a stepGetting your records out
also: medical records request · records portability · subject access request
Data-protection lawyers say subject access. Hospitals say records release. Both mean the same envelope.
The patient asks the home health system for a copy of their own file — imaging, operation notes, pathology, drug list — so that a clinician in another country can read it. Two different bodies of law govern the request, and neither of them was written with a foreign surgeon in mind.
The story Cited
In the European Union the right is squarely written. GDPR Article 15(3) states that "The controller shall provide a copy of the personal data undergoing processing", with a reasonable administrative fee permitted only for further copies. Article 20 adds portability — a structured, commonly used, machine-readable format, and direct transmission from one controller to another "where technically feasible" — but only where the processing rests on consent or on a contract and is carried out by automated means, which is not the footing most public hospital records sit on.
Directive 2011/24/EU adds a health-specific right in both directions: the Member State of treatment must ensure patients are "entitled to a written or electronic medical record" of the treatment and "access to at least a copy of this record" (Article 4(2)(f)), and the Member State of affiliation must ensure patients have "remote access to or have at least a copy of their medical records" (Article 5(d)).
In the United States the instrument is 45 CFR § 164.524. A covered entity must act within 30 days, may take one 30-day extension on written notice, must provide the record "in the form and format requested by the individual, if it readily producible in such form and format", and may charge only "a reasonable, cost-based fee".
Inference — none of those instruments reaches the second half of the journey. A patient travelling from a country with no equivalent statute has whatever the hospital's own policy gives, and a patient asking a hospital abroad for the record of what it did to them is asking under that country's law, not their own.
How it works Trade practice
What actually fails is mechanical. Imaging arrives as a disc in a viewer nobody abroad can open, or as a report without the images. Pathology sits as a block in a laboratory that releases it only to another laboratory. A thirty-day clock, lawful at home, lands after the flight. The file comes in a language the receiving surgeon does not read, and no one in the transaction owns the translation.
The CDC Yellow Book pushes the same request in the other direction, telling travellers to "request copies of their overseas medical records in English" and to hand them to whoever provides follow-up, and citing the American College of Surgeons on obtaining "a complete set of medical records before returning home".
Today Inference
As of 16 September 2026 the legal right to a copy is strong in the EU and the United States and undocumented in much of the rest of the world as far as this project could read. What no instrument anywhere supplies is a format both ends can open and a translation somebody is responsible for.
The particulars
| stage | deciding |
|---|---|
| region | Everywhere |
| confidence | high · updated 2026-09-16 |
What it connects to
Pages that point here
Sources
- Article 15 — Right of access by the data subject, Regulation (EU) 2016/679 (GDPR) — gdpr-info.eu, consolidated text of Regulation (EU) 2016/679 · link (read 2026-09-16)
- Article 20 — Right to data portability, Regulation (EU) 2016/679 (GDPR) — gdpr-info.eu, consolidated text of Regulation (EU) 2016/679 · link (read 2026-09-16)
- 45 CFR § 164.524 — Access of individuals to protected health information — Legal Information Institute, Cornell Law School · link (read 2026-09-16)
- Directive 2011/24/EU, Chapter II — responsibilities of the Member State of treatment and of affiliation, Articles 4 to 6 — legislation.gov.uk, retained text of Directive 2011/24/EU · link (read 2026-09-16)
- Medical Tourism — CDC Yellow Book: Health Information for International Travel — US Centers for Disease Control and Prevention · link (read 2026-09-16)
Where it came from: Cited a source named here · Harvested pulled from an open dataset · Trade practice how the trade works, hedged · Inference this project's own reasoning · Field somebody stood there. This record as JSON.