Medical Record Request Letter Template for England and Wales

A Medical Record Request Letter is your formal written request to healthcare providers for access to your personal medical records. Under England and Wales law, you have the legal right to access your health data through the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. This letter ensures your request meets all legal requirements and provides healthcare providers with the information they need to process your application efficiently.

When do you need this document?

You need a Medical Record Request Letter when seeking copies of your medical files from hospitals, GP practices, or other healthcare providers. This document is essential when you're switching doctors and need to transfer your medical history, pursuing legal action where medical evidence is required, or applying for insurance where health records must be disclosed. You may also need this letter when seeking a second medical opinion, conducting personal health research, or when family members require access to deceased relatives' records under the Access to Health Records Act 1990.

Key legal considerations

Your request must specify exactly which records you want and the timeframe involved, as healthcare providers can charge reasonable fees for extensive requests. Under UK GDPR, providers must respond within one month of receiving a valid request, though this can be extended to three months for complex requests. Include proper identification documents with your letter, as providers must verify your identity before releasing sensitive health data. If requesting records on behalf of someone else, you'll need appropriate legal authority such as lasting power of attorney or court-appointed guardianship. Be aware that certain records may be withheld if disclosure could cause serious harm to your physical or mental health, though you have the right to challenge such decisions.

Legal requirements in England and Wales

In England and Wales, your Medical Record Request Letter must comply with specific statutory requirements under the Data Protection Act 2018 and UK GDPR. The letter should reference your legal right to access personal data under Article 15 of UK GDPR and include your full name, date of birth, NHS number, and current address. Healthcare providers may request additional identification, typically a copy of photo ID and proof of address. For deceased patients' records, different rules apply under the Access to Health Records Act 1990, requiring proof of your legal relationship to the deceased or legitimate interest in accessing the records. NHS Constitution also guarantees your right to access health records, and providers must have clear policies for handling such requests within the statutory timeframes.