Home / Commons / Session kits / Your health records / Handout: United Kingdom
Reach · Handout
Your health records: United Kingdom.
A take-home sheet for people at the session. Other countries: United States · Canada · Australia.
Moraph for Good · Reach
Your health records: United Kingdom
Handout · moraph.org/commons/sessions/reach/your-health-records
In many countries you have a right to see your own health records and get a copy. This sheet sets out the steps, with the rules for where you live in the box below.
Asking for your records
- Check the patient portal first; some records may already be there.
- Ask the provider how they take requests: a form, email, letter or in person.
- Say what you want, for which dates, and how you want it: paper, electronic or to view.
- Keep a copy of your request and note the date.
What to expect
- You may be asked to prove who you are.
- Ask about any cost before they start.
- If they refuse any part, ask for the reason in writing.
Checking and correcting
- Check medicines, allergies, conditions and contact details.
- Ask in writing for a correction, with a copy of the page.
- If they disagree, ask for your own statement to be added.
Keeping records safe
- Store copies somewhere private and think before sharing them.
- Use a strong, unique password for any online account with your records.
- Sign out fully on a shared or public computer.
In the United Kingdom
- Subject access request. You have the right to ask an organisation, including a GP surgery or hospital, for copies of your personal information. This is called a subject access request, and you don’t need a solicitor to make one. You can include your NHS number to help them find your records.
- Cost and timing. Normally organisations can’t charge for responding. They usually have one month to reply, which can be extended by up to two more months for complex requests if they tell you why within the first month. The clock starts once they have any ID they ask for.
- Proof of identity. The Information Commissioner’s Office expects organisations to ask for ID when you request sensitive information such as health records. This protects your records.
- If you are unhappy. Complain to the organisation first. If that doesn’t resolve it, you can complain to the Information Commissioner’s Office, ideally within three months of your last meaningful contact with the organisation.
- NHS App in England. If you are 13 or over and registered with a GP surgery in England, the NHS App or NHS website can show some of your GP record, such as test results, once you prove who you are. What you can see depends on your GP surgery.
Official places to check:
- Information Commissioner’s Office: ico.org.uk/for-the-public/getting-copies-of-your-information-subject-access-request
- Information Commissioner’s Office: ico.org.uk/for-the-public/getting-copies-of-your-information-subject-access-request/what-to-expect-after-making-a-subject-access-request
- Information Commissioner’s Office: ico.org.uk/for-the-public/getting-copies-of-your-information-subject-access-request/what-to-do-if-you-dont-get-a-response-or-youre-unhappy-with-it
- NHS: www.nhs.uk/nhs-app/setting-up/get-full-access
- NHS: www.nhs.uk/nhs-app/help/test-results
General information, not advice about your own situation. Checked 19 October 2026. If an official source says something different, it is right. Free to copy and adapt. moraph.org/commons/sessions/reach/your-health-records