How to Access Medical Records in Queensland

Queensland has no state law giving patients a right to access records held by a private GP, specialist or private hospital, so those requests run entirely on the federal Privacy Act 1988's APP 12; public Queensland Health hospital records instead go through either a free Administrative Access Scheme for your own record or a formal Right to Information Act application.

Which law covers your provider

Queensland runs two separate systems depending on where the record sits, and they do not overlap.

Public Queensland Health hospitals and services are covered by the Information Privacy Act 2009 (Qld) and the Right to Information Act 2009 (Qld) working together. The Information Privacy Act creates Queensland Privacy Principle 12, the access right itself, but for the actual application process, timeframes and exemptions it defers to the Right to Information Act. Queensland Health also runs a separate, non-statutory Administrative Access Scheme for patients requesting their own record, described below.

Private providers (a GP clinic, a specialist's rooms, a private hospital) are not covered by either of those Queensland Acts. Queensland's Information Privacy Act says so explicitly in its own drafting note: the equivalent federal Privacy Principle includes provisions reaching private-sector entities, and "there are no equivalent [Queensland Privacy Principles] for [those provisions]." Three separate checks confirm there is no hidden Queensland private-sector Act to fall back on. The Hospital and Health Boards Act 2011 (Qld) Part 7 is an offence-based confidentiality regime binding hospital staff and contractors, not a patient access mechanism. The Private Health Facilities Act 1999 (Qld) section 147 looks like a candidate at first glance but, read in full, only binds government inspectors of private facilities to confidentiality, not the facility itself toward its own patients. And no Act titled a Health Records Act, of the kind New South Wales, Victoria and the ACT each have, exists in Queensland. Private providers here rely entirely on APP 12 of the federal Privacy Act 1988, the same right that applies to a private clinic anywhere else that has no equivalent state Act.

How to request your own hospital record

Administrative Access Scheme (own record only). Queensland Health hospital and health services run a policy-level scheme for a patient requesting only their own record. It excludes a parent requesting a child's record, records requested by someone else, deceased patients' records, and non-health documents, all of which go through Right to Information instead. The process is an administrative access form plus identity evidence, such as a passport, birth certificate, driver licence, proof-of-age card, or a statutory declaration from someone who has known you at least a year, submitted to the relevant hospital's Information Access Unit. There is no application fee, though access charges by format may apply, and amendments are free. It is generally finalised within about 20 business days, though a request can be redirected into the formal Right to Information process if it does not fit the scheme's scope.

Right to Information Act application (everything else). Anyone requesting on behalf of another person, requesting a deceased patient's file, or whose request does not fit the Administrative Access Scheme uses the formal RTI Act process instead. The base processing period is 25 business days from a valid application, with possible extensions: 10 more business days if the application is transferred to another agency, 5 more if you only gave a postal address, and 10 more for third-party consultation where the record involves someone else's information. A parent can apply for a child's records, with the child remaining the formal applicant.

Who can request

You can request your own record directly. A parent may apply under the RTI Act for a child's records, though a Queensland-specific refusal ground can let the agency withhold information from a parent where release is not in the child's best interests. For a deceased patient, Queensland has a distinctive statutory basis for next-of-kin access outside the RTI Act itself: the Hospital and Health Boards Act lets a health professional disclose a deceased patient's information to someone who would have had "sufficient personal or professional interest" while the patient was alive, such as a spouse, parent, child, other relative, close friend or treating GP, unless the patient vetoed that disclosure in advance.

Fees

Administrative Access Scheme requests for your own record carry no application fee, though charges by format (such as printed copies) may apply. Right to Information Act application fees and photocopying charges are set by the Office of the Information Commissioner's fee schedule, but that schedule was blocked to automated access at the time of research, along with Queensland Health's official request form and its main patient-access information page. A commonly circulated figure of 30 cents per A4 black-and-white page (with no charge for records delivered by email or disc) appears in secondary sources, but recordinglaw could not confirm it against the official schedule, so treat it as indicative rather than a confirmed current fee.

Private providers cannot charge you to make a request in the first place, and any fee for actually providing the record must not be excessive, under APP 12.8 of the federal Privacy Act.

Grounds for refusal

Under the RTI Act, a Queensland-specific ground lets the agency withhold your own "relevant healthcare information" if disclosure might genuinely be prejudicial to your physical or mental health or wellbeing, but only a principal officer, Minister or an appointed healthcare professional may invoke it, not an ordinary records officer. A parallel ground allows withholding from a parent where disclosure is not in a child's best interests. Broader RTI Act exemptions covering things like law enforcement or legal privilege can also apply, as with any Queensland government document request. A private provider can only refuse under the narrower grounds listed in APP 12.3 of the federal Privacy Act, such as a serious threat to someone's safety, an unreasonable impact on another person's privacy, or the request being frivolous or vexatious.

Complaints and review

For a Queensland Health decision, you can seek internal review within 20 business days of the decision notice, followed by external review at the Office of the Information Commissioner (OIC), with a further appeal on a question of law available to the Queensland Civil and Administrative Tribunal (QCAT). For a private provider governed by APP 12, the complaint pathway is instead the Office of the Australian Information Commissioner (OAIC), the federal privacy regulator.

If you're dealing with a workplace injury, see our Queensland workers compensation guide for how medical evidence fits into a WorkCover claim, and our Queensland enduring power of attorney guide for who can make health decisions, and request records, on someone else's behalf. For the national picture across every state and territory, see the Australia medical records hub.