Medical-record access dispute in Saudi Arabia

The PDPL implementing regulations provide access and copy rights subject to the law’s restrictions, identity verification and protection of other people’s data. Specify the patient, treatment dates and records sought through the facility’s authorised records or privacy channel. Requests ordinarily have a 30-day fulfilment limit with a conditional, notified extension of up to 30 days. A copy request does not establish negligence or entitlement to unrestricted third-party records.

• SDAIA — PDPL Implementing Regulations

Article 3(3) of the PDPL regulations allows the lawful guardian to exercise the rights of a person with reduced or absent legal capacity. The facility must verify the requester’s identity. Provide evidence of the relevant authority; being a relative alone does not establish that authority.

• SDAIA: PDPL regulations, Article 3

Article 7 permits a correction request and allows the controller to seek necessary supporting documents. After correction, prior recipients must be notified without delay. Identify the inaccurate entry and supporting record. A data-correction request does not itself overturn a disputed clinical opinion or establish negligence.

• SDAIA: PDPL regulations, Article 7

Compare the material received with your original request. Identify the missing dates and record types, such as imaging or test results, and keep the provider's explanation. Whether a particular record can be disclosed requires checking the applicable access rules and your authority.

An incomplete file identifies an evidence gap; it does not by itself establish a treatment error or causation. Separate the request for records from the clinical concerns and preserve the chronology for appropriate medical and legal assessment.

Preserve the dated records request, proof of identity or authority, the provider's reply and an inventory of missing consultations, scans, test results or discharge records, prepare a dated chronology and identify any notice or deadline. Send those materials to CounselO for an initial assessment of the facts, forum and options in Saudi Arabia.

For this problem, start with the dated records request, proof of identity or authority, the provider's reply and an inventory of missing consultations, scans, test results or discharge records. Add a short dated summary and identify any notice or deadline. The final list depends on the facts.

Yes. The initial assessment and document review can begin through WhatsApp, email or the consultation form in Arabic or English. Formal filing, attendance and reserved representation work are scoped separately where required in Saudi Arabia.

CounselO focuses the review on which treatment records were requested, who holds them, the patient's authority or representative's consent and the provider's reason for withholding or supplying an incomplete copy, checks the dated records request, proof of identity or authority, the provider's reply and an inventory of missing consultations, scans, test results or discharge records, identifies the potentially applicable framework and authority, verifies the operative provisions within the agreed scope, and delivers advice directed to whether and how to identify the missing material and the appropriate access or clarification request before assessing a separate treatment complaint.

CounselO targets a professional response within 24 hours, subject to the matter’s scope, urgency, intake completeness and service availability. The target is not a guaranteed legal outcome or filing deadline.