How should a request for access to medical records be made?

View printable version of this page

Question: How should a request for access to medical records be made?

Answer: National Privacy Principle 6 (NPP 6) deals with access to medical records held by a private sector organisation – see NPP 6. NPP 6 doesn’t set out any requirements for the way a request for access should be made.

This means that individuals can exercise their right to see or to copy their medical records simply by asking the organisation holding the records. If the request is a complex one, for example the information comes from a number of different sources, it may be necessary to put the request in writing. An organisation may need to establish the identity of the individual making the request for access.

For more information about accessing medical records, see the Guidelines on Privacy in the Private Health Sector.