Resources › For patients and caregivers

Get and share your health records

What can you ask for, how fast, and who else can see your record? Look up your country and compare it with a neighbor. In the US, see what your state adds. Then connect an AI assistant that answers from cited data. Below are real questions, each with what the tools send back.

Questions to ask

A woman in a headscarf sits at her kitchen table with a cup of tea, asking her AI assistant a question on her phone and smiling, reassured by the answer.

Once your assistant is connected, ask a question like one of these. Each answer below is a real answer from the index's tools. Check it against the links it gives before you use it, and read Before you trust an answer, further down this page.

The questions under Wherever you live work for any of the 198 countries and territories we score. Change the country to your own. The questions under In the United States are about US state law.

Helping a parent, a child or a partner get their records? The rules change for each person. This story is set in the United States. Read the Carters' story: one family, four records

Wherever you live

Patients and caregivers, anywhere

What my country scores, and why

Ask: What does Brazil score in the Health Record Rights Index? Give the score out of 100, its strongest and weakest right, and link the page.

The assistant calls get_country with {"country":"BRA"}.

What the tool sends back, shortened:

Brazil: 52 out of 100, Mixed band. Some rights. They work for some people.
Strongest right: getting your full record, 62 out of 100. Weakest: control over who sees it, 35 out of 100.
Page: /brief/BRA/

Check it: Open the country's page and match the score. Each right on the page lists the sources behind it.

Patients, journalists and policy staff

How my country compares with a neighbor

Ask: Compare France and Spain on how a person can see, control and share their own health record. Give each country's overall score and its score for each of the eight rights, all out of 100, and say where the gap is under 5 points.

The assistant calls get_country with {"country":"FRA"}, then get_country with {"country":"ESP"}.

What the tools send back, shortened to the scores:

Scores out of 100. A gap under 5 points is a tie.
Right	France	Spain
Overall	66	61
Getting your full record	70	66
Control over who sees it	68	64
Privacy and security	58	56
One record across your care	72	64
Protection from sale and ads	66	60
Doctors see it when treating you	62	60
Your say over research use	60	50
Rules for AI in your care	54	50

Check it: Open each country's page and match the scores. A gap under 5 points is a tie.

Patients and journalists, anywhere

Breach cases in one country

Ask: What published cases of health data breaches does the index list for Japan? Give the date, the source and the link for each.

The assistant calls find_real_cases with {"country":"JPN"}.

What the tool sends back, the cases about breaches:

February 18, 2025, Nikkei xTECH: Clinic says ransomware attack may have exposed up to 300,000 people's records (our summary)
February 16, 2026, INTERNET Watch (Impress): Hospital confirms attackers stole patient details through a maintenance VPN (our summary)
May 1, 2026, Too Nippo (東奥日報): Hospital worker suspended for reading an acquaintance's record and telling relatives (our summary)
June 8, 2026, Hokkaido Cultural Broadcasting (UHB): Hospital hard drives meant for shredding turned up for sale at online auction (our summary)
June 11, 2026, CBnews (CBnewsマネジメント): University hospital discloses months later that a drive with 1,800 patients' details went missing (our summary)

Check it: Real cases illustrate the scores and never change them. They are not a sample, so they cannot show how common breaches are.

Taking your record abroad. Moving, studying or getting care in another country? Marcus's story follows a basketball player whose career takes him from country to country. The traveling patient tool lets you pick the countries on a trip or a move, and see which parts of a record could follow.

In the United States

HIPAA, the US federal health privacy law, sets the same floor in every state. Many states add rules on top. These questions are about those state laws.

Patients and clinicians in the US

What my state adds to HIPAA

Ask: What does Texas law add to HIPAA on health records? For each question, give the answer, quote the law and link it.

The assistant calls get_state with {"state":"TX"}.

What the tool sends back, the first 4 of 10 answers:

Health data outside HIPAA: Opt-in, for some businesses. Law: Tex. Bus. & Com. Code § 541.101(b)(4).
Getting a copy: Faster, and free in some cases. Law: Tex. Health & Safety Code § 161.202(a).
Health information exchange: No general choice. Law: Tex. Health & Safety Code § 181.154(c).
Reproductive health records: Has a rule. Law: Tex. Health & Safety Code § 245.011(d).

Check it: Follow the link to each law and find the quoted words. "Not checked" is not a no.

Policy staff in the US

State laws signed but not yet in force

Ask: Which Illinois laws on health records are signed but not yet in force? When does each one take effect?

The assistant calls get_state with {"state":"IL"}.

What the tool sends back, the laws signed but not yet in force:

Getting a copy: 735 ILCS 5/8-2001(h), as amended by P.A. 104-598, takes effect January 1, 2027.
Health information exchange: P.A. 104-471 (HB 5295), Section 10, takes effect July 1, 2027.
Reproductive health records: P.A. 104-471 (HB 5295), Section 10, takes effect July 1, 2027.
Genetic records: 410 ILCS 513/15(a), as amended by P.A. 104-642, takes effect January 1, 2027.
Right to sue: P.A. 104-471, Sec. 20, takes effect July 1, 2027.

Check it: Check each date on the state's page. Where a date is not confirmed, the answer should say so.

Every route of the data API

Connect your assistant

Paste this address into your assistant: https://healthrecordrights.com/mcp

Claude Desktop and claude.ai. Open Customize, then Connectors, choose Add, then Add custom connector. Paste the address and choose no sign-in. A free plan can add one custom connector. On a Team or Enterprise plan, an owner adds it first under Organization settings.

Claude Code. Run this command:

claude mcp add --transport http health-record-rights https://healthrecordrights.com/mcp

Other assistants that support MCP, a shared standard that lets an AI assistant read outside data. Most take a server entry like this one. Some name the type streamable-http.
```
{
  "mcpServers": {
    "health-record-rights": {
      "type": "http",
      "url": "https://healthrecordrights.com/mcp"
    }
  }
}
```
ChatGPT. On the web, open Settings, then Security and login, and turn on Developer mode. Then open ChatGPT Plugins, press the plus button, name the app, paste the address and choose no authentication. OpenAI offers this on Plus, Pro, Business, Enterprise and Education accounts.

We tested the connection with Claude Code and the official MCP client library. The Claude Desktop, claude.ai and ChatGPT steps follow each company's own instructions, read on October 4, 2026; we have not tested those screens ourselves. For developers, every detail is on the developers page.

Before you trust an answer

AI assistants can make mistakes, even when they read from our data. Each answer from the index carries a link to the page on this site that shows the same thing. Country scores carry their sources, and US state answers carry the laws they cite. Check them before you quote a score, a law or a date.

Scores are out of 100. Treat two scores less than 5 points apart as the same. The countries in the lead group are always named together. Any of them could rank first, so we never call one of them first.

This is a research tool, not legal advice. It records what laws and official pages said on the dates we read them, and it does not rate any hospital, doctor or company.

We check our data, which makes errors less likely but does not rule them out. We cannot check what an assistant writes from it. If you find one, tell us. Please leave out anyone's medical details.

License and credit

Our scores, summaries, ratings and labels, and the way the data is put together, are licensed under Creative Commons Attribution 4.0 (CC BY 4.0). You may copy, change and build on them, for any purpose, if you give credit.

Credit this way: SuperTruth, Inc., Health Record Rights Index, with a link to healthrecordrights.com. The same applies to anything an AI assistant writes for you from our data.

Some things are not ours to license, and CC BY 4.0 does not cover them: the words of laws and other sources we quote, the titles of other people's pages, and the pages our links point to. Their owners' terms apply.

CC BY 4.0

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI

Health Record Rights Index, by SuperTruth. Not legal or medical advice. Our data and our own words are CC BY 4.0, credit SuperTruth, Inc., Health Record Rights Index; quoted law and source titles stay with their owners. This page last changed on October 4, 2026.