Home Menu

Medical Record Requests from the Police

Update on Medical Record Requests from the Police

The BMA have recently updated their guidance around requests from the police for information from a patient’s medical records. There is clear guidance regarding the obligations that GPs have with respect to copying and/or release of the GP record.


These circumstances are as follows:

If the police do not have a court order or warrant they may request voluntary disclosure of a patient’s health records under section 29 of the Data Protection Act 1998

However, while health professionals have the power to disclose the records to the police where section 29 applies, there is no obligation to do so

In such cases health professionals remain bound by the long-established common law duty of confidentiality and may only disclose information where the patient has given consent, or there is an overriding public interest. They may also be required to defend their decision to disclose before the GMC which is a statutory tribunal

Disclosures in the public interest based on common law are made where disclosure is essential to prevent a serious threat to public health, national security, the life of the individual or a third party, or to prevent or detect serious crime. This includes crimes such as murder, manslaughter, rape, treason, kidnapping and abuse of children or other vulnerable people. Serious harm to the security of the state or to public order and serious fraud will also fall into this category.

GP practices are entitled to a fee for producing the notes. There is no set fee for producing these notes. Therefore it is the responsibility of individual practices to set their own fee for this work.

In order for to proceed with a police request, the police will need to provide each of the following:

  • Provide written patient consent to release of their records OR provide written confirmation as to the nature of the serious crime allegedly committed by the patient and an explanation as to why the patient’s records, or other information requested, are considered necessary for the specific purpose you are pursuing. The data holder will require one of these in order to fulfill your responsibilities as the Caldicott Guardian.
  • Confirmation in writing that the fee will be paid within 28 days of the police receiving the record. This fee is due to the disproportionate effort placed on an already overburdened GP practice to provide these notes which recognises the need to support the police in their investigation of a crime, where appropriate to do so.
  • Written confirmation from a senior police officer – Following discussions with the NPCC (National Police Chief’s Council) regarding signing off we have agreed that the level of police seniority that we recommend to GPs to obtain before considering releasing medical records to the police is lowered from Superintendent to Inspector. We have restated to the NPCC the need for any request from the police for medical records is only made when absolutely necessary.
    Please note that this is the only change to the guidance that has been made (Updated November 17).

Once you are in receipt of each of these at the practice, and have checked the appropriateness of release of the records, you should respond to the police authority as soon as possible.

Alternatively, should it be appropriate for the police to view the record (based on the answer to requirement 1 above), then there is the option for them to view the record in the practice in the presence of a practice staff member. In this situation there is no fee chargeable.

GPs should, in all cases where there is no patient consent, consider whether the benefits to an individual or to society of disclosing the records outweigh both the public and the patient’s interest in keeping the information confidential before agreeing to disclose the records.

There is a template letter is available to download in the attachment at the to pf this page.

Related guidance...

Access to medical records for young people

Since the advent of The Data Protection Act 2018 and GDPR the LMC has received a number of queries regarding access to medical records...

Firearms and SARs

Dear %recipient.firstname%, The ICO has recently written to the BMA regarding Subject Access Requests in relation to firearms...

GP Connect and Summary Care Record Additional Information beyond COPI

GP Connect and Summary Care Record Additional Information beyond COPI, SCR, GP Connect, Share, PID, Patient The temporary changes made...

Retention of PGDs

The Screening & Immunisation Team (SIT) recently issued the following advice regarding retention of PGDs. As these documents are the...

Firearms update Jan 2019

Dear %recipient.firstname%, Firearms Licencing- January 2019 update Lincolnshire police's policy of 'no medical report, no licence'...

Firearms licencing- new statutory guidance (Dec 21)

Firearms licencing- new statutory guidance (Dec 21) Home Office have issued new guidance regarding medical information for firearms...

Medication Reviews & Repeat Prescribing of Potentially Harmful Drugs

Medication Reviews Medication and prescribing errors can cause significant patient harm, and thus can lead to complaints and referral...

Parental Responsibility

A recent safeguarding Serious Case Review (SCR Family V, published on the Lincolnshire LSCB website) highlighted the importance of...

Requests from Schools

Schools frequently request information from GPs regarding a child’s health conditions, their absence from school, or to certify that...


Not getting adequate consent is the fourth most common cause for medical indemnity claims[1]. It also accounts for high proportion of...