1. What will happen if the clinic or hospital refuses to provide the medical notes and records to the patient concerned?

The medical notes and records of patients can be obtained by making a data access request to the clinic or hospital concerned. The clinic or hospital, as a data user that can collect and keep personal data on patients, is obliged to supply the requested data to the patient concerned within 40 days in accordance with section 19 of the Personal Data (Privacy) Ordinance .

Complaints about non-compliance with the provisions of the Personal Data (Privacy) Ordinance can be made to the Privacy Commissioner for Personal Data. Failure to comply with the Ordinance by the data user may result in a fine or imprisonment. Please refer to the Personal Data Privacy topic for more information on this matter.