Can any doctor see your medical records

Health and care records are confidential so you can only access someone else's records if you're authorised to do so.

To access someone else's health records, you must:

  • be acting on their behalf with their consent, or
  • have legal authority to make decisions on their behalf (power of attorney), or
  • have another legal basis for access

Applying for access to someone else's health records

A request for someone's health and care records should be made directly to the health and care organisation that provided the treatment, such as:

  • GP surgery
  • hospital
  • optician
  • dentist
  • care home

This is known as a Subject Access Request (SAR), as set out by the Data Protection Act of 2018.

Many healthcare providers have SAR forms that you can complete and return by email or by post.

Here is an example of an SAR form on the North Bristol NHS Trust website.

You will need the patient or service user's written consent if you wish to access their record.

Where written consent is not possible, other arrangements will be necessary.

Under the Data Protection Act, requests for access to records should be responded to as soon as possible, or within 1 month. However, government guidance for healthcare organisations says they should aim to respond within 21 days.

Refused request

A healthcare provider can refuse to supply some of your request if, for example:

  • it is likely to cause serious harm to the physical or mental health of any individual
  • the information you have asked for contains information that relates to another person

If your request is rejected, or you have a complaint about the process, you can complain to the healthcare provider.

If you are still not satisfied, you can make a complaint to the Information Commissioner's Office.

If a person does not have the mental capacity to manage their own affairs and you are their attorney, you will have the right to apply for access to their health and care records.

This would apply, for example, if you have a Lasting Power of Attorney with authority to manage their property and affairs.

The same applies to a person appointed to make decisions about such matters by the Court of Protection in England and Wales.

Accessing children's records

A person with parental responsibility will usually be entitled to access the records of a child who is aged 12 or younger.

Children aged 13 or older are usually considered to have the capacity to give or refuse consent to parents requesting access to their health records, unless there is a reason to suggest otherwise.

Although British Medical Association guidance says that every reasonable effort must be made to encourage the child to involve parents or guardians.

Apart from you, the only people who can view or access your My Health Record are:

  • Your healthcare providers, for example GPs, specialists, or hospital staff
  • People you invite to help you manage your record (nominated representatives)
  • People who manage your record for you if you are not able to (authorised representatives)

See Digital Health for more information about privacy and access.

In our last blog, we talked about the Health Insurance Portability and Accountability Act of 1996 (HIPAA) that gives you rights over your health information. With a few exceptions, you have the right to inspect, review and get a copy of your medical records and billing records.

Of course, you have the right to look at your own medical information. Yet, who else is allowed to look at your medical history? Generally, no one is allowed to look at your health information without your permission. However, there are some exceptions where, by law, your medical information may be used and shared for specific reasons. For example, your health information may be used for reporting as required by state or federal law. There are federal and state laws that require reporting when the flu is in your area for instance. In many cases, you may be entitled to know who has looked at your health information.

Fortunately, these exceptions are limited. Generally, your health information cannot be seen or used without your permission. Your doctor may not give your health information to marketing and advertising agencies without your prior written permission for example. In addition, family members cannot obtain information about their relative without the patient’s consent. Similarly, under the New York State Mental Hygiene Law, a patient’s consent is generally needed before disclosures to family members can be made.

However, it should be noted that HIPPA does not prevent your employer from requesting information about your health if your employer needs the information to administer workers’ compensation, health insurance or sick leave. Nonetheless, your health provider may not give your employer your health information directly without your permission. If you believe your HIPPA rights are being violated, you should contact an attorney to protect your rights.

Are medical records private in Singapore?

All medical staff are bound by law and professional ethics to keep your medical information strictly confidential. As EMR are computer records, unauthorised access is an offence under section 3 (1) of the Computer Misuse act, Cap 50A.

Should you tell a doctor you are there for a second opinion?

Being prepared for a second opinion appointment is important. After all, you're meeting with a provider who doesn't know you, your medical history, or your current diagnosis. Make sure you tell their office that you're coming in for a second opinion and ask what medical records you should deliver to them in advance.

Can someone access my medical records without my permission UK?

Health and care records are confidential so you can only access someone else's records if you're authorised to do so. To access someone else's health records, you must: be acting on their behalf with their consent, or. have legal authority to make decisions on their behalf (power of attorney), or.

Who owns medical records in Singapore?

The Committee received two enquiries on ownership of medical records. After careful deliberation and seeking relevant legal and regulatory advice, the Committee reaffirmed its previous position that the ownership of the medical records of a clinic, in any format, belongs to the clinic licensee.