Do I have a legal right to access my own medical records from a hospital?
Updated · 6 July 2026
Yes. Under the NMC Professional Conduct Regulations and the DPDPA, 2023, hospitals must supply copies of your records within 72 hours of a written request.
Am I legally entitled to copies of my medical records?
Yes — your medical records are your personal data, and the hospital is merely a custodian. Three independent legal bases give you access:
(1) Regulation 1.3.1 and 1.3.2 of the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 (continued under the National Medical Commission Act, 2019) — medical records must be preserved for at least 3 years and copies provided to the patient or authorised representative within 72 hours;
(2) Section 11 of the Digital Personal Data Protection Act, 2023 — right to access personal data from any Data Fiduciary, including hospitals;
(3) Clinical Establishments (Registration and Regulation) Act, 2010 and state Patients' Rights Charters.
The Supreme Court in Common Cause v. Union of India, (2018) 5 SCC 1, affirmed patient autonomy and informational self-determination in healthcare. Government hospitals are additionally bound by the Right to Information Act, 2005 — see our RTI guide.
(1) Regulation 1.3.1 and 1.3.2 of the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 (continued under the National Medical Commission Act, 2019) — medical records must be preserved for at least 3 years and copies provided to the patient or authorised representative within 72 hours;
(2) Section 11 of the Digital Personal Data Protection Act, 2023 — right to access personal data from any Data Fiduciary, including hospitals;
(3) Clinical Establishments (Registration and Regulation) Act, 2010 and state Patients' Rights Charters.
The Supreme Court in Common Cause v. Union of India, (2018) 5 SCC 1, affirmed patient autonomy and informational self-determination in healthcare. Government hospitals are additionally bound by the Right to Information Act, 2005 — see our RTI guide.
What records can I demand from a hospital?
Your access right covers the complete patient file, not just the discharge summary. Specifically:
(1) Discharge summary — final diagnosis, treatment summary, discharge advice;
(2) Indoor case papers — daily progress notes, vitals, physician observations;
(3) OPD notes — outpatient consultation records;
(4) Investigation reports — pathology, imaging (X-rays, MRI, CT), ECG, EEG;
(5) Prescription and medication records — including all administered drugs with dosage;
(6) Anaesthesia notes and operation notes — for any surgical procedure;
(7) Nursing notes — fluid charts, vitals monitoring, drug administration logs;
(8) Consent forms — surgical consent, blood transfusion consent, anaesthesia consent;
(9) Billing records — itemised charges, room rent, drug costs;
(10) Death summary in case of death.
Hospitals must provide certified copies, not just photocopies — copies must bear the hospital's seal and signature of an authorised officer.
(1) Discharge summary — final diagnosis, treatment summary, discharge advice;
(2) Indoor case papers — daily progress notes, vitals, physician observations;
(3) OPD notes — outpatient consultation records;
(4) Investigation reports — pathology, imaging (X-rays, MRI, CT), ECG, EEG;
(5) Prescription and medication records — including all administered drugs with dosage;
(6) Anaesthesia notes and operation notes — for any surgical procedure;
(7) Nursing notes — fluid charts, vitals monitoring, drug administration logs;
(8) Consent forms — surgical consent, blood transfusion consent, anaesthesia consent;
(9) Billing records — itemised charges, room rent, drug costs;
(10) Death summary in case of death.
Hospitals must provide certified copies, not just photocopies — copies must bear the hospital's seal and signature of an authorised officer.
How long does the hospital have to provide my records?
72 hours from a written request under Regulation 1.3.2 of the NMC Professional Conduct Regulations.
This is a hard deadline. Hospitals sometimes cite 'records being prepared', 'duplicates not ready', or 'matter under review' — none of these are valid excuses under the regulations.
Standard charges (per the NMC framework):
(1) ₹1-2 per page for photocopies;
(2) ₹10-50 for X-ray or imaging duplicates (CDs);
(3) Free for indigent patients on production of an income/BPL certificate.
Bills above ₹2,000 for records access are routinely struck down by Consumer Forums as 'extortionate'. For government hospitals, RTI applications cost only ₹10 and the response time is 30 days — but for inpatient records of an existing patient, the 72-hour NMC route is faster.
This is a hard deadline. Hospitals sometimes cite 'records being prepared', 'duplicates not ready', or 'matter under review' — none of these are valid excuses under the regulations.
Standard charges (per the NMC framework):
(1) ₹1-2 per page for photocopies;
(2) ₹10-50 for X-ray or imaging duplicates (CDs);
(3) Free for indigent patients on production of an income/BPL certificate.
Bills above ₹2,000 for records access are routinely struck down by Consumer Forums as 'extortionate'. For government hospitals, RTI applications cost only ₹10 and the response time is 30 days — but for inpatient records of an existing patient, the 72-hour NMC route is faster.
What if the hospital refuses or delays providing records?
Escalate in this sequence:
(1) Written demand to the Medical Superintendent citing Regulation 1.3.2 NMC Regulations and Section 11 DPDPA, 2023. Send via registered post + email. Demand response within 72 hours;
(2) Complaint to the State Medical Council — the State Council can take disciplinary action against the doctor/Medical Superintendent for breach of NMC Regulations;
(3) Consumer complaint — file on E-Daakhil for deficiency of service. Consumer Forums have repeatedly held that withholding medical records is itself a deficiency, attracting compensation. See our consumer complaint guide;
(4) Writ petition in the High Court for urgent records, particularly when needed for ongoing treatment or a negligence claim;
(5) For government hospitals, file an RTI under the Right to Information Act, 2005 — see our RTI guide. The PIO must respond within 30 days, with penalties for delay.
(1) Written demand to the Medical Superintendent citing Regulation 1.3.2 NMC Regulations and Section 11 DPDPA, 2023. Send via registered post + email. Demand response within 72 hours;
(2) Complaint to the State Medical Council — the State Council can take disciplinary action against the doctor/Medical Superintendent for breach of NMC Regulations;
(3) Consumer complaint — file on E-Daakhil for deficiency of service. Consumer Forums have repeatedly held that withholding medical records is itself a deficiency, attracting compensation. See our consumer complaint guide;
(4) Writ petition in the High Court for urgent records, particularly when needed for ongoing treatment or a negligence claim;
(5) For government hospitals, file an RTI under the Right to Information Act, 2005 — see our RTI guide. The PIO must respond within 30 days, with penalties for delay.
How do I access records of a deceased family member?
The right of access transfers to the legal heirs and nominees of the deceased patient. Documentation needed:
(1) Death certificate of the patient — see our death certificate guide;
(2) Proof of relationship — birth certificate, marriage certificate, ration card, family tree affidavit;
(3) Legal Heir Certificate or Succession Certificate for property/inheritance-related access;
(4) Indemnity bond — many hospitals require this for medico-legal record access;
(5) Application form as per hospital procedure.
For records needed for a medical negligence claim, also obtain the body's autopsy/post-mortem report from the hospital or police.
If the hospital denies records to the family (a common tactic when negligence is suspected), all the escalation routes above apply. Engage a reputable, specialised medical negligence/consumer lawyer immediately — hospitals often start altering or 'losing' records once family interest in litigation becomes apparent.
(1) Death certificate of the patient — see our death certificate guide;
(2) Proof of relationship — birth certificate, marriage certificate, ration card, family tree affidavit;
(3) Legal Heir Certificate or Succession Certificate for property/inheritance-related access;
(4) Indemnity bond — many hospitals require this for medico-legal record access;
(5) Application form as per hospital procedure.
For records needed for a medical negligence claim, also obtain the body's autopsy/post-mortem report from the hospital or police.
If the hospital denies records to the family (a common tactic when negligence is suspected), all the escalation routes above apply. Engage a reputable, specialised medical negligence/consumer lawyer immediately — hospitals often start altering or 'losing' records once family interest in litigation becomes apparent.
Reference Citation: NMC (formerly IMC) Professional Conduct Regulations, 2002; DPDPA, 2023
Disclaimer: Content provided here is for general legal knowledge only and does not constitute formal legal advice. If you have an urgent or specific matter, please consult a registered advocate.