Summary of Your Legal Rights
Under UK GDPR Article 15 and the Data Protection Act 2018, you have an absolute legal right to see your complete NHS medical file. This includes the hidden computer access logs showing every doctor, nurse, or staff member who opened, viewed, or edited your records.
1. What Are Your NHS Medical Data Rights?
When you request your medical records from a hospital or GP surgery (known as a Subject Access Request or SAR), they often send you a short, simplified PDF summary. However, UK law gives you the right to see the full digital record and system access history.
- Right to Full Access (UK GDPR Article 15): You can ask for a complete copy of all clinical notes, consultation histories, and correspondence.
- Computer Access Logs: Systems keep an automatic record of staff user IDs, exact timestamps, workstation locations, and screens viewed. These logs belong to your personal record under data protection law.
- 30-Day Limit: NHS organisations must provide your complete records free of charge within 30 days.
2. Complete Computer Records vs. Short PDF Summaries
To make sure you get complete files with nothing hidden, your request should specifically ask for background computer logs and access histories:
| Record Type | Standard Summary PDF | Full Legal Disclosure |
|---|---|---|
| Doctor & Consultation Notes | Short summary PDF | Full, unredacted consultation history |
| Computer Access Logs | Often Left Out | Complete staff view & login records |
| Record Changes & Edits | Not shown | Timestamped edit & history log |
🔍 Deep Technical & Forensic Audit Link
This post summarizes legal rights detailed in our master technical audit. Jump directly to the relevant forensic section on the parent domain: