This guide is maintained as a current resource for September 2026 and covers only the laws of England and Wales. Information is for general guidance, not legal advice. Consult a qualified solicitor for advice specific to your situation.
Comprehensive guide to tracking medical records for personal injury claims in England and Wales. Learn how to identify providers, submit Subject Access Requests (SARs), understand your legal rights under GDPR and the Data Protection Act 2018, and organise records to support a compelling compensation claim.

Medical records form a critical part of many personal injury, clinical negligence and compensation claims in England and Wales. They provide documentary evidence of injuries, treatment, pre‑existing conditions and prognosis, and can significantly strengthen a case when properly obtained and analysed. This article explains how to locate, request and manage medical records for your claim, the legal rights that govern access to health information in the UK, common practical steps, potential pitfalls and frequently asked questions. All explanations use UK‑specific terminology and legal principles to help readers without prior legal knowledge while remaining accurate and credible for solicitors.
Why Medical Records Matter in a Claim
Medical records contain detailed information about your health care, such as consultations, diagnoses, treatments, test results and referrals. In a personal injury claim, these records help establish:
- The nature and extent of injuries caused by the incident.
- Pre‑existing conditions which might affect valuation of the claim.
- The timeline of treatment and recovery.
- Evidence to support future care and rehabilitation needs.
Records are typically used by solicitors, medical experts and insurers to assess liability and quantify compensation. Without access to comprehensive records, it may be difficult to prove the full impact of an injury or medical condition.
Legal Rights to Access Medical Records
Subject Access Requests and Data Protection
Under the Data Protection Act 2018 and the General Data Protection Regulation (GDPR), individuals have a legal right to access their own health records held by public and private healthcare providers. This is done through a Subject Access Request (SAR). The provider must respond within one calendar month, although this period can be extended by up to two further months for complex or large requests, provided you are informed of the reason for the delay.
SARs can be submitted in writing or electronically to the data controller holding the records (for example, a GP practice, hospital trust or private clinic). Requesting your own records does not usually require an explanation for why you want them, and there is normally no charge unless the request is manifestly unfounded, excessive or repetitive.
Access to Records of Others
Medical records are confidential by law. To access someone else's records, you generally need either their written consent, legal authority (such as a power of attorney) or a clear legal basis related to a claim you intend to pursue. Solicitors acting on behalf of clients will usually obtain written authority before making requests.
Deceased Patients' Records
If you are pursuing a claim arising from a deceased person's injury or death, access to their medical records is governed by the Access to Health Records Act 1990. Under this Act, a personal representative (such as an executor) or someone with a potential claim relating to the death may request access to records necessary for that claim. Disclosure is limited to information relevant to the claim and may be refused in certain sensitive circumstances.
Step‑by‑Step: How to Track Your Medical Records
1. Identify All Healthcare Providers
Medical records are not held in one centralised database in the UK. To compile a complete health history, you may need to contact each provider that has treated you, such as:
- Your GP practice or surgeries.
- Hospitals and clinical trusts where you received care.
- Specialist clinics, private healthcare providers or dentists.
- Community services (for example, physiotherapy or mental health services).
Compile a list of organisations and approximate dates of treatment to ensure you request records from all relevant sources.
2. Submit Subject Access Requests (SARs)
For each provider identified:
- Submit a written SAR to the records department or designated data controller.
- Include your full name, date of birth, NHS number (if known), address and specific timeframe or types of records you require.
- If a solicitor is acting on your behalf, include written authority or a signed consent form. Solicitors often use forms agreed with the British Medical Association to streamline this process.
Requests can usually be emailed or posted to the provider. Some NHS practices also offer online SAR forms.
3. Understand What You Will Receive
A full medical record may include:
- GP consultation notes and summaries.
- Hospital admission and discharge records.
- Test results, imaging and surgical notes.
- Referral letters to specialists.
- Correspondence between healthcare professionals.
Records should be given to you in a format that allows review (often as printed documents or PDFs). Providers must redact information only in specific circumstances, such as where disclosure could cause serious harm.
4. Organise and Review Records
Once received, organise the records by date and provider. Solicitors typically review:
- Pre‑accident medical history.
- Entries directly relating to your injury.
- Notes on treatment, prognosis and any recommendations.
- Any inconsistencies or gaps in documentation.
This review informs the next stages, including medical expert reports and valuation of general and special damages.
Timescales and Follow‑Up
Providers should respond to SARs within 28 days from receipt of a valid request. If they need extra time due to volume or complexity, they must inform you and explain the extension.
If a provider fails to respond, provides incomplete information or improperly denies access, you may:
- Follow up with a reminder and a copy of the original request.
- Use the provider's complaints procedure.
- Escalate to the Information Commissioner's Office (ICO), which oversees compliance with data protection rights.
Practical Tips for Tracking Records
Keep a Record Log
Maintain a list of:
- Providers contacted.
- Dates SARs were submitted.
- Dates responses or partial responses received.
- Any follow‑up correspondence.
This helps track progress and ensures no provider is overlooked.
Be Clear and Specific
When making SARs, specify whether you want all records or only those relating to a particular injury or period. This clarity can reduce processing time and help avoid unnecessary records.
Consent for Third Parties
If someone else (such as a solicitor) is retrieving records for you, ensure they have written consent and that the provider is satisfied with identification and authority documentation.
Common Challenges and How to Address Them
Records Held by Multiple Organisations
Because medical records are often fragmented across GP practices, hospitals and specialist services, claimants must make separate requests to each organisation. NHS bodies may not automatically share records among themselves.
Redaction and Exemptions
Providers may withhold or redact parts of records where disclosure would likely cause serious harm or identify third parties. In such cases, you may request the rationale for redaction and seek legal advice if necessary.
Deceased Person's Records
Accessing records for someone who has died requires compliance with the Access to Health Records Act 1990, and disclosure is limited to information relevant to the claim.
Key Takeaways
Tracking medical records is essential for many personal injury and clinical negligence claims because records provide independent evidence of injuries, treatment and prognosis. In England and Wales, individuals have a statutory right under GDPR and the Data Protection Act 2018 to access their own health records through Subject Access Requests (SARs), and authorised third parties can make requests on their behalf. Records are held by multiple healthcare providers, so claimants must identify all relevant sources, make clear written requests, organise and review the documents, and follow up where responses are delayed or incomplete. Understanding how to track and manage medical records helps lay claimants and their legal advisors build robust evidence packages that support fair compensation.