The original entry stays, but your disagreement is recorded.
Privacy and sharing
Your records are confidential. Doctors can share them with other healthcare providers involved in your care (your specialist, your hospital) without explicit permission.
Sharing beyond your healthcare team requires consent: insurers, lawyers, employers (except occupational health), etc. Your GP needs permission before releasing records to anyone outside your healthcare team.
You can restrict access to parts of your record. This is possible but unusual and should be discussed with your GP.
Using records for complaints or legal claims
If you're making a complaint or considering legal action, get copies of all relevant records before formally complaining. Once you've put a provider on notice of complaint, they might restrict access (though they shouldn't).
For legal claims, your solicitor requests records formally. Providers are legally obliged to provide them (with limited exceptions for confidential information about third parties).
Digital records and access
Many practices now have patient portals where you can see parts of your records (appointments, test results, medications) online. This is becoming standard but adoption varies.
If your practice offers online access, use it. Check results when they come in. You don't need to wait for an appointment to see that a test is normal—you can see it immediately.
Keeping your own records
Beyond what your providers hold, keep your own file: copies of specialist letters, test results, imaging reports. This creates a personal backup and gives you complete access without requesting repeatedly.
A health timeline can be useful: when diagnoses occurred, when major treatments happened, medications tried. This helps you (and new doctors) see patterns and understand your history.
Records matter more than you think
Your records are the evidence of your healthcare history. If you need to switch doctors, get a second opinion, or make a complaint, having complete accurate records is essential. Get copies regularly, not just when crisis hits.
Data protection and your rights under GDPR
Your medical records are personal data protected under UK GDPR. You have the right to: access (which we've covered), rectification (correcting errors), erasure (in limited circumstances), data portability (getting your data in a structured format to share with another provider), and restriction of processing.
Right to erasure ("right to be forgotten") is limited for medical records: providers must keep them for legal and clinical reasons. However, you can request older records be deleted once legally sufficient time has passed (usually 6-10 years depending on condition).
Data portability: you can request your records in a structured electronic format. This is useful when changing providers—you can provide your complete records electronically to your new GP, ensuring continuity.
What doctors can refuse to show you
Rare situations exist where access is restricted: information about third parties (if your records mention another person's health), information that might cause you harm (if a doctor genuinely believes seeing certain information would damage your mental health, they might restrict it—but this requires justification), information pending investigation or legal proceedings.
In practice, access restrictions are unusual. If a provider refuses your records, ask why in writing. If unsatisfied with their explanation, escalate to the Information Commissioner's Office (ICO).
Records in complex or disputed care
If you're navigating a complaint or have concerns about your care, request records early—before formal complaint. Once you've given notice of complaint, some providers become defensive and may restrict access to certain information.
Your solicitor can request records formally if you're pursuing a legal claim. Medical records in litigation are obtained through "disclosure"—both sides exchange relevant documents. This is a formal legal process.
Records requested for research or public health purposes: NHS may use your records for research, epidemiology, or public health (contact tracing, outbreak investigation). This can sometimes happen without explicit consent if data is anonymized, but you have the right to opt out of research use.
NHS vs private records
NHS records are held by the NHS organization providing care (your GP practice, hospital trust). You request them from that organization specifically.
Private records are held by the private provider (private hospital, clinic, consultant). You request them directly from that provider. Private providers sometimes charge for records (up to £50 per request plus reasonable copying costs).
If you've received care from both NHS and private providers, you need to request records from each separately. They don't automatically coordinate record-sharing. Your new provider can request records on your behalf if you authorize it, which saves you time.
Practical steps to manage your records
Create a system: whether digital folder or paper file, organize your records chronologically. Include: appointment summaries, test results, imaging reports, specialist letters, discharge summaries, medication lists with dates started/stopped.
Update as you go: when you see a doctor, ask for a summary or records of what was discussed. Don't wait years, then request everything at once.
Share with your team: if you're seeing multiple doctors, provide each with copies of relevant records from others. This prevents gaps and ensures coordination.
Review annually: once yearly, request your complete records and review them. Check for accuracy, notice patterns, ensure important information is documented.
Records for future medical decisions
Your records might inform important future decisions: if you become seriously ill and can't communicate, your past records and treatment preferences help doctors understand you. If you develop a new condition, past records show whether this is connected to something else or genuinely new.
Having organized, accessible records means you're prepared for whatever healthcare needs arise. You're not relying on doctor memory or scattered notes. You own your health narrative.