Quick answer
Ask questions that define the holder, patient, treatment episode, record categories, format, authority, fee, missing items and access route. A precise request should let the recipient tell what you seek without guessing, and it should leave a reliable trail of what was requested and supplied.
How to use this guide
Start with: “Are you the responsible holder for these records?” Then confirm the dates and locations covered, the categories and native formats available, the identity or authority required, the applicable fee process, and how the holder will identify any item that is not found, does not exist or is withheld. Do not ask the provider to concede negligence or explain a legal case as the price of giving access.
1. Who controls the record I need?
Ask the hospital whether it holds only the facility file or also records produced by independently practising doctors, pathology laboratories, radiology practices, ambulance services or pharmacies. Ask each practitioner whether records are held by the practice, an incorporated entity, an archive contractor or a successor practice. Obtain the correct information-officer or records contact where a formal route may be needed.
The National Health Act requires a health establishment to ensure that a health record is created and maintained for each user, subject to the legislation it references. It does not establish that one hospital is the custodian of every document generated during an episode. Identifying the holder prevents repeated requests to an entity that never controlled the missing material.
2. Which patient and treatment episode are covered?
Provide enough identifiers for an accurate search through a secure channel: the patient's name used at the time, date of birth, hospital or practice number if known, facility, ward or branch, practitioner, and a date range. Ask whether the search will include emergency, inpatient, outpatient and follow-up systems if those settings are relevant.
If treatment crossed midnight, multiple admissions or a transfer, describe the boundaries rather than requesting “everything ever held.” A broad request may still be justified, but the holder should understand the episodes. Keep sensitive identifiers out of an unencrypted subject line or public web form unless the holder confirms that channel is appropriate.
3. What exact categories and formats exist?
Ask for a category response, not merely “the full file.” Depending on the episode, questions may cover admission and triage notes, progress and nursing notes, observation charts, medication administration, prescriptions, consent material, theatre and anaesthetic records, device or implant information, laboratory results, pathology material, radiology reports and original images, referral or transfer records, discharge material and later corrections or addenda.
Ask which records are electronic, paper, image, audio or device-generated and what export format can be supplied. For imaging, distinguish a written report from the original image set. For a portal export, ask whether it contains the complete date range or only the material visible to patients. The HPCSA record-keeping guidance is useful for expected content and attribution, but it should not be used to declare that every possible category had to be created in every consultation.
4. What proves identity or authority?
Ask what evidence the holder needs to verify the patient and requester. A patient asking for their own information, a parent or guardian, a person acting under written authority, and a representative of a deceased estate may need different documents. Ask for the lawful basis and minimum necessary documents rather than sending an entire identity or court file without guidance.
The National Health Act protects the confidentiality of a user's health information, while POPIA regulates health data as special personal information. A family relationship does not automatically settle every access question. If the patient lacks capacity, is a child or has died, ask for the decision and authority requirements in writing and obtain advice if the position is disputed.
5. Is this an ordinary patient request, POPIA request or PAIA request?
Ask the holder which route it is treating the request under and why. POPIA section 23 allows a data subject who proves identity to ask whether a responsible party holds personal information and to request access in a reasonable manner and format, subject to the statutory fee safeguards. PAIA provides distinct formal procedures for public and private bodies. The Information Regulator publishes current forms and guides.
Do not assume that mentioning all three laws makes a request stronger. A clear ordinary clinical-access request may be processed without formal escalation; a disputed or unanswered request may require a formal route. If proceedings have already begun, ask whether PAIA section 7 or a litigation procedure changes the correct method. Record the answer so that the next step is based on the route actually used.
6. Will there be a fee, and what does it cover?
Ask for any prescribed or copying fee, estimate and payment method in writing before paying. POPIA section 23 requires written particulars of the fee before access where a fee is payable under the applicable framework. Under PAIA, request and access fees and exemptions depend on the body and requester category.
Separate an access fee from a disputed treatment invoice. Payment of clinical charges and access to personal information are not automatically the same issue. Preserve the estimate, proof of payment and list of files the payment was said to cover.
7. How will missing, withheld or unreadable items be described?
Ask the holder to distinguish between “not held,” “not found after search,” “believed not to exist,” “withheld under a stated ground,” “partly supplied,” “outside the date range” and “technically unreadable.” These descriptions lead to different follow-up questions. If only part of a record is protected, ask whether the remainder can be supplied through severance or redaction under the relevant framework.
For a formal PAIA request, the Act provides a specific affidavit or affirmation route where a record cannot be found or is believed not to exist after reasonable steps. It also contains procedures for refusals, third-party interests and health-related access concerns. Do not insist that every disputed page must be handed over without considering those provisions; ask for a reasoned written decision and the review or complaint information that applies.
8. How should amendments and audit information be supplied?
If an entry appears corrected or added later, ask for the record in a form that preserves the original entry, author, date and amendment trail where that information exists and is lawfully accessible. Do not request that a holder rewrite an original note to match recollection. Submit any correction request separately and keep the request and outcome.
The National Health Act requires controls against unauthorised access, alteration and destruction. The HPCSA guidance emphasises attribution and proper correction practices. A difference between versions is a reason to preserve and reconcile them, not proof of falsification.
9. What are the follow-up and escalation details?
Ask for an acknowledgement, reference number, responsible contact, expected next communication and the process if no decision arrives. Where the matter is a formal PAIA request, record the statutory submission date and any extension notice rather than applying a generic deadline to the first email. The Information Regulator's current material explains PAIA complaints, but internal steps and the applicable body still matter.
End every call with a short written confirmation: what was agreed, the date range, categories, format, authority outstanding and next date. Keep the language factual. The goal is a complete, traceable request process—not an admission about the quality of treatment.
Important limitation
This is general South African information about questions for a medical-record request. It does not determine entitlement, require disclosure of every requested item or establish negligent treatment.
FAQs
What is the first question to ask a hospital records department?
Ask whether it is the responsible holder for the specific episode and categories you need. The hospital may not control separate practitioner, laboratory, radiology, ambulance or pharmacy records.
Should I ask for a complete medical file or list each category?
Define the episode and list the important categories and formats. You may also ask what other categories the holder maintains, because a label such as complete file does not show what systems or separate providers were searched.
How do I ask about a medical record that appears to have been changed?
Ask for the original entry, author, event date, entry date and amendment or audit information that exists and is lawfully accessible. Preserve each version and avoid alleging falsification before the evidence is assessed.
What should I ask when a provider refuses part of a records request?
Ask for the route used, the written ground, whether the rest can be severed or redacted, and the applicable review or complaint information. A partial refusal does not necessarily justify withholding every other item.
Related Lexuno paths
Related articles
Source notes
Legal note
This article is general legal information for South African readers. It is not legal advice. Speak to a qualified legal professional about your specific facts before taking action.