How to Request Medical Records in Ireland for a Medical Negligence Claim

This information is for educational purposes only and does not constitute legal advice. Every case is different and outcomes vary. Consult a qualified solicitor for advice specific to your situation.

You have a legal right to every medical record held about you in Ireland. Under GDPR Article 15 (2016) [1], your first copy is free and must arrive within one calendar month. For a medical negligence claim in Ireland, these records aren't just paperwork. They're the raw evidence your solicitor and independent expert need to assess whether substandard care caused your injury. Getting the right records, from the right providers, in the right order can make or break a case before it even starts.

Contents

Free first copy: Under GDPR, your first copy of medical records from any provider (public or private) is free. GDPR Art. 15(3) (2016)

1-month deadline: The provider must respond within one calendar month, extendable by two more months for complex requests. DPC (March 2026)

No reason needed: You don't have to explain why you want your records. The right of access under GDPR is unconditional.

Deceased patients: GDPR doesn't apply after death. Use the FOI Act 2014 for public records or prove legal authority for private records.

Quick answers

Cost in Ireland? First copy is free under GDPR Article 15. Personal records also free under FOI Act 2014.

How long? One calendar month (GDPR) or 20 working days (FOI) under Irish law.

Who do I write to? Each provider separately: GP, hospital, consultant, imaging centre. Ireland has no central records database.

Can they refuse? Only if serious harm to your health is likely (S.I. No. 121/2022). Very rare in practice.

Deceased relative? Use FOI Act 2014 (not GDPR). The DPC confirms GDPR rights don't survive death in Ireland.

For a claim? Request all 9 record types, not just discharge summaries. Your solicitor can do this with your written authority.

Do You Have a Legal Right to Your Medical Records in Ireland?

Yes. Every patient in Ireland has a statutory right to access their medical records. Two separate laws create this right, and they apply in different situations. GDPR Article 15 (2016) ¹ covers all living patients, while the Freedom of Information Act 2014 ³ provides an additional route for records held by public bodies like HSE hospitals.

The General Data Protection Regulation (GDPR), applied in Ireland through the Data Protection Act 2018 (2018) [2], gives you the right to submit a Subject Access Request (SAR) to any organisation that holds your personal data. This covers every healthcare provider in Ireland: public hospitals, private hospitals, GPs, consultants, physiotherapists, pharmacies, and nursing homes.

The Freedom of Information Act 2014 (2014) [3] provides a parallel right, but only for records held by public bodies. That means the HSE, publicly funded hospitals, and GP records for medical card holders under the General Medical Services (GMS) scheme. Private hospitals and private GPs aren't covered by FOI.

A practical distinction that trips people up: you don't need to give a reason for your request. The right under GDPR is unconditional. You're not required to explain whether it's for personal interest, changing GP, or a legal claim. The Data Protection Commission (DPC) (March 2026) [4] confirms this on its website.

Unlike in England and Wales, where the Access to Health Records Act 1990 governs access to records of deceased patients, Ireland relies on the Freedom of Information Act 2014 for that purpose. The UK system also differs in its limitation period for negligence claims: three years under the Limitation Act 1980, compared to two years in Ireland under the Statute of Limitations 1957 (as amended). These differences matter because UK-based guides, which dominate general search results, don't apply to Irish patients.

GDPR or FOI: Which Route Should You Use?

For most living patients in Ireland, a GDPR Subject Access Request is the faster and simpler route. According to the Data Protection Commission (March 2026) ⁴, it works for both public and private providers, costs nothing for the first copy, and has a clear one-month deadline.

FOI becomes relevant in three specific situations. First, if the patient has died (GDPR rights don't survive death). Second, if you want access to non-personal institutional records, like hospital policies or incident investigation reports. Third, some medical card holders route requests through the HSE's FOI office because their GP holds the records as custodian on behalf of the HSE. Medisec guidance for GPs (January 2024) [5] confirms that if a GMS patient cites FOI, the GP should direct them to the HSE FOI department, which then contacts the GP for the file.

In practice, even GMS patients often get faster results by submitting a standard GDPR SAR directly to their GP's practice manager, bypassing the HSE's FOI processing queue entirely.

GDPR Subject Access Request vs FOI Act 2014: side-by-side comparison

Feature	GDPR (SAR)	FOI Act 2014
Covers	All providers (public and private)	Public bodies only (HSE, public hospitals, GMS GP records)
Response deadline	1 calendar month (extendable by 2 months)	20 working days (acknowledgement within 10 days)
Cost	First copy free	Personal records free. Charges unlikely unless very high volume
Deceased patients	Does not apply	Applies (next of kin, executor, or personal representative)
Appeal body	Data Protection Commission (March 2026)	Office of the Information Commissioner (March 2026)

How to Request Your Medical Records Step by Step

Write to each provider separately. Ireland doesn't have a single national medical record. As the British Medical Journal (2022) ¹¹ confirmed, Ireland is one of only four EU countries without a fully functioning electronic health record system. Your GP, hospital, consultant, and imaging centre each hold their own files. You need a separate request to each one.

Your request should include:

• Your full name (and any previous names used during treatment)
• Date of birth and current address
• A clear statement: "I am requesting a copy of all medical records you hold about me under Article 15 of the GDPR"
• The dates or episodes of care you need (or state "all records" if requesting everything)
• A copy of photo ID (passport or driving licence)
• How you'd like to receive the records (electronic PDF is usually faster than post)

Most hospitals now accept requests by email, though some still require a physical form. The HSE Subject Access Request form (PDF) (March 2026) [6] is available on the HSE website. Private hospitals like the Mater Private (March 2026) [7] and UPMC hospitals (March 2026) [8] have their own request forms and dedicated data protection offices.

Generate Your Records Request Letter

Fill in your details below. The tool generates a complete Evidence Preservation Request letter citing GDPR Article 15 and specifying all 10 record categories needed for a medical negligence claim. Copy the output and send it to each provider who treated you.

If a solicitor is submitting on your behalf, they'll attach your signed Letter of Authority and adapt the wording to specify the consultant's name, the ward or department, and exact admission dates. The generator above works for both patient-led and solicitor-led requests.

Records Request Tracker

Select every provider who treated you. The tracker generates a personalised checklist showing who to write to, which legal route to use, and a printable tracking sheet for monitoring responses.

Collect What You Can Before You Leave the Hospital

Most guides skip this entirely. The HSE operates a policy of routine and administrative access (March 2026) [23] that encourages healthcare professionals to share records directly with patients at the point of care. If you're still in the hospital and you suspect something has gone wrong, you don't need to wait for a formal SAR. Ask the ward staff for printed copies of your observation charts, medication administration records, and discharge summary before you leave.

One detail that surprises clients: these point-of-care copies aren't subject to the one-month SAR timeline because they're given under the HSE's administrative access policy, not under GDPR. The practical value for a negligence claim is significant. Nursing observation charts and drug charts are working documents that can be amended, misfiled, or archived quickly after discharge. Securing copies while you're still on the ward preserves evidence in its most contemporaneous form.

Which Provider Should You Request From First?

When your treatment involved multiple providers, the order in which you submit requests matters. GP practices are typically the fastest to respond, often within one to two weeks, because the records are held locally and the volume is manageable. Public hospitals are slowest, particularly large teaching hospitals with high volumes of archived paper records.

The timing matters more than most guides suggest: stagger your requests so that you can cross-reference records as they arrive. Your GP's referral letters and test results create a skeleton timeline. Hospital records fill in what happened during admission. Imaging centre files confirm what scans were done and when reports were issued. A solicitor building a negligence chronology works through these layers from GP outward, comparing what each provider recorded against what the others show. Contradictions between the GP referral and the hospital admission notes are often where the first signs of a breakdown in care appear.

Who Holds Your Medical Records in Ireland?

Medical records in Ireland are decentralised. The HSE doesn't maintain a single database containing your complete medical history. According to the State Claims Agency (March 2026) ¹², the adequacy of Ireland's paper-based record system is "a matter of concern" in clinical claims. Each provider keeps its own records independently.

Where your records are held, by provider type

Provider type	Who holds the records	Request route
Public hospital	The hospital itself (via the HSE)	GDPR SAR or FOI to the hospital's medical records dept or DPO
Private hospital	The hospital	GDPR SAR only (FOI doesn't apply)
GP (private patient)	The GP is the data controller	GDPR SAR to the GP practice
GP (medical card holder)	HSE is legally responsible, GP holds as custodian	GDPR SAR to the GP, or FOI via HSE
Private consultant	The consultant or their practice	GDPR SAR
Imaging centre / lab	The facility that performed the tests	GDPR SAR
National Ambulance Service	NAS (separate from the receiving hospital)	GDPR SAR to the NAS Data Protection Officer
Community pharmacy	The pharmacy that dispensed your prescriptions	GDPR SAR to the pharmacy

A detail from handling medical negligence claims: hospital administrative requirements vary by institution. Beaumont Hospital (March 2026) [9] requires photo ID plus a utility bill dated within three months. Children's Health Ireland at Crumlin (March 2026) [10] requires a birth certificate and proof of legal guardianship before releasing a child's records. UPMC ⁸ sends records only by registered post, not email or in-person collection.

The Private Rooms Gap: Records Your Hospital SAR Won't Capture

A trap that catches claimants: a consultant who operates in a public hospital often also maintains a separate private practice at rooms in a different location. When you submit a SAR to the hospital, you'll receive the hospital records. But the consultant's private rooms may hold a separate set of notes, particularly from initial consultations, follow-up assessments, and private correspondence with your GP. These records belong to the consultant's private practice, not the hospital, and they won't appear in a hospital-directed SAR.

For a negligence claim, this gap can be critical. The private consultation notes may contain the first record of your complaint, the consultant's initial clinical impression, and the reasoning behind their treatment plan. If the hospital notes are sparse on pre-operative planning, the private rooms file is where that detail often sits. Your solicitor should submit a separate SAR to the consultant's private practice address, not just the hospital where the procedure took place.

Two Providers Nobody Thinks to Request From

The National Ambulance Service holds a separate Patient Care Report for every 999/112 call. The paramedic record captures your condition at the scene, vital signs during transport, interventions performed in the ambulance, what information was communicated verbally to the receiving A&E team, and the exact time of handover. In cases alleging delayed treatment after hospital arrival, the ambulance record is often the only independent timestamp proving when you actually presented with acute symptoms. These records are held by the National Ambulance Service (NAS) (March 2026) [25], not by the receiving hospital. A hospital SAR won't capture them. Submit a separate GDPR request to the NAS Data Protection Officer.

The dispensing pharmacy maintains its own timestamped log of every prescription dispensed. This record sits under the pharmacy's data controller obligations, independent of both the hospital and the GP. In medication error claims, where the allegation is that the wrong drug or wrong dose was given, the pharmacy dispensing record is the objective proof of what was actually handed to the patient versus what was prescribed. If you filled prescriptions at a community pharmacy during or after your hospital treatment, submit a separate SAR to that pharmacy. The pharmacist's record also captures whether they raised any clinical queries about the prescription with the prescribing doctor, which can be relevant to establishing whether a red flag was raised and ignored.

What If Your GP Has Retired or the Practice Has Closed?

A problem that arises more often than you'd expect in late-discovery negligence claims: the GP who treated you five or ten years ago has since retired, and the practice has closed. Where are your records?

The Medical Council's ethical guidelines ¹⁵ require a retiring GP to arrange for the secure transfer of patient records. For GMS (medical card) patients, the HSE is ultimately responsible for those records. Contact the HSE Primary Care office in the area where the practice operated. They should be able to tell you whether the records were transferred to a successor GP or archived centrally.

For private patients, the situation is less straightforward. The retiring GP should have retained the records for the appropriate retention period (eight years after last contact) or transferred them to whatever GP the patient moved to. In practice, records from closed private practices sometimes fall into a gap. If the successor GP doesn't have them and the retired GP can't be contacted, your solicitor can write to the Law Society of Ireland or the Medical Council seeking the retired practitioner's last known correspondence address. The records may also have been transferred to a medical records storage company. Start this process early, because tracing orphaned files from a closed practice can add months to your timeline.

↑ Back to top

Which Specific Records Should You Request for a Negligence Claim?

Don't just ask for "my medical records" when pursuing a medical negligence claim in Ireland. A generic request typically produces discharge summaries and outpatient letters. Under GDPR Article 15 (2016) ¹, you're entitled to all personal data a provider holds, but you need to specify what you want. For a negligence claim, your solicitor needs far more than summaries. We call this an Evidence Preservation Request: a targeted demand that itemises the specific document types your legal team needs to build a chronology and assess liability.

The nine record types that matter for a negligence claim:

Nine record types for a medical negligence Evidence Preservation Request

#	Record type	Why it matters for your claim
1	Clinical notes (doctor's notes)	Show what the treating doctor observed, decided, and recorded at the time
2	Nursing progress notes and observation charts	Establish the minute-by-minute timeline. Gaps in monitoring are often where negligence is found
3	Medication administration records (drug charts)	Prove exactly what drugs were given, when, and at what dose. Critical for dosage error and allergy claims
4	Surgical and operative notes	Detail what the surgeon did, what they found, and any complications noted during the procedure
5	Consent forms	Show what risks you were told about before agreeing to treatment. Central to informed consent claims
6	Laboratory and pathology results	Objective test data with timestamps showing when results were available and when they were acted on
7	Radiology reports and imaging discs	Include both the preliminary read and the final consultant radiologist report. Request the actual imaging files, not just the written report
8	Referral and discharge letters	Track the communication chain between providers and flag where information was lost
9	Incident or adverse event reports	Internal hospital documentation of things that went wrong. Not always disclosed voluntarily

How to Read What You Receive: Common Clinical Shorthand

Medical records arrive in clinical shorthand that's rarely explained to patients. Understanding even the basics helps you spot gaps and flag concerns for your solicitor before the formal expert review. These abbreviations appear across nursing notes, A&E triage records, and GP entries in Irish hospitals:

Common clinical abbreviations in Irish medical records

Abbreviation	Meaning	Why it matters in a claim
NAD	No abnormality detected	If NAD was recorded when symptoms were present, it suggests the examiner missed or dismissed your complaint
OE or O/E	On examination	What follows is the doctor's findings during a physical exam. Compare against what you reported
SOB	Shortness of breath	If SOB was documented but not acted on, it creates a timeline of awareness
PRN	As needed (pro re nata)	Medication given PRN rather than on schedule may indicate gaps in regular monitoring
Noted	The information was seen	"Noted" without a follow-up action can indicate passive acknowledgement without clinical response
Plan: OPD review	Outpatient department follow-up planned	Check whether the follow-up actually happened. A planned OPD review that never occurred is a common failure point

Gaps in nursing observation charts are particularly telling. In Irish hospitals, observation charts typically record vital signs (pulse, blood pressure, temperature, respiratory rate, oxygen saturation) at set intervals, often hourly after surgery. A blank space where a reading should be isn't an oversight in the chart. It's a potential gap in monitoring that your expert will examine closely. If the chart shows four-hourly readings when the clinical situation called for hourly observations, that pattern itself can form part of a breach of duty argument.

Clinical Abbreviations Quick-Reference

Type any abbreviation from your medical records to see its meaning and why it might matter for a claim.

How Long Does It Take to Get Your Medical Records?

The legal deadline in Ireland is one calendar month from the date the provider receives your valid SAR. Under GDPR Article 12(3) ¹, the provider can extend this by a further two months if your request is complex or involves a large volume of records. They must tell you about the extension within the initial 30-day window and explain why.

For FOI requests to public bodies, the statutory timeline is 20 working days, with a formal acknowledgement required within 10 working days.

The reality in practice is often slower. According to a British Medical Journal analysis (2022) [11], Ireland is one of only four EU countries without a fully functioning electronic health record (EHR) system. The State Claims Agency (March 2026) [12] has described the adequacy of paper-based records as "a matter of concern" and a "major issue in clinical claims." Paper-based systems, archived off-site records, and understaffed medical records departments mean that some requests, especially from larger hospital groups, take significantly longer than the statutory deadline.

How Much Does It Cost to Request Medical Records?

The first copy of your medical records under GDPR in Ireland is free. A provider can only charge a "reasonable fee" based on administrative costs if (a) your request is proven to be manifestly unfounded or excessive, or (b) you request additional duplicate copies. The burden of proving the request is excessive sits with the provider, not you. The DPC ⁴ confirms this.

Under FOI, personal records are also free. Charges for search, retrieval, and copying are unlikely to apply to your own medical records unless the volume is exceptionally large. If your FOI request for personal records is refused, both the internal review and the appeal to the Office of the Information Commissioner (March 2026) [13] are free. Fees only apply when requesting non-personal records (€30 for internal review, €50 for OIC appeal, with reduced rates for medical card holders).

A common source of confusion: raw medical records (free under GDPR) are not the same as a commissioned medical report. If you need a formal report from a doctor summarising your injuries for a claim, that's a separate paid service, typically costing €250 to €600 depending on the specialist.

Can a Hospital or GP Refuse Your Records Request?

Only in very narrow circumstances under Irish law. Under the Data Protection Act 2018 (Access Modification) (Health) Regulations 2022 (March 2022) [14] (S.I. No. 121 of 2022), a provider can restrict access to your health data if they have "reasonable grounds for believing that granting access would be likely to cause serious harm to the physical or mental health of the data subject."

This is a high bar. The restriction must be necessary, proportionate, and temporary. It applies only to the specific pages or paragraphs that pose the risk of serious harm, not the entire file. The 2022 Regulations replaced the older 1989 rules and gave controllers more discretion, but the fundamental patient right remains strong. Unlike in England and Wales, where the Data Protection (Subject Access Modification) (Health) Order 2000 still requires mandatory consultation with a health professional before restricting access, Irish controllers can now make this decision independently under the 2022 Regulations.

If your access is restricted, the provider must offer to release the data to a health professional of your choice. They can't simply bury the file. And you have the right to complain to the DPC ⁴ if you believe a refusal is unjustified.

For FOI refusals by public bodies, you can request an internal review (within the hospital) and then appeal to the Office of the Information Commissioner ¹³, which has the power to compel release.

What Gets Blacked Out: Third-Party Redactions and Your Claim

When you receive your records, you'll often find sections blacked out or marked as redacted. Medical files frequently contain incidental references to other people: family members mentioned in social histories, genetic information about relatives, or sensitive details provided in confidence by someone other than you. Under GDPR, the hospital's Data Protection Officer must protect those third parties' privacy.

The redactions should be transparent. Medisec guidance ⁵ instructs medical practitioners to use visible blackout marks on the copy so that it's immediately obvious to the receiving solicitor that information has been withheld. Entire pages should never be silently omitted, and text should never be deleted without a visible marker.

The problem arises when redactions are applied too aggressively and clinical context is lost. If the independent medical expert reviewing your file believes that redacted passages contain information relevant to the standard of care you received, your solicitor has options. They can write to the hospital requesting a redaction schedule (a list explaining what was removed and why). If the hospital refuses or the redactions appear disproportionate, the matter can be escalated to the DPC, or in the context of active litigation, your solicitor can apply to the court for an order requiring broader disclosure.

What If Your Medical Records Are Missing or Incomplete?

Missing records aren't always a dead end for your claim in Ireland. In fact, incomplete or missing clinical records can themselves become evidence of substandard record-keeping. The Medical Council's Guide to Professional Conduct (Amended 2019) ¹⁵ requires Irish doctors to maintain adequate clinical records, and a failure to do so can support a negligence argument.

The Medical Council's Guide to Professional Conduct and Ethics (Amended 2019) [15] requires doctors to maintain adequate records. If critical nursing observation charts, medication records, or clinical notes are missing for a period when your condition deteriorated, the absence creates an inference that proper monitoring wasn't carried out.

Under the Data Protection Act 2018 ², a data controller must explain what happened to records that should exist but can't be found. Document your request in writing and keep a copy. If the hospital later claims records are "unavailable," your written request creates a paper trail that supports a negligent record-keeping argument.

Where electronic medical records (EMR) are in use, ask specifically for audit trail data. EMR systems log every access, edit, and deletion with timestamps and user IDs. If there's a suspicion that clinical notes were altered after an adverse event, the audit trail provides evidence of post-event changes that the Medical Council warns practitioners against (March 2024) [16].

Open Disclosure Records: A Separate Request You Might Not Know About

Under the Patient Safety (Notifiable Incidents and Open Disclosure) Act 2023 (September 2024) [24], which commenced on 26 September 2024, hospitals must tell you and your family when certain serious patient safety incidents occur during your care. The Act lists specific notifiable incidents, including serious injury and death. This is called the mandatory open disclosure policy.

The important point for a records request: the open disclosure meeting generates its own documentation. The hospital creates a formal record of the disclosure, including who was present, what was communicated, and the factual details of the incident. This record is separate from your clinical notes and won't automatically appear in a standard SAR for "medical records." If an open disclosure meeting was held about your care, request a copy of the disclosure record specifically. It can contain factual admissions about what went wrong that the clinical notes, written by the treating team at the time, may not fully capture.

One nuance: under the Act, an apology given during open disclosure is protected and can't be used as an admission of liability in court. The factual information disclosed during the meeting, however, can be used as evidence. Your solicitor will know the distinction.

Why Your Solicitor's Letter Triggers a Preservation Obligation

Once a hospital or healthcare provider knows or reasonably suspects that a legal claim is coming, they have an obligation to preserve all records that could be relevant to the dispute. This is triggered the moment the provider receives a solicitor's records request or a formal letter of claim. From that point, any records relevant to your care must be preserved intact.

If records are destroyed or go missing after the provider has received notice of a potential claim, the court can draw an adverse inference against the provider. In plain terms: if the hospital knew you were considering a claim and your records then disappeared, the court is entitled to assume that the missing records would not have supported the hospital's defence. This is a powerful legal consequence that transforms "missing records" from a frustration into a strategic advantage for the claimant.

The practical implication: instruct a solicitor early, even before you've decided whether to proceed with a claim. The solicitor's initial letter puts the hospital on formal notice, locking down the preservation obligation. Records that might otherwise be routinely archived, overwritten, or lost in a system migration are protected from that date forward. This is another reason why an early Evidence Preservation Request, sent by a solicitor on headed paper citing GDPR Article 15, carries more weight than a personal request. It signals legal intent and triggers the preservation duty simultaneously.

↑ Back to top

How Long Are Medical Records Kept in Ireland?

Adult healthcare records in Ireland must be kept for at least eight years after the last contact. The HSE National Records Retention Policy (March 2026) [17] and Medical Protection Society guidance (March 2026) [18] set out the minimum periods:

Medical records retention periods in Ireland

Record type	Minimum retention
Adult healthcare records	8 years after last contact
Children's records	Until the patient's 25th birthday (or 26th if 17 at end of treatment)
Maternity records	25 years
Mental health records	20 years after last contact (or 8 years after death)
Records of deceased patients	8 years after death (10 years in cases of suicide)

These retention periods matter for late-discovery negligence claims. If you only realised years after treatment that something went wrong, records may still exist. Act quickly, because once the retention period expires, the hospital has no obligation to keep them.

Do Your Records Still Exist?

Enter your last treatment date and patient category. The calculator estimates whether records are likely still held.

Can Your Solicitor Request Records on Your Behalf?

Yes, with your written authority. Under GDPR Article 15 (2016) ¹, any person can authorise an agent to submit a Subject Access Request on their behalf. In Ireland, you'll sign a Letter of Authority that designates your solicitor as your agent for the purpose of accessing your medical records. The solicitor submits this along with your photo ID to each provider.

The same rules and timelines that apply to a patient-led request apply to a solicitor-led request. There's no special fast-track for legal professionals. The practical advantage is precision. A solicitor who handles medical negligence claims regularly knows to build what we call an Evidence Preservation Request: specifying the exact record types (all nine categories listed above), the specific departments, the date ranges, and whether imaging discs are needed alongside written reports.

A vague patient request for "my complete file" often returns only high-level summaries. A targeted Evidence Preservation Request that names specific document categories, citing GDPR Article 15, is harder for a hospital to underservice.

What the Other Side Can and Can't Access: The Discovery Limit

A concern that many claimants raise: once you request your records and start a claim, can the hospital's defence team trawl through your entire lifetime medical history? The answer in Irish law is no. The courts apply a strict relevance threshold to limit the scope of legal discovery in negligence proceedings.

Under this test, the defendant's legal team may only access medical records that are directly relevant to the specific injuries being claimed. In standard practice, this restricts pre-incident record access to a window of three to five years before the treatment in question, unless a specific pre-existing condition is directly implicated in your current injuries.

The practical takeaway: be completely transparent with your own solicitor about your full medical history, including pre-existing conditions. Your solicitor needs the complete picture to assess risk and prepare for what the defence may argue. Non-disclosure to your own legal team undermines credibility if the independent expert later finds something in the chronological file that wasn't flagged. Your solicitor protects the information under legal privilege. The defence, however, only gets what the court permits under the relevance test.

What About Less Common Situations?

The steps above cover the standard records request process for living adult patients in Ireland. Three situations require a different legal approach. The DPC (March 2026) ⁴ and the FOI Act 2014 ³ treat deceased persons' records, children's records, and digital records differently from standard adult requests.

Accessing Medical Records of a Deceased Person

GDPR doesn't apply after death in Ireland. The DPC has confirmed (March 2026) [19] that data privacy rights extinguish when a person dies. A standard SAR won't work for a deceased relative's records.

For records held by public hospitals or GPs under the GMS scheme, the FOI Act 2014 ³ provides a route. Access is typically granted to the personal representative (executor named in a will), the spouse or partner, or the next of kin. You'll need to provide proof of your relationship (marriage certificate, birth certificate) and proof of your identity.

For records held by private hospitals, you'll need to demonstrate legal authority over the estate: a Grant of Probate or Letters of Administration. The provider may also consider whether the deceased expressed any wishes about disclosure, and whether releasing the records could cause distress to family members.

The Medical Council's ethical guidelines ¹⁵ note that a doctor's duty of confidentiality survives the patient's death. This doesn't prevent disclosure where there's lawful basis, but it does mean the process is more controlled than for living patients.

Coroner's Records: A Separate Source for Fatal Negligence Claims

If the death was referred to the coroner (which is mandatory when a death occurs unexpectedly or in circumstances that may require investigation), there's a body of documentation that doesn't sit with the hospital, the GP, or any provider you'd normally submit a SAR to. The coroner's file is held by the Coroner's Office (March 2026) [26] for the district where the death occurred. It requires a separate request.

The coroner's file may contain the post-mortem report (including the pathologist's findings on cause of death), toxicology results, depositions taken at inquest, the coroner's verdict, and any expert evidence submitted during the inquest hearing. For families pursuing a fatal medical negligence claim, this material can be decisive. The pathologist's findings may directly establish causation in a way that the hospital's clinical notes don't, particularly where the clinical cause of death was unclear or disputed during the patient's care.

Requesting coroner's records works differently from a hospital SAR. You'll typically write to the relevant Coroner's Office, identify the deceased by name and date of death, state your relationship, and explain the purpose of the request. Under the Coroners Act 1962 ²⁷ (as amended), inquests are public proceedings and the verdict is a matter of public record, but access to the full file including medical evidence may require a formal written application. Your solicitor can manage this alongside the hospital FOI request so that both streams run in parallel.

Requesting a Child's Medical Records in Ireland

Parents and legal guardians can request their child's medical records in Ireland under both GDPR and FOI. Public bodies must be satisfied that releasing the records is in the best interests of the child. Children's Health Ireland (CHI) at Crumlin (March 2026) ¹⁰ requires documentary evidence of guardianship (birth certificate plus parents' marriage certificate, or a court order) before releasing any records.

An important nuance: children aged 16 and over are generally presumed competent to consent to medical treatment under Irish law. They can submit their own SAR and may restrict parental access to their records without the parent's knowledge. If you're pursuing a negligence claim on behalf of a teenager aged 16 or 17, the child's consent to records release should be obtained alongside parental authority.

The Health Information Bill 2024: What Changes Are Coming?

Ireland is preparing to create a digital health record for every patient. The Health Information Bill 2024 (November 2024) [20], currently at committee stage in the Dail, will establish the legal basis for digital health records and introduce a statutory "duty to share" patient data between healthcare providers across public, private, and voluntary sectors.

The Bill supports Ireland's obligations under the European Health Data Space (EHDS) Regulation (2025) [21], which sets EU-wide standards for patient access to electronic health records by 2029.

The HSE has already taken early steps. The HSE Health App (February 2025) [22], launched in February 2025, lets users aged 16+ access medication records, vaccination history, and hospital appointment details via MyGovID verification. By September 2025, over 900,000 patients across 31 hospitals could view their appointments through the app. A National Shared Care Record pilot began in the South-East region in Q4 2025.

For negligence claims, the long-term effect will be significant. Currently, piecing together a patient's journey across GP, hospital, specialist, and imaging providers requires multiple separate requests that can take months. Once digital health records are fully operational, that reconstruction could become substantially faster.

↑ Back to top

When the Records Arrive: What to Expect and How to Handle Them

Nobody prepares you for what a medical records package actually looks like. For a hospital admission, you'll typically receive a thick envelope (sometimes multiple envelopes over several weeks) containing hundreds of pages of mixed content: handwritten clinical notes, printed lab results, photocopied observation charts, typed discharge letters, and sometimes loose pages with no obvious filing order. Records from different admissions may be interleaved. Pages from one department may arrive separately from pages from another.

The rules for handling these records, particularly if you're considering or already pursuing a claim:

Don't write on the originals. No highlighting, no annotations, no sticky notes attached to pages. The original records may need to be produced in court, and any marks you've added undermine their evidential value. Make a complete photocopy or scan of everything as soon as it arrives, and do all your reading and note-taking on the copy.

Don't rearrange or remove staples. The order in which the hospital assembled the file, even if it seems chaotic, may itself be evidence. A medical records analyst or your solicitor will re-paginate and index the file into chronological order. If you rearrange it first, the original assembly order is lost.

Store originals securely. A fireproof document safe or a solicitor's office is appropriate. These are your primary evidence. If originals are lost or damaged, the hospital may not provide duplicates without a fresh SAR and further delay.

If records arrive on disc, don't open imaging files on a home computer. Medical imaging (X-rays, CT scans, MRIs) is stored in DICOM format, which requires specialist viewing software. Opening DICOM files in a standard image viewer may render them incorrectly or not at all. Your solicitor or the independent medical expert will have access to proper DICOM viewers. If you need to view imaging yourself, free DICOM viewers like Horos (Mac) or RadiAnt (Windows) are available, but leave the formal interpretation to the expert.

Between the first envelope arriving and the file being complete, expect a gap. GP records typically arrive first. Hospital records follow. Imaging discs may come separately from the written radiology reports. Your solicitor tracks what's outstanding and chases anything overdue. Don't assume the file is complete just because something arrived.

Records Completeness Checker

As records arrive from each provider, tick off what you've received. The checker highlights what's still outstanding so you and your solicitor can chase gaps before the file goes to the independent expert.

When Provider Records Contradict Each Other

When records arrive from multiple providers, the versions of events won't always match. The GP referral letter might say "query appendicitis, urgent." The hospital A&E triage notes might record "abdominal pain, non-specific." The nursing admission assessment might document a third description entirely. These aren't administrative errors to worry about. They're often where the negligence argument begins.

The gap between what the GP flagged and what the hospital recorded on arrival can reveal a downgrading of urgency that delayed diagnosis or treatment. If the GP referred with a clear suspicion and the hospital triaged at a lower priority, the question becomes: did the triage clinician read the referral letter? Did they assess the patient afresh, or did they miss the GP's warning? The records from both providers, laid side by side, answer that question.

Your solicitor builds a comparative chronology table that maps each provider's version of events against the others, timestamped and indexed. The contradictions, gaps, and silent handovers between providers are plotted visually. From experience, the points where information was lost in transit between a GP and a hospital, or between an A&E department and a specialist on-call, are disproportionately where failures in care are identified. This is precisely why a single-provider records request is never enough for a negligence claim. You need the full chain.

What Happens After You Get Your Records?

Your records are the starting point, not the finish line. Once your solicitor has the complete file from every relevant provider in Ireland, the next steps in a medical negligence claim follow the process established under Irish case law. The Medical Council (Amended 2019) ¹⁵ standards and the Dunne principles together define what the independent expert will assess.

First, the records are collated, paginated, and indexed into a continuous chronology. This maps your own account of events against the timestamps in the clinical notes. Gaps, inconsistencies, and missing entries are flagged immediately.

Second, the structured file is sent to an independent medical expert for review. Under Irish law, a medical negligence claim can't proceed in the High Court without a supportive expert opinion confirming that the standard of care fell below acceptable norms and that this caused your injury.

That handoff from records to expert review is the boundary of this page. The Evidence Preservation Request has been completed, the statutory timelines navigated, and the evidence secured. The expert medical report stage is where the legal assessment begins.

Common Questions

What to Consider Next

References

1. General Data Protection Regulation (EU) 2016/679, Article 15
2. Data Protection Act 2018 (Ireland)
3. Freedom of Information Act 2014 (Ireland)
4. Data Protection Commission, Right of Access
5. Medisec, Patient Access to Medical Records (January 2024)
6. HSE Subject Access Request Form (PDF)
7. Mater Private Network, Accessing Your Medical Records
8. UPMC Ireland, Medical Healthcare Records
9. Beaumont Hospital, Accessing Your Personal Records
10. Children's Health Ireland, Healthcare Record Requests
11. British Medical Journal, Electronic Health Records in Europe (2022)
12. State Claims Agency (Ireland)
13. Office of the Information Commissioner (Ireland)
14. S.I. No. 121 of 2022, Data Protection Act 2018 (Access Modification) (Health) Regulations
15. Medical Council of Ireland, Guide to Professional Conduct and Ethics (Amended 2019)
16. Medisec, Beware of Amending or Erasing Medical Records (March 2024)
17. HSE National Records Retention Policy
18. Medical Protection Society, Retention of Medical Records (Ireland)
19. DPC, Seeking Access to Deceased Sibling's Medical Records
20. Health Information Bill 2024, Oireachtas
21. European Health Data Space Regulation (EU) 2025/327
22. HSE Health App
23. HSE, Sharing Information with Service Users in a Care Setting
24. Patient Safety (Notifiable Incidents and Open Disclosure) Act 2023
25. HSE National Ambulance Service
26. Coroner Service of Ireland
27. Coroners Act 1962 (as amended)

Related guides in this cluster

Medical Negligence Claim Process in Ireland

How to Prove Medical Negligence

Expert Medical Report for a Claim

How Long Does a Claim Take?

Medical Negligence Compensation

Date of Knowledge in Medical Negligence