---
title: "Request for access to health records (patient or authorised representative), with state and NZ variants"
url: "https://ailawframework.com/precedents/health-and-medical-law/health-records-access-request"
type: "precedent"
site: "AI Law Framework"
id: "a32-health-records-access-request"
area_id: "A32"
kind: "letter"
ai_level: "green"
version: 1
law_stated_as_at: "2026-10-17"
---

# Request for access to health records (patient or authorised representative), with state and NZ variants

> Letter requesting a patient's own health records under APP 12 and the state health records laws, with variants for NSW, Victoria and New Zealand, response times, fees, refusal rights and complaint routes.

Canonical page: https://ailawframework.com/precedents/health-and-medical-law/health-records-access-request  
Law stated as at: 2026-10-17

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

- Kind: Letter. A letter or email you adapt and send.
- Practice area: [Health & Medical Law](https://ailawframework.com/precedents/health-and-medical-law.md)
- Jurisdictions: Australia, New South Wales, Victoria, New Zealand
- AI level: Green. AI can do most of the drafting. A lawyer still reviews the result.
- Law stated as at: 2026-10-17
- Status: Maintained. Checked on 2026-10-17 against the 6 authorities it cites, for 4 jurisdictions.

## When to use it

Use when a patient, or a lawyer or other representative with written authority, wants copies of health records from a private provider or health service. For subpoenas or court process use the court's procedure instead. For public hospitals, check whether a freedom of information route is better.

## How AI may be used

AI may draft the request from the client's details; the records that come back are sensitive health information and must be reviewed only in approved, secure tools.

**AI may:**

- Draft the request and covering letter from the client's details and treatment dates.
- Diary the response deadline for the relevant law.
- Once records arrive, index them in an approved secure tool with page numbers.

**AI must not:**

- Must not process the records received in a public or consumer AI tool, or any tool that may train on them.
- Must not send the request without the patient's signed authority.
- Must not summarise records for the client without a lawyer or clinician checking the summary.

**The lawyer checks:**

- The authority is signed and covers the records and period requested.
- The correct law and deadline are applied (organisation, NSW private sector, Victoria, NZ).
- Any fee is checked against the rule that charges must not be excessive and cannot apply to making the request.
- Records received are stored in the matter's secure repository.

## Authorities

- [Privacy Act 1988 (Cth) Sch 1 APP 12 (access), including APP 12.4 (response time) and 12.8 (charges)](https://www.legislation.gov.au/C2004A03712/latest/text)
- [Health Records and Information Privacy Act 2002 (NSW) ss 26-27 and Sch 1 HPP 7](https://legislation.nsw.gov.au/view/html/inforce/current/act-2002-071)
- [Health Records Act 2001 (Vic) Sch 1 HPP 6](https://www.legislation.vic.gov.au/in-force/acts/health-records-act-2001)
- [Health Information Privacy Code 2020 (NZ) rule 6](https://www.privacy.org.nz/privacy-act-2020/codes-of-practice/hipc2020/)
- [Privacy Act 2020 (NZ) s 44 (response within 20 working days)](https://www.legislation.govt.nz/act/public/2020/0031/latest/LMS23356.html)
- [OAIC, APP guidelines Chapter 12: APP 12 Access to personal information](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-12-app-12-access-to-personal-information)

## Official form

[Official form](https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-12-app-12-access-to-personal-information)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/health-and-medical-law/health-records-access-request and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*