Health Record Request Form Template for England and Wales

Generate a bespoke document

Trusted by 200k+ teams

4.7 Capterra
4.8 Product Hunt
4.6 Trustpilot

What is a Health Record Request Form?

The Health Record Request Form serves as a standardized mechanism for individuals to exercise their legal right to access their medical records under English and Welsh law. This document is essential for maintaining transparency and compliance with data protection regulations while ensuring secure and appropriate access to sensitive health information. The form is designed to capture all necessary information required by healthcare providers to process such requests, including patient identification, specific records being requested, and any relevant authorizations. It incorporates requirements from key legislation including the UK GDPR and Data Protection Act 2018, making it a crucial tool for both healthcare providers and patients in managing health information access.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

England and Wales

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Health Record Request Form

A Health Record Request Form is your legal pathway to accessing your medical records from healthcare providers in England and Wales. This document ensures your request complies with UK GDPR and Data Protection Act 2018 requirements, giving you the right to obtain copies of your health information within one month of submission.

When do you need this document?

You need this form whenever you want to access your medical records from NHS trusts, private hospitals, GP practices, or other healthcare providers. Common situations include reviewing your medical history before changing doctors, checking records for insurance claims, understanding your treatment history, or obtaining records for legal proceedings. If you're acting on behalf of someone else, such as a deceased relative or someone lacking mental capacity, you'll need this form with appropriate legal authorization. The form is also required when requesting specific types of records like mental health assessments, surgical notes, or diagnostic test results from particular time periods.

Key legal considerations

Your request must include sufficient detail for the healthcare provider to locate your records, including your full name, date of birth, and NHS number where available. Identity verification is mandatory under UK GDPR, so you'll need to provide acceptable proof of identity such as a passport, driving license, or birth certificate. If requesting records on behalf of another person, you must demonstrate legal authority through power of attorney documentation, court orders, or proof of entitlement as a personal representative. Healthcare providers can charge reasonable fees for providing copies, though the first copy is typically free. Be aware that some information may be redacted if it relates to third parties or could cause serious harm to your physical or mental health.

Legal requirements in England and Wales

Under the Data Protection Act 2018 and UK GDPR, healthcare providers must respond to your request within one month, though this can be extended to two months for complex requests. The Access to Health Records Act 1990 governs requests for deceased patients' records, limiting access to personal representatives and those with legitimate interests. Mental Capacity Act 2005 provisions apply when requesting records for individuals lacking decision-making capacity. Healthcare providers must provide records in an accessible format and explain any medical terminology if requested. They cannot refuse access based solely on the age of records, though very old records may be difficult to retrieve. All processing must comply with special category data protection requirements given the sensitive nature of health information.

GOVERNING LAW

Applicable law

This Health Record Request Form is drafted to comply with England and Wales law. Key legislation includes:

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it