On 22 July 2025, the Information Commissioner (IP) adopted an opinion on the obligations of personal physicians to inform patients about how personal data is recorded in health documentation and whether such patient inquiries must be stored. The opinion clarifies that patients have the right to access and obtain copies of their medical records, including electronic versions, but doctors are not required to explain in advance how data is entered or organised. Patient requests related to their data, including those made through the IRIS system, do not form part of the core medical records and do not need to be stored within the patient file; instead, healthcare providers as data controllers must decide how to manage and store such requests while ensuring traceability.
Original source