| Verified against primary record | |
| Defining features | Patient-maintained, with the individual controlling access; this is what separates it from a provider-held record[1] |
|---|---|
| Legal status of the copy | A personal health record does not replace the legal record of any health care provider[2] |
| Right of access, European Union | The controller must provide a copy of the personal data being processed, the first copy free, electronically where the request was made electronically[3] |
| Independently reported | |
| Whether the right survives leaving | For a clinic established in the Union, the regulation applies by reason of that establishment, without reference to where the patient now is[4] |
| Bands apply only to the rows beneath them. The final row is a reading of the territorial-scope text rather than a cited enforcement outcome; no case law on the point was located. | |
Personal health records are records of a person’s health that the person themselves holds and controls, as distinct from the record a provider keeps. For medical travel the practical question is narrower and harder: whether a patient can compel a provider in a country they have left to give them a copy of what it holds.
The standards bodies decline to define it
The controlled vocabulary supplies the usable definition: a longitudinal, patient-maintained record of an individual’s health history together with tools that allow the individual to control access to it.[1] The two defining features are that the patient maintains it and that the individual controls access, and those are precisely what separate it from a provider-held record.
The formal standards do not define the record at all. The health informatics functional model for personal health record systems describes a patient-centric system controlled for the most part by the individual account holder, developed in harmony with the clinically focused model for provider systems, and states explicitly that it is not an exercise in creating a definition for a personal health record and is not a specification for the underlying record itself; it does not draw the distinction from a provider record and does not describe types of personal health record.[5] The international standard adopting that model makes the same disclaimer, and the edition located has itself been withdrawn and replaced.[6] Neither body supplies a normative definition of the record, which is an unusual and citable fact about a contested boundary.
Government guidance does the work the standards decline. A personal health record is a collection of information pertinent to a patient’s health, controlled by the individual and potentially drawing on multiple providers and on the patient, whereas an electronic health record’s information is typically entered and accessed by providers; a standalone record is one the patient enters and stores themselves, while a tethered or connected record is linked to a specific organisation’s system and accessed through a secure portal; and critically, a personal health record does not replace the legal record of any health care provider.[2] That last point matters enormously for a medical traveller: whatever the patient carries home is not the authoritative record of what happened.
What a patient can actually compel
In the European Union the operative right is the right of access. A data subject may obtain confirmation of whether their personal data is being processed and, where it is, access to the data together with information on purposes, categories, recipients including those in third countries, retention, their other rights, the right to complain, the source, and the existence and logic of any automated decision-making. The controller must provide a copy of the personal data undergoing processing; a reasonable administrative fee may be charged only for further copies; and where the request is made electronically the information is provided in a commonly used electronic form unless the subject asks otherwise.[3] For treatment in the Union or the European Economic Area, that is the answer: the patient can require a copy on request, and the first one is free.
The right usually cited instead is weaker than its reputation. The right to data portability covers data provided to a controller in a structured, commonly used and machine-readable format, with the right to transmit it to another controller, but only where processing is based on consent or on a contract and is carried out by automated means, and it expressly excludes processing necessary for a task carried out in the public interest or in the exercise of official authority.[7] Processing under a legal obligation is not a qualifying basis, and public-hospital record-keeping commonly operates on grounds the article excludes. Private cross-border treatment under a contract is the case where portability most plausibly applies. The reliable route for a medical traveller is therefore the right of access and its copy provision, not portability.
On whether the right survives the patient’s departure, the territorial-scope provision is the relevant text. The regulation applies to processing in the context of the activities of an establishment of a controller or processor in the Union, regardless of whether the processing takes place in the Union, and makes no reference to the data subject’s residence or location; the data-subject-location test appears only in the separate paragraph covering controllers not established in the Union who offer goods or services to, or monitor, people who are in the Union.[4] On that reading, a patient who has flown home retains the right of access against a clinic established in the Union, because the obligation attaches to the clinic’s establishment. Equally, the regulation gives no right against a clinic with no Union establishment that treated a patient who travelled to it, because the patient was not in the Union when the service was provided. This is a reading of the text, not a cited enforcement outcome, and no case law on the point was located.
The reversal that most summaries get wrong
European cross-border healthcare law is frequently described as obliging the treating hospital abroad to supply records. It does not. Patients who seek or receive cross-border healthcare must have remote access to, or at least a copy of, their medical records, and medical follow-up needed after cross-border care must be available as it would have been had the care been given domestically; but these are duties on the member state in which the patient is insured, not on the member state of treatment.[8] The duty on the treating state is a separate and narrower one, to ensure that patients receive a record or at least a copy, which is covered in the entry on continuity of care. The enforceable duty on the clinic that performed the operation comes from data protection law, not from the cross-border healthcare instrument.
Outside those frameworks
For destinations that dominate commercial medical travel, no instrument was located creating an enforceable right of access against a provider. The right of access is real but jurisdictional, and for much of this market it rests on the destination’s domestic law or on the clinic’s contract, neither of which is internationally harmonised. That is the contested boundary, and it is why the practical advice is contractual rather than legal: agree in writing, before treatment, what records and images will be released and in what format.
A European regulation will eventually change part of this picture, giving patients free access to their own electronic health data, the ability to share it across borders, to add their own information, to restrict access, to see who accessed it, to request corrections and to view data in a standard format. Its access provisions are phased, with the first group of data types applying from 2029 and a second group including medical images, laboratory results and hospital discharge reports from 2031. Nothing in it is in force for patients yet, and today’s enforceable right remains the right of access described above.
See also
- Operative Reports, the single document most worth securing before leaving
- Radiology Reports, and why the images need requesting separately from the report
- Continuity of Care, including the duty on the treating state to hand over a record
- Cross-Border Healthcare, the framework whose obligations are often attributed to the wrong state
References
- United States National Library of Medicine. Medical Subject Headings descriptor Health Records, Personal (D055991). Introduced 2010. Verified against primary record: the descriptor record was opened and its scope note and entry terms read. Retrieved 10 October 2026.
- Office of the National Coordinator for Health Information Technology. Personal health records: what health care providers need to know. The document as fetched carries no publisher name and no date. Verified against primary record: the document was opened and the distinction from a provider record, the standalone and tethered types and the statement on the legal record read. Retrieved 10 October 2026.
- European Union. Regulation (EU) 2016/679, Article 15: right of access by the data subject, text as adopted. Verified against primary record: the article text was opened and the information rights, the copy provision, the fee rule and the electronic-form provision read. Retrieved 10 October 2026.
- European Union. Regulation (EU) 2016/679, Article 3: territorial scope, text as adopted. Verified against primary record: the article text was opened and the establishment test and the separate data-subject-location test read. Retrieved 10 October 2026.
- Health Level Seven International. Personal Health Record System Functional Model, Release 2, version 2.0.1. Verified against primary record: the model was opened and its description of a patient-controlled system and its express refusal to define the record read. This is a continuous-build page which states that it is not an authorised publication and gives no publication date for the version. Retrieved 10 October 2026.
- International Organization for Standardization. ISO/HL7 16527:2016, Health informatics: HL7 Personal Health Record System Functional Model, Release 1. Published 2016; withdrawal recorded 4 December 2023 and replaced. Verified against primary record: the standard’s record was opened and its scope statement, its refusal to define the record and its withdrawn status read. The replacement standard was not opened. Retrieved 10 October 2026.
- European Union. Regulation (EU) 2016/679, Article 20: right to data portability, text as adopted. Verified against primary record: the article text was opened and the two cumulative conditions and the public-interest exclusion read. Retrieved 10 October 2026.
- European Parliament and Council. Directive 2011/24/EU, Article 5. Adopted 9 March 2011; latest available text, no amendments applied since 31 December 2020. Verified against primary record: the article text was opened and the record-access and follow-up duties, and the state on which they fall, read. Retrieved 10 October 2026.
Sourcing note: the European regulation on health data access described in the final paragraph is cited without a formal reference because its regulation number and official journal citation could not be confirmed from the primary legal source during this work; the phasing dates are reported from the European Commission’s own explanatory page and the regulation’s text was not read. The European legal texts cited are the versions published by the United Kingdom legislation service, which is reliable for wording but is not the original official journal source, and that is recorded here rather than in each reference. The territorial-scope conclusion is a reading of the text and no case law was located on the point.