Medical Records Release Letter Template for England and Wales

A Medical Records Release Letter is a formal request document that enables patients or their authorized representatives to obtain copies of medical records from healthcare providers in England and Wales. This document serves as the primary mechanism for accessing health information while ensuring compliance with strict data protection laws that govern the processing and disclosure of sensitive medical data.

When do you need this document?

You will need a Medical Records Release Letter when requesting copies of medical records from any healthcare provider, including NHS trusts, private hospitals, GP practices, or specialist clinics. This document is essential when you need medical records for ongoing treatment with a new healthcare provider, legal proceedings such as personal injury claims, insurance assessments, employment health checks, or when family members need access to deceased relatives' records. The letter is also required when healthcare professionals need to share patient information between different medical facilities or when patients are transferring their care to another provider.

Key legal considerations

Your Medical Records Release Letter must comply with the Data Protection Act 2018 and UK GDPR, which classify health information as special category personal data requiring enhanced protection. The document must clearly specify the exact records being requested, the purpose for the release, and demonstrate lawful basis for processing. Healthcare providers have a duty of confidentiality under common law and professional obligations, meaning they can only release records with proper authorization. When requesting records on behalf of someone else, you must provide evidence of your authority, such as lasting power of attorney, court order, or written consent from the patient. For deceased patients' records, the Access to Health Records Act 1990 governs who can access information and within what timeframes. Mental capacity considerations under the Mental Capacity Act 2005 may apply when patients lack the ability to make decisions about their medical information.

Legal requirements in England and Wales

Under England and Wales law, healthcare providers must respond to valid medical records requests within one calendar month of receiving a properly completed request, though this may be extended by up to two additional months for complex requests. You have the right to access your medical records free of charge under UK GDPR, though providers may charge reasonable fees for additional copies or administrative costs. The Data Protection Act 2018 requires healthcare providers to verify the identity of requestors and ensure they have proper authority to access the records. Providers must redact information about third parties unless they have consent or disclosure is necessary. All requests must specify the particular records needed rather than requesting entire medical files, and you must provide sufficient information to locate and identify the relevant records. Healthcare providers can refuse requests that are manifestly unfounded, excessive, or would compromise the rights of others, but must provide clear reasons for any refusal.