Health Record Rights Index · country brief · this country's data as of October 2, 2026

Who holds the health record in the United Kingdom?

In 2026, the United Kingdom scores 59 out of 100 for how much say a person has over their own health record. It is tied for 27th of 198 countries and territories, and could rank anywhere from 11th to 41st allowing for scoring error, in the Mixed band (45 to 64). Who holds the keys: you and the health system. Source: Health Record Rights Index, SuperTruth, this country's data as of October 2, 2026.

The person has real controls inside a government or provider system. Its strongest right, compared with the typical country, is doctors see it when treating you (60 out of 100, against 33 to 34 for the typical country). No right falls below the typical country; the closest to it is privacy and security (56 out of 100, against 45 for the typical country).

In England, 39 million are registered on the NHS App and can opt out of the Summary Care Record, but not the Palantir-built data platform.

Published · updated · this country's data as of October 2, 2026 · research tool, not legal advice

overall score · Mixed band, 45 to 64
59/100
rank among 198 countries and territories; likely 11th to 41st, allowing for scoring error
Tied for 27th
confidence in our evidence
High
strength of our evidence (DTI™)
90/100 (Platinum)

Questions people ask

Can I see my health record in the United Kingdom?

In 2026, getting your full record scores 66 out of 100 in the United Kingdom; the typical country scores 40 to 45. UK GDPR gives a free copy of the record within one month, and 39.1 million people are registered on the NHS App. But the app shows only new GP record entries, not historic or hospital records; a single patient record is promised from 2028. Source: ICO, December 8, 2025, and the other sources below.

Who controls health records in the United Kingdom?

In 2026, you and the health system hold the keys to your health record in the United Kingdom. Control over who sees it scores 52 out of 100 in the United Kingdom; the typical country scores 30. Patients can opt out of the national Summary Care Record, and staff must ask permission before viewing it outside emergencies. But there is no opt-out from the Palantir-built Federated Data Platform, and access logs are available only by formal request. Source: NHS England Digital, May 28, 2025, and the other sources below.

How does the United Kingdom compare?

In 2026, the United Kingdom scores 59 out of 100, against 39 for the typical country. This brief compares it with Ireland (47 out of 100), France (66 out of 100) and Germany (63 out of 100). Source: the ranking of all 198 countries and territories.

Eight rights, compared with Ireland, France, Germany, the typical EU country and the typical country

Scores out of 100, by right
Getting your full record20%6655 · 70 · 64
Control over who sees it20%5230 · 68 · 66
Privacy and security15%5656 · 58 · 58
One record across your care15%6238 · 72 · 66
Protection from sale and ads10%6058 · 66 · 70
Doctors see it when treating you10%6036 · 62 · 62
Your say over research use5%6470 · 60 · 50
Rules for AI in your care5%5550 · 54 · 50

Black dot: United Kingdom. Hollow dots: Ireland, France, Germany (scores out of 100 on the right, same order). Gray line: the typical country of all 198. Dashed teal line: the typical EU country. Overall: United Kingdom 59 out of 100, the typical EU country 61. Scores move in steps of about 5 points, so read a rank with its likely range.

What would the United Kingdom need to change to score higher?

The United Kingdom sits in Mixed (45 to 64); Strong starts at 65. Every right is at or above the typical country. The two with the most room to grow, weighted by how much each counts, are control over who sees it (52 out of 100, against 30 for the typical country) and getting your full record (66 out of 100, against 40 to 45 for the typical country). Our scoring rules give more points for:

  • Control over who sees it: A way to say no to sharing (or to be asked first), a log you can read of who opened your record, and finer choices about who sees what. Together these put this right at 60 to 80 out of 100.
  • Getting your full record: A national portal that shows most people at least part of their record (a summary, prescriptions, lab results) puts this right at 60 to 75 out of 100. A near-full record that you can download, with a long history and used by most people, puts it at 76 to 90.

Which laws give health record rights in the United Kingdom?

  • UK GDPR and Data Protection Act 2018: Health is special category data; free access copy, usually within one month; ICO enforcement.
  • Data (Use and Access) Act 2025: Amends UK data protection, replaces the ICO with an Information Commission, sets binding health IT standards (s.121).
  • Health and Social Care Act 2012, s.261: NHS England may release collected data only for health care, social care or promotion of health.

Doctors, waits and private care context, not part of the score

Doctors per 10,000
33.5 2023 · 27th highest of 38 OECD countries
Nurses and midwives per 10,000
95.6 2023 · 20th highest of 38 OECD countries
Private insurance + out-of-pocket
17.2% 2023 · 25th highest of 35 OECD countries
Record reaches private care?
partly
"No independent prescribing organisations currently have ‘write access’ to patients’ NHS medical records – that is, the ability to enter information directly into a record."

Real cases

  • December 16, 2025 · Information Commissioner's Office · archived copy GP surgery sent 23 years of records to an insurer that asked for five
  • March 27, 2025 · Information Commissioner's Office · archived copy Regulator fines NHS software supplier after hackers took data on 79,404 people

Compare the United Kingdom

Cite this brief

In 2026, the United Kingdom scored 59 out of 100 for how much say a person has over their own health record, tied for 27th of 198 countries and territories (could be 11th to 41st), in the Mixed band. Who holds the keys: you and the health system. Source: Health Record Rights Index, SuperTruth, this country's data as of October 2, 2026, https://healthrecordrights.com/brief/united-kingdom/

The 25 sources for the United Kingdom

Each source appears once, under the first right it supports. Titles are shown as our research agents recorded them, usually in the page's own language; text in square brackets is our machine translation. Links were checked on the date shown.

Getting your full record (4 sources)

  1. “Right of access: health information”

    ICO (regulator) · Title in English

    Dated December 8, 2025 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-of-access/health-information/

  2. “NHS App Management Information, August 2026”

    NHS England Digital (government guidance) · Title in English

    Dated September 25, 2026 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: Getting your full record

    https://digital.nhs.uk/data-and-information/publications/statistical/nhs-app-statistics/august-2026

  3. “Online access to new GP health record information”

    NHS England (government guidance) · Title in English

    Dated November 1, 2023 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.england.nhs.uk/long-read/online-access-to-new-gp-health-record-information/

  4. “Health Bill: single patient record fact sheet”

    GOV.UK, DHSC (government guidance) · Title in English

    Dated May 19, 2026 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record; One record across your care; Doctors see it when treating you

    https://www.gov.uk/government/publications/health-bill-single-patient-record-fact-sheet/health-bill-single-patient-record-fact-sheet

Control over who sees it (4 sources)

  1. “Summary Care Records (SCR): information for patients”

    NHS England Digital (government guidance) · Title in English

    Dated May 28, 2025 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: Control over who sees it; Doctors see it when treating you

    https://digital.nhs.uk/services/summary-care-records-scr/summary-care-records-scr-information-for-patients

  2. “Information Governance Framework: Shared Care Records”

    NHS England Digital (government guidance) · Title in English

    Dated May 21, 2026 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: Control over who sees it

    https://digital.nhs.uk/data-and-information/information-governance/guidance/information-governance-framework-shared-care-records

  3. “Opt out of sharing your health records”

    NHS website (government guidance) · Title in English

    Dated June 6, 2024 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Protection from sale and ads; Your say over research use

    https://www.nhs.uk/using-the-nhs/about-the-nhs/opt-out-of-sharing-your-health-records/

  4. “NHS patients can't opt out of Palantir's data platform, but their hospital can”

    The Register (news) · Title in English

    Dated June 13, 2026 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it

    https://www.theregister.com/databases/2026/06/13/nhs-patients-cant-opt-out-of-palantirs-data-platform-but-their-hospital-can/5254766

Privacy and security (4 sources)

  1. “Advanced Computer Software Group Limited, monetary penalty”

    ICO (regulator) · Title in English

    Dated March 26, 2025 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://ico.org.uk/action-weve-taken/enforcement/2025/03/advanced-computer-software-group-limited/

  2. “National Data Guardian statement on NHS Federated Data Platform data access”

    GOV.UK (government guidance) · Title in English

    Dated June 3, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://www.gov.uk/government/news/national-data-guardian-statement-on-nhs-federated-data-platform-data-access-in-response-to-the-not-with-my-nhs-data-campaign

  3. “UK Biobank health data listed for sale in China, government confirms”

    BBC News (news) · Title in English

    Dated April 23, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://www.bbc.co.uk/news/articles/cpvxgl3n138o

  4. “Receiving personal information from the EEA: UK adequacy”

    ICO (regulator) · Title in English

    Dated January 15, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/receiving-personal-information-from-the-eea/

One record across your care (3 sources)

  1. “Electronic Prescription Service”

    NHS England Digital (government guidance) · Title in English

    Dated September 18, 2026 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: One record across your care

    https://digital.nhs.uk/services/electronic-prescription-service

  2. “Summary Care Record (SCR) service page”

    NHS England Digital (government guidance) · Title in English

    Dated August 27, 2026 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: One record across your care; Doctors see it when treating you

    https://digital.nhs.uk/services/summary-care-records-scr

  3. “NHS Federated Data Platform uptake and benefits”

    NHS England (government guidance) · Title in English

    Dated September 25, 2026 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/solution-exchange/fdp-uptake-and-benefits/

Protection from sale and ads (3 sources)

  1. “Health and Social Care Act 2012, section 261”

    legislation.gov.uk (law or regulation) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Protection from sale and ads

    https://www.legislation.gov.uk/ukpga/2012/7/section/261

  2. “Understanding the national data opt-out”

    NHS England Digital (government guidance) · Title in English

    Dated May 16, 2023 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: Protection from sale and ads; Your say over research use

    https://digital.nhs.uk/services/national-data-opt-out/understanding-the-national-data-opt-out

  3. “Palantir should not have significant role in NHS and other public services, say MPs”

    BMJ (news) · Title in English

    Dated June 4, 2026 · Link checked October 3, 2026 (blocked by the site's bot protection)

    Used for: Protection from sale and ads

    https://www.bmj.com/content/393/bmj-2026-035692

Doctors see it when treating you (1 source)

  1. “The single patient record explained”

    The King's Fund (other) · Title in English

    Dated August 4, 2026 · Link checked October 2, 2026 (opened)

    Used for: Doctors see it when treating you

    https://www.kingsfund.org.uk/insight-and-analysis/long-reads/the-single-patient-record-explained-what-could-it-mean-for-patients-and-the-health-and-care-system

Your say over research use (2 sources)

  1. “Using patient data for research: challenges and policy developments”

    House of Lords Library (government guidance) · Title in English

    Dated August 4, 2026 · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://lordslibrary.parliament.uk/using-patient-data-for-research-challenges-and-policy-developments/

  2. “Launch of clinical trial reforms”

    MHRA and HRA, GOV.UK (regulator) · Title in English

    Dated April 27, 2026 · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://www.gov.uk/government/news/launch-of-clinical-trial-reforms

Rules for AI in your care (4 sources)

  1. “Medical Devices (Post-market Surveillance Requirements) (Amendment) (Great Britain) Regulations 2024, S.I. 2024/1368”

    legislation.gov.uk (The National Archives) (law or regulation) · Title in English

    Dated December 16, 2024 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.legislation.gov.uk/uksi/2024/1368/made

  2. “Predetermined change control plans for machine learning-enabled medical devices: guiding principles”

    MHRA, FDA, Health Canada (regulator) · Title in English

    Dated October 24, 2023 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.gov.uk/government/publications/predetermined-change-control-plans-for-machine-learning-enabled-medical-devices-guiding-principles/predetermined-change-control-plans-for-machine-learning-enabled-medical-devices-guiding-principles

  3. “National Commission into the Regulation of AI in Healthcare: recommendations for a future regulatory framework”

    GOV.UK (government guidance) · Title in English

    Dated September 10, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.gov.uk/government/publications/national-commission-into-the-regulation-of-ai-in-healthcare-recommendations-for-a-future-regulatory-framework/national-commission-into-the-regulation-of-ai-in-healthcare-recommendations-for-a-future-regulatory-framework

  4. “Advancing AI regulation in healthcare: insights from AI Airlock phase 2”

    MHRA MedRegs blog (regulator) · Title in English

    Dated June 9, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://medregs.blog.gov.uk/2026/06/09/advancing-ai-regulation-in-healthcare-insights-from-ai-airlock-phase-2/

Something wrong on this page? Tell us.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

SuperTruth Inc. · 24 S. 24th St., Philadelphia, PA 19103, USA · +1 215 918 4140 · supertruth.ai
Something wrong? Tell us · Questions or a briefing: supertruth.ai/on-the-record#contact · Full index: healthrecordrights.com
OECD: Organisation for Economic Co-operation and Development (38 mostly high-income countries). DTI™: the Data Trust Index, which grades the evidence behind each score. SuperTruth makes it and publishes this index. Everything here comes from public information: laws, government and regulator pages, court decisions, published news, WHO, OECD and World Bank data. Full sources: https://healthrecordrights.com/brief/united-kingdom/#sources. SuperTruth built this index and sells health data verification products; no one paid to be included. Research tool, not legal advice. Our scores and our own words are CC BY 4.0; quoted law and source titles stay with their owners.