Explains your rights to see and have copies of your personal information, and how to complain if access to your records is refused or if what is written about you is wrong.
This page covers the following information about your personal data rights:
Yes, you have a legal right to access personal information held about you by an organisation.
This right is protected by the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR). These laws cover your rights regarding information held about you by organisations such as:
In some situations, an organisation does not have to share your personal information with you. This is known as ‘withholding’ information. See our section on withholding personal information to learn about why this might happen.
You have the right to ask an organisation:
You also have the right to see the information held about you and to be given copies of it. This includes both digital and paper records.
The organisation must provide copies of your records in a permanent form. This is unless you agree to them providing the information in some other way, such as viewing it in person at the organisation’s office.
If you want the information in a particular format, it's best to mention this when first making your request. For example, you might ask for:
There are some specific situations where an organisation is allowed to withhold (not share) personal information from you. These include:
If an organisation refuses to share information with you for one of these reasons, they should write to you explaining why.
In most cases, organisations must make proper efforts to find all the information you have requested. They can't refuse your request purely because it will be inconvenient for them or will require some work.
However, they don't have to comply with any requests that are ‘manifestly unfounded or excessive’. This could apply if:
If an organisation finds your request excessive, it should ask you to be more specific rather than refuse you outright.
If the records you have requested about yourself also include personal information about someone else (a third party), the organisation doesn't have to share it unless:
One way around this problem may be for the organisation to redact information that would identify the third party. This means you couldn't see those parts, but could see everything else.
But information that identifies a health or social care professional should not usually be redacted. For example, the names of doctors who conducted an assessment under the Mental Health Act.
You usually have the right to see your health records, also known as medical records, and any information held about you by social services.
This information may be withheld if it would be likely to cause serious harm to your mental or physical health, or that of another person.
An organisation can only use this exception after assessing the likelihood of serious harm. This would usually involve consulting with the health professional responsible for your care, or the care of the person they're concerned about. The organisation must have spoken to the health professional within the last six months if they want to rely on this exception.
An organisation cannot use 'serious harm’ as a reason for withholding your information simply because you might find the information upsetting.
The NHS website has information on how to access your medical records.
You usually have the right to find out what personal information is held about you by the police.
However, the police don't have to share this with you if doing so would be likely to make it harder for them to:
You don't usually have the right to access personal information about other people.
The exceptions are:
Information which relates to you in such a way that you can be identified from the information. Personal information might be held on computers, in emails, printed out or in handwritten documents, or in photographic images, videos or audio recordings.
To find out more about your rights regarding your personal information, see our pages on my personal information.Visit our full listing of Legal Terms
'Capacity' means the ability to understand information and make decisions about your life. Sometimes it can also mean the ability to communicate decisions about your life.
For example, if you do not understand the information and are unable to make a decision about your treatment, you are said to 'lack capacity' to make decisions about your treatment.
See our pages on the Mental Capacity Act for more information.Visit our full listing of Legal Terms
A health record is any record of information relating to your physical or mental health that has been made by, or on behalf of, a health professional.Visit our full listing of Legal Terms
This means removing the relevant information. It can be done by crossing through the relevant information with a black marker pen and then photocopying the document or by using a computerised programme specially designed for this purpose.Visit our full listing of Legal Terms
These regulations tell organisations how they can use your personal information. They also give you rights to access and correct personal information held about you.Visit our full listing of Legal Terms
The Data Protection Act 2018 is the law that sets out how organisations must handle and process your information. It also gives you rights to access and correct personal information held about you.Visit our full listing of Legal Terms
This is a law that applies to England and Wales which allows people to be detained in hospital (sectioned) if they have a mental health disorder and need treatment. You can only be kept in hospital if certain conditions are met.
See our pages on the Mental Health Act for more information.Visit our full listing of Legal Terms
The rights and responsibilities that a parent has for a child. This might include making decisions about their upbringing and where they live. It is possible for people who are not parents of a child to get parental responsibility. For example, a grandparent or family member could be given parental responsibility by the court.Visit our full listing of Legal Terms
This information was published in November 2021. We will revise it in 2024.
References are available on request. If you would like to reproduce any of this information, see our page on permissions and licensing.