---
title: "Request the patient's health records from each service that treated them"
url: "https://ailawframework.com/practice/health-and-medical-law/request-the-patient-s-health-records-from-each-service-that-treated-them"
type: "task"
site: "AI Law Framework"
id: "A32-MN20261023-1"
practice_area: "Health & Medical Law"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-10-25"
---

# Request the patient's health records from each service that treated them

> From the list of services the lawyer has named, draft the request to each holder for the date range the lawyer has set, naming the access path the lawyer has chosen and the response time that path states.…

Canonical page: https://ailawframework.com/practice/health-and-medical-law/request-the-patient-s-health-records-from-each-service-that-treated-them  
Last reviewed: 2026-10-25

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the list of services the lawyer has named, draft the request to each holder for the date range the lawyer has set, naming the access path the lawyer has chosen and the response time that path states. Do not collect anything from a My Health Record system, and leave the request as a draft for the lawyer to send. |
| What the lawyer must review | The lawyer chooses the holder, the path, the date range and the authority to ask, and sends the request. Do not collect from a My Health Record system unless an authorisation in Division 2 has been opened. Health information stays in a firm-controlled tool, not a public one. Rule 9.1 and APP 11 apply to the records once they arrive. |
| Written for / versions | 3 jurisdiction versions below |

## Checking plan

**Source-by-source verification**

Trace relied-on content to the opened sections and check for a difference the table has missed.

- What the AI does: From the list of services the lawyer has named, draft the request to each holder for the date range the lawyer has set, naming the access path the lawyer has chosen and the response time that path states. Do not collect anything from a My Health Record system, and leave the request as a draft for the lawyer to send.
- What the lawyer does: The lawyer chooses the holder, the path, the date range and the authority to ask, and sends the request. Do not collect from a My Health Record system unless an authorisation in Division 2 has been opened. Health information stays in a firm-controlled tool, not a public one. Rule 9.1 and APP 11 apply to the records once they arrive.
- Who reviews: Responsible lawyer with competence in the matter
- Basis: Practical workflow informed by the linked primary sources; the traffic light and working checks are editorial guidance, not a court classification.
- Why: The level reflects what the work is, the consequence of an error, and how much of the output the lawyer must independently re-derive.

## Checks the lawyer makes

1. Name the path the lawyer has chosen. Do not send a private-sector Victorian request down the public-sector freedom-of-information path, or the reverse.
2. Put 45 days on a Victorian private-sector access request and 30 days on a correction request, as the Commissioner states them. Do not invent a day count for New South Wales.
3. In Queensland, use administrative access for the patient's own records where Queensland Health offers it, and a Right to Information application where consent for someone else's records is missing.
4. Do not collect from a My Health Record system. Section 59 prohibits a collection that is not authorised under Division 2 where the person knows or is reckless as to that fact. Division 2 was not opened.

## Notes

- These are suggested working checks. Confirm the required checking with the responsible lawyer before work starts; the checking approach does not establish permission to use AI.
- Health information stays in a firm-controlled tool. Rule 9.1 of the Legal Profession Uniform Law Australian Solicitors' Conduct Rules 2015, as described by the Victorian Legal Services Board and Commissioner, and APP 11, apply. The lawyer decides whether any loss is notifiable under the Privacy Act 1988 (Cth).
- APP 12.4, as the OAIC guidelines describe it, gives an organisation a reasonable period to respond. The guidelines say that, as a general guide, a reasonable period should not exceed 30 calendar days. The lawyer decides whether the holder is an APP entity. APP 12 does not replace the State access path.

## Sources

- [Health Complaints Commissioner: access to health records](https://hcc.vic.gov.au/public/health-records-individuals) (checked 2026-10-23)
- [Health Records and Information Privacy Act 2002 (NSW) Schedule 1, Health Privacy Principles 7 and 8](https://classic.austlii.edu.au/au/legis/nsw/consol_act/hraipa2002370/sch1.html) (checked 2026-10-23)
- [Queensland Health: Right to Information request for medical records](https://www.health.qld.gov.au/system-governance/contact-us/access-info/rti-application) (checked 2026-10-23)
- [OAIC: APP 12 access to personal information](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-12-app-12-access-to-personal-information) (checked 2026-10-23)
- [My Health Records Act 2012 (Cth) s 59](https://www8.austlii.edu.au/au/legis/cth/consol_act/mhra2012180/s59.html) (checked 2026-10-23)
- [OAIC: APP 11 security of personal information](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-11-app-11-security-of-personal-information) (checked 2026-10-23)
- [Victorian Legal Services Board and Commissioner: confidentiality, rule 9.1](https://lsbc.vic.gov.au/lawyers/practising-law/professional-obligations/confidentiality-and-its-exceptions) (checked 2026-10-23)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Complaint notification to a health provider (Health Complaints Commissioner)](https://ailawframework.com/precedents/health-and-medical-law/form-vic-hcc-complaint-notification.md) | Form | Yellow | Link to the Commissioner's short complaint notification, sent to the provider, which asks for a response within 30 working days. |

Signed-in accounts can read the full text of each one.

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [New South Wales](https://ailawframework.com/practice/health-and-medical-law/request-the-patient-s-health-records-from-each-service-that-treated-them/new-south-wales.md) | Yellow |
| [Victoria](https://ailawframework.com/practice/health-and-medical-law/request-the-patient-s-health-records-from-each-service-that-treated-them/victoria.md) | Yellow |
| [Queensland](https://ailawframework.com/practice/health-and-medical-law/request-the-patient-s-health-records-from-each-service-that-treated-them/queensland.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*