Key points
- Your whole history can sit in one record you hold, built from a few written requests to each clinic and laboratory.
- In the US, a provider must act on your access request within 30 days, with one written extension of up to 30 more.2
- In the UK, an organisation usually has one month to answer a subject access request and normally cannot charge for it.34
- A wai Profile keeps results, letters, prescriptions and wearable readings on one timeline that you control, export or remove.5
Summary
Ask every clinic and laboratory that has treated or tested you for a copy of your records under your right of access, and keep the copies together in a record you hold. A US provider must act within 30 days, and a UK organisation usually has one month and normally cannot charge.
Your whole history, from every clinic and laboratory that has seen you, can sit in one record you hold and share with the clinicians you choose. A few written requests get you there, and the law sets the deadlines.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee your results and letters from different clinics on one timeline, with every sharing permission yours to give and take back.
| Source | What to ask for | Format to ask for |
|---|---|---|
| GP or family doctor | Summary, consultation letters, medication and allergy list, vaccinations | Electronic copy, searchable |
| Private clinic | Consultation letters, procedure notes, prescriptions issued | Electronic copy, searchable |
| Laboratory | Completed test reports with units and reference ranges | Electronic copy of each report |
| Hospital | Discharge summaries, clinic letters, operation notes | Electronic copy, searchable |
| Imaging centre | Written reports, and images if a second opinion is planned | Reports electronically, images on request |
| Dentist | Treatment notes and X-ray reports | Electronic copy |
| Your log | Date sent, date due, date received | One line per request |
How often records arrive on their own
In a survey of 8,122 US family physicians fielded in 2023 and 2024, only 8% reported an ideal experience receiving test results from outside hospitals or health systems, meaning they often obtained them automatically and could easily find and compare them in their own record system.1 For encounter documents, the best-performing type, the figure was 19%.1 The copy you hold closes that gap.
Your right of access in the United States
Under the HIPAA Privacy Rule, a covered provider must act on a request for access no later than 30 days after receiving it. It may extend that once, by no more than 30 days, and only if it tells you in writing why and by when.2
Where the record is held electronically and you ask for an electronic copy, the provider must give it electronically, in the form you ask for if it is readily producible. Any fee must be reasonable and cost-based, limited to labour for copying, supplies, postage and preparing a summary if you agreed to one.2
You can also have a copy sent directly to someone else, such as a new clinic. The request must be in writing, signed, and must name the person and where to send it.2
Your right of access in the United Kingdom
In the UK, the right of access lets you ask any organisation, including a private clinic or a laboratory, for a copy of the personal information it holds about you. Anyone can ask without a solicitor, and the organisation usually has one month to reply.3
Normally there is no fee. If the request is complex or you have made several, the organisation can take up to two more months, but must tell you within the first month and explain why. If it asks for proof of identity, the month starts once it has what it needs.4
The ICO suggests a subject line that says subject access request, the date, your name and any earlier names, your contact details and any patient or account numbers.3
Practical steps, clinic by clinic
Start with a list of every place that has treated or tested you in the last five years, including private clinics, hospitals, imaging centres, laboratories, dentists and any online service that ordered tests for you.
Ask each one for letters and discharge summaries, laboratory and imaging reports with their reference ranges, your medication and allergy list, and vaccination records, as electronic copies or a structured export where the clinic offers one.
Log each request with the date sent and the date due. A polite reminder that quotes the due date usually moves a late one.
Keeping it together in a record you hold
A wai Profile keeps results, letters, prescriptions and readings on one timeline, with clinic records and hospital letters alongside data from Apple Health, Oura, Fitbit and glucose monitors.5 Patterns show across every source.
Every sharing permission is explicit and revocable, and you can export the record or remove it entirely.5 It is never sold or used to train external models.5 Profiles are open now on the set up your Profile page.6 How a record you hold sits beside a clinic's portal is covered in personal health record vs patient portal.
Using a combined record well
Use the combined record to follow your history and share it with the clinicians you choose. Take anything new, such as a changed result or a letter you do not follow, to a clinician who knows your history.
Share what each clinician needs and withdraw access when that care ends. If anything feels urgent, call your local emergency number straight away.
Where to start
This week, write the list of everywhere that has treated or tested you, and send two requests, one to the clinic you see most and one to the laboratory that ran your last blood test.
As copies arrive, add them to your record, check names, dates and medicines, and bring it to your next appointment, where your clinician sees your whole history at once. The guide to preparing for a doctor's appointment shows how to use it in the room.
Set up your wai Profile and add the first records you receive. Every result and letter sits on one timeline you can share.
Frequently asked questions
How long does a clinic have to send my records?
Will I have to pay for copies?
Can I have my records sent straight to a new clinic?
In the US, yes, with a signed written request that names the person and where to send the copy.2 Elsewhere, request a copy for yourself and share it, or give the new clinic your consent to request it.
Do I need a solicitor to ask for my records?
No. In the UK anyone can make a subject access request without a solicitor or a lawyer.3
Is it safe to keep my records in an app?
Look for full export and deletion, permissions you can withdraw, data that is never sold or used to train outside models, and a clear line to a clinician when a question needs one. A wai Profile is built to each of those.5
Can a combined record tell me what is wrong?
It organises your history and explains it in plain language. Diagnosis and treatment stay with your clinician, and in an emergency call your local emergency number.
Sources
- 1JAMA Network Open, Everson and colleagues, 2025EHR Interoperability Experiences Reported by Family PhysiciansRead 14 October 2026Read source
- 2Electronic Code of Federal Regulations45 CFR 164.524, Access of individuals to protected health informationRead 14 October 2026Read source
- 3Information Commissioner's OfficeGetting copies of your information (subject access request)Read 14 October 2026Read source
- 4Information Commissioner's OfficeWhat to expect after making a subject access requestRead 14 October 2026Read source
- 5wai, 2026wai Profiles, a personal health record for every patientRead 14 October 2026Read source
- 6wai, 2026Set up your ProfileRead 14 October 2026Read source
Every clinic's record, together and held by you.
Set up your wai Profile and bring your results and letters together, with every permission yours to give and take back.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
Read how patient memory works in a clinic

