Whether your medical records are held at a public health care institution or a private clinic, the information that health care professionals write down about you belongs to you. You have the right to access this information and to correct it. In some cases, you can also request access to a loved one’s medical records.

Who can make a request?
The request for access or to correct information must be made by the patient or by
- A parent or a person with parental authority if the patient is a minor,
- A mandatary or a tutor caring for an incapacitated person,
- An heir or the liquidator of the estate if the patient is deceased.
In all cases, the person making the request must provide proof of their identity and their relationship to the patient.
For more information, see our article on the right to access medical records.
How to make a request
The health care institution must answer you
The institution is required to answer you within 30 days of receiving a request.
There are three ways the institution could answer:
The institution allows the request
If the request is allowed, the health care institution must allow you to see your medical records, send you a copy of the records, or modify the information and send you a copy of the modified records, depending on your request. The health care institution must provide these services for free.
If the information is stored electronically, you have the right to ask for a “written and intelligible transcript”. For example, you can ask for a written transcript of a recorded call in addition to the audio file.
You can also ask that electronic information that was collected be given in a “structured, commonly used technological format”. This allows you to receive the information in digital form instead of on paper and ensures that the file can be opened with standard software.
If you need certain accommodations due to a disability, the law requires organizations to be flexible to make sure you can access and understand the information.
If you wish, you can ask the health care institution to inform the individuals or organizations that received the incorrect information by providing them with the corrected information.
The institution refuses the request
If the request for access is refused, the person in charge of personal information for the institution must provide a written reason for the refusal. They must tell you which section of the law justifies the refusal and answer any questions you may have if you do not understand the decision.
They must also explain that a review of the refusal can be requested and when such a request must be made.
Examples of reasons to refuse a request:
- The request is abusive, excessive, or not justified.
- Granting access to the medical records could reveal the identity of the person who provided information about you without their consent.
- The requested correction concerns a professional opinion, such as a medical diagnosis. Only factual errors can be corrected (for example, if your left leg was injured but your medical records state that your right leg was injured).
For more examples of reasons why a request to access medical records may be refused, see our detailed article on the topic.
The institution doesn’t give you an answer
Your request Is considered refused.
If the institution doesn’t respond or refuses
If a health care institution doesn’t answer you or refuses your request, or if you are otherwise not satisfied with its answer, you can contact the Commission d’accès à l’information. To learn more about the process and deadlines, see our article on the solutions that exist when a request to access or to correct medical records is refused.
If an employee illegally accesses your medical records
If you think that a health care employee has accessed your medical records or told others about your personal information without a valid reason, you can:
- File a complaint with their employer (typically the health care institution)
- File a complaint with their professional order
- File a complaint with the Commission d’accès à l’information
- Take legal action in a civil court.
Did you know?You have rights and legal recourse to protect all types of personal information, not just the information in your medical records. See our article on personal information for more details. |