QUICK ANSWER
You have a legal right to a copy of your medical records under UK GDPR, and it is free. Ask your GP practice for GP records, or the health board’s medical records department for hospital records. They must respond within one calendar month (extendable for complex requests). You do not need to give a reason, and you do not need a solicitor to ask — though if you are making a compensation claim, your solicitor will usually obtain them for you with your signed authority.
Medical records requests sit behind a surprising number of the searches that reach us — people wanting to check what a doctor wrote, gather evidence before speaking to a solicitor, or understand a diagnosis properly. And most people assume it involves forms, fees and gatekeeping. It does not. The right of access is one of the most straightforward legal rights you have. Here is exactly how it works in Scotland.
Your Right of Access — and Why It Is Free
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you can ask any organisation holding your personal data for a copy of it. This is called a subject access request, and health records are no exception. The first copy is free of charge — a fee can only be charged for repeat copies of the same records or for requests that are genuinely excessive. There is no limit on how often you can make a request, although asking repeatedly for identical records can be refused as excessive; asking for updated records after new treatment is entirely fine.
Who To Ask
It depends where the records live. Your GP practice holds your GP record — consultations, referrals, prescriptions, test results sent to the practice. Ask the practice directly, in writing or through their online system if they have one. Hospital records are held by the NHS health board that runs the hospital — NHS Greater Glasgow and Clyde, NHS Lothian, NHS Lanarkshire and so on — and every board has a medical records or subject access team. A quick search for the board name plus “subject access request” finds the right address, or the hospital switchboard will point you there. Dental, optician and private treatment records are requested from the practice or provider directly, under the same right.
How To Ask — a Template You Can Copy
A request does not need legal language. It needs to identify you, say what you want, and prove who you are (a copy of photo ID and something showing your address is usually asked for). Something like this does the job:
Dear Sir or Madam,
I am writing to make a subject access request under the UK General Data Protection Regulation. Please provide me with a copy of my full medical records held by your organisation, including [GP records / hospital records for my admissions and outpatient appointments / all correspondence, test results and imaging reports].
My details: [full name, date of birth, address, CHI number if known]. I enclose a copy of my photo ID and a recent utility bill as proof of identity.
If you require anything further to process this request, please contact me. I look forward to your response within one calendar month.
Yours faithfully,
[Name]
How Long It Takes
The organisation must respond within one calendar month of receiving your request and verifying your identity. For complex requests — decades of records across multiple departments, for instance — they can extend by up to a further two months, but they must tell you within the first month that they are doing so and why. In practice, GP records often arrive well inside the month; full hospital records for a long treatment history take longer.
Why Records Matter So Much in Compensation Claims
Every medical negligence claim, and most injury claims, are built on the records. They show what you told clinicians and when, what was found, what was done, and what was missed — the contemporaneous account that no memory can compete with. If you are considering a medical negligence claim, your solicitor will obtain the full records with your signed mandate as one of the first steps, and an independent expert will review them against the standard of care.
One thing that surprises people in injury claims: the other side will usually want to see your pre-accident records too. Insurers check whether symptoms existed before the accident — a fair question fairly asked, and one your solicitor manages so that only relevant records are disclosed. Having nothing to hide, and records that clearly date your symptoms to the accident, strengthens a claim rather than weakening it.
Records of Someone Who Has Died
The right of access is personal and ends at death — but the Access to Health Records Act 1990 allows the personal representative of the estate, and anyone with a claim arising from the death, to access the records of a person who has died. This is often the first step in a fatal accident claim or a claim under the Damages (Scotland) Act 2011, and a solicitor handles the request as part of the claim.
If You Are Thinking About a Claim
You do not need to gather your records before speaking to us — the free assessment works from your account of what happened, and the solicitor obtains the records afterwards. But if reading your records is what prompted the questions, we are happy to help you make sense of what comes next.
Start Your Free Assessment
Related articles:
-
Can You Sue the NHS in Scotland? What Making a Claim Actually Involves
17 August 2026
Yes - you can sue the NHS in Scotland. Who you actually claim against, whether it affects your care, time limits, and how no win no fee claims work.
-
Police Reports After a Road Accident in Scotland: When to Report, and How to Get the Report for Your Claim
24 September 2026
When you must report a road accident to Police Scotland, how your solicitor gets the police report, and why it matters for your compensation claim.
-
Should I Claim for Whiplash? Time Limits, Myths and What It Is Really Worth in Scotland
18 September 2026
Should you claim for whiplash after a car accident in Scotland? What it is worth, the 3-year time limit, the myths that put people off, and when not to bother.
View all articles →
About this article: Written by
David Gildea, Claims Manager and qualified Scottish paralegal at Scottish Claims Helpline.
Scottish Claims Helpline is authorised and regulated by the Financial Conduct Authority
(
FRN 830381).