Countries
Every country we cover gives you a right to your records.
The rules, fees and timings differ. Here is what applies in each country we work in today, as we read it in October 2026. If you have been treated somewhere else, ask us before you pay anything.
At a glance
| Country | Your right | Fee | Time | What comes back |
|---|---|---|---|---|
| United Kingdom | UK GDPR subject access request | Free | One month by law; Primary Care Support England says 28 days | PDF by secure email |
| Spain | Ley 41/2002 article 18, and GDPR | Free first copy | Under 30 days | Digital copy, without doctors' personal notes |
| France | Code de la santé publique L1111-7 | Copies at cost | 8 days, or 2 months for records over 5 years old | CD or paper |
| Portugal | Lei 12/2005, Lei 26/2016, and GDPR | Free | Promptly, one month at most | Digital copy |
| Thailand | Personal Data Protection Act section 30, and the Patient Rights Declaration | At cost, set by each hospital | 30 days by law; often 3 to 7 days in practice | Copies or a CD |
| Indonesia | Permenkes 24/2022, article 26: the contents belong to the patient | Summary free; copies at cost | Not fixed; about 14 working days reported | A medical summary (resume) by default |
| United Arab Emirates | Hospital charters and health portals | Small (for example AED 26.25 a CD) | About 2 business days through a portal | Portal downloads, or a doctor's medical report |
| United States | HIPAA right of access | Cost-based, with a $6.50 flat option | 30 days, plus 30 more if needed | Electronic copies |
Times are what the law or the provider states. We chase every request, but cannot make a provider faster than its own process. This is a summary, not legal advice.
What to know about each
United Kingdom
Leaving the UK removes you from your GP list and your record goes into storage with Primary Care Support England. Ask your GP before you go.
Spain
Each of the 17 regions runs its own system and forms. Private hospitals on the coasts hold most expat care.
France
A request from the patient is safer than one from a company acting for them.
Portugal
Everything is in Portuguese, so we translate.
Thailand
Hospitals send a summary unless you name the full chart. Nursing notes are often in Thai.
Indonesia
Getting more than the summary takes a specific request and a signed authority naming the purpose and period.
United Arab Emirates
Portal access ends when you leave, so ask before you go. We are confirming how UAE data law treats records sent abroad before we take UAE records on.
United States
One request per provider, and many patient logins need a US phone number.