Patients can request their health information directly from the provider
Portugal's health regulator says clinical information belongs to the patient, while the provider is responsible for keeping it and supplying access through a secure process.
Archived after its publication day. Search retains this original briefing for background and accountability.
Archived 12 September 2026A patient does not need to justify a request for their own record, and a provider cannot withhold access merely because an unrelated bill remains unpaid.
- Request access from the hospital, clinic, laboratory or other provider that holds the record.
- The provider may verify identity and use a secure delivery method.
- Access to health information cannot be made conditional on settling a debt.
- A complaint can be made first to the provider and then to ERS; a personal-data breach may also fall within CNPD's remit.
What you can ask for
A patient can request access to the health information held about them, including relevant reports, results and clinical records. The provider remains the custodian of the original record and may supply a copy or another appropriate form of access.
The request should identify the patient, the period or episode of care and the material needed. A focused request can be processed more accurately, but the right is not limited to documents the patient can already name.
If access is delayed or refused
Ask for the reason and expected response in writing. Identity checks, protection of another person's data and a secure delivery route can be legitimate safeguards; an unpaid account is not a valid condition for seeing one's own health information.
Use the provider's complaints book or formal complaints channel if the issue is not resolved. ERS receives complaints about regulated providers. Where the problem concerns unlawful disclosure, loss or misuse of personal data, record what happened and consider the CNPD route as well.
What you can do now.
- 01
Send a dated written request to the provider holding the record.
- 02
State the episode, period and preferred secure delivery method.
- 03
Keep the request, reply and any complaint reference together.
- 04
Escalate unresolved provider conduct to ERS where appropriate.
Have a place we should experience?
Invite the Hub for a hosted visit, propose a story, plan a clearly labelled campaign or apply for a business profile.