Access to Health Records Act 1990

Patients have a right to request access to their own medical records and can also provide consent for disclosure to third parties. Healthcare professionals have a duty to protect the confidential data of their patients and should only share or access records if they are involved in the patient’s care. This is on a ‘need-to-know’ basis.

http://systems.digital.nhs.uk/infogov/links/dhaccessrecs.pdf