Right to Access Your Health Records — Provincial Laws Guarantee It
What Is It?
Every province in Canada gives you a legal right to access your own personal health information held by healthcare providers — doctors, hospitals, clinics, labs, and pharmacies. This right is established under provincial health information protection laws and applies regardless of how long ago you were treated or whether your records are in paper or electronic form.
Healthcare providers who delay, deny, or overcharge for your records are violating provincial law and can be reported to the applicable Privacy Commissioner.
Why This Matters
You need your health records to:
- Dispute or audit a hospital or clinic bill for errors
- Get a second opinion from another provider
- Apply for insurance, disability, or immigration
- Correct inaccurate entries that may affect your ongoing care
- Transfer care to a new doctor
Your Rights by Province
Ontario (Personal Health Information Protection Act — PHIPA)
- Right to access all personal health information held by a “health information custodian” (doctor, hospital, clinic, pharmacy, lab)
- Response deadline: 30 calendar days (extendable by 30 more days with written notice)
- Fees: must be reasonable; custodian has discretion to waive fees
- Denied? File a complaint with the Information and Privacy Commissioner of Ontario: 1-800-387-0073 | ipc.on.ca
British Columbia (Personal Information Protection Act — PIPA)
- Right to access your personal information, including health records held by private-sector organizations
- Response deadline: 30 business days
- Fees: cannot be excessive
- Public bodies (hospitals, government clinics): covered under Freedom of Information and Protection of Privacy Act (FOIPPA)
- Denied? File with the Office of the Information and Privacy Commissioner for BC: 1-800-663-7867 | oipc.bc.ca
Alberta (Health Information Act — HIA)
- Specific legislation for health information held by custodians (physicians, hospitals, pharmacies, etc.)
- Response deadline: 30 days (extendable to 60 in some circumstances)
- Fees: cost-recovery basis; routine access is often free
- Denied? File with the Office of the Information and Privacy Commissioner of Alberta: 780-422-6860 | oipc.ab.ca
Other Provinces Manitoba, Saskatchewan, New Brunswick, Nova Scotia, PEI, and Newfoundland have substantially similar Personal Health Information Acts (PHIA) or equivalent legislation. All provide access rights with 30–60 day response deadlines. Contact your provincial Privacy Commissioner for specifics.
Quebec (Law 25 / Act Respecting the Protection of Personal Information in the Private Sector)
- Right to access personal information including health data
- As of 2023, Law 25 is fully in force with mandatory breach reporting, portability rights, and deletion rights
- Commission d’accès à l’information (CAI): 1-888-528-7741 | cai.gouv.qc.ca
How to Request Your Records
Step 1 — Make a written request. Send it to the health information custodian (the specific clinic, hospital, or doctor’s office). Use certified mail or email with read receipt for a paper trail.
Include in your letter:
- Your full name, date of birth, and health card number (for identification)
- The specific records you want (dates of service, record type)
- Your preferred format (electronic is usually fastest and cheapest)
- A request to waive or minimize fees
- Reference to the applicable provincial legislation
Step 2 — Wait for the response deadline. The clock typically starts when they receive your written request. Ontario: 30 days. Alberta: 30 days. BC: 30 business days.
Step 3 — Dispute excessive fees. If the provider quotes you a per-page fee or administrative surcharge that seems unreasonable, write back citing the legislation’s requirement that fees be cost-recovery only, and ask for a fee waiver or itemized fee justification.
Step 4 — File a complaint if denied or delayed. Contact your provincial Privacy Commissioner (numbers above). Privacy Commissioners can order custodians to provide access and can investigate systemic access denials.
What Most People Don’t Know
- Your records belong to the institution, but the information belongs to you. The physical file is the provider’s property, but you have a statutory right to the information in it. This is an important legal distinction.
- You can request corrections. If your record contains an error (wrong diagnosis, wrong medication listed, date error), you have a legal right to request a correction under all provincial PHI laws.
- Electronic records are faster and often free. Many hospitals and clinics now have patient portals. Ask for electronic delivery — it’s cheaper for both parties.
- Billing records are part of your health record. You can request itemized billing records as part of your PHI access request. This is the first step to auditing a hospital bill.
- Third-party medical records companies must still comply with provincial fee limits when you request your own records for personal use.
- Privacy violations are taken seriously. Ontario’s IPC has ordered hospitals and clinics to comply with access requests and has the power to investigate and impose remedies.
Who Benefits Most?
Any Canadian who has been treated by a healthcare provider and wants access to their own records — especially those disputing a bill, switching providers, seeking a second opinion, or applying for disability or insurance.
Legal Basis
- Ontario — Personal Health Information Protection Act (PHIPA), SO 2004, c 3, Sch A, ss. 52–54
- British Columbia — Personal Information Protection Act (PIPA), SBC 2003, c 63; FOIPPA, RSBC 1996, c 165
- Alberta — Health Information Act (HIA), RSA 2000, c H-5, ss. 59–68
- New Brunswick — Personal Health Information Privacy and Access Act (PHIPAA)
- Quebec — Act Respecting the Protection of Personal Information in the Private Sector (Law 25)
Frequently Asked Questions
Can a doctor or hospital charge me a fee to access my own health records?
Yes, but the fee must be reasonable and cost-recovery only. Under Ontario’s PHIPA, for example, a custodian may charge approximately $30 for the first 20 pages and $0.25 per page beyond that — and must provide a fee estimate before charging. Healthcare providers have discretion to waive the fee. If a fee seems excessive, you can challenge it by citing the legislation’s cost-recovery requirement, or file a complaint with your provincial Privacy Commissioner.
How long does a healthcare provider have to respond to my records request?
Ontario and Alberta both require a response within 30 calendar days (extendable by an additional 30 days with written notice). BC requires 30 business days. If the provider fails to respond within the deadline, that non-response can be reported to your provincial Privacy Commissioner as a breach.
What if my health record contains an error — can I get it corrected?
Yes. All provincial health information acts give you the right to request a correction if your record contains inaccurate information. Submit a written request describing the error and what the correct information should be. If the provider refuses to correct it, they must note your request in the record and you can escalate to the Privacy Commissioner.
Can I use a health records request to audit or dispute a hospital bill?
Yes — this is one of the most practical uses of the right. Billing records and itemized service records are part of your personal health information. Requesting your complete record including billing documentation gives you the raw data to compare against what you were charged. Discrepancies between the clinical record and the bill are a common source of billing errors.
Does my right to access health records apply to records held by a private clinic, lab, or pharmacy — not just a hospital?
Yes. The right extends to all “health information custodians” — which includes private clinics, specialist offices, pharmacies, medical laboratories, and physiotherapy clinics, not just public hospitals. The applicable legislation and complaint body varies by province, but the right itself is province-wide regardless of whether the provider is public or private.