Getting a family member’s hospital records in the Philippines is usually possible, but the hospital will not release them simply because you are the spouse, child, parent, sibling, or the person paying the bill. Hospital records contain sensitive personal information, so the safest route is to bring written authority from the patient, proper IDs, and proof of relationship. If the patient is unconscious, mentally incapable, a minor, or already deceased, different rules apply. This guide explains who may request the records, what documents hospitals usually ask for, how to handle refusals, and what to do when relatives disagree.

The basic rule: family relationship alone is usually not enough

In the Philippines, medical records are private. A hospital, clinic, doctor, or medical records office is not supposed to release them to a third person unless there is a lawful basis.

The most common lawful bases are:

the patient personally requests the record;
the patient signs an authorization letter or Special Power of Attorney;
the requester is a parent or legal guardian of a minor patient;
the patient is incapacitated and the requester has authority under law, hospital policy, guardianship rules, or a valid legal document;
the patient has died and the requester is a lawful heir or assignee;
the release is required by law, a lawful court order, subpoena, or proper government authority; or
disclosure is necessary to protect life or health in an emergency.

The Department of Health’s official Patient’s Rights materials recognize a patient’s right to privacy and confidentiality of medical records, as well as the right to see or get a copy of medical records except records restricted by law. (samch.doh.gov.ph)

Legal basis for requesting hospital records in the Philippines

Data Privacy Act of 2012

The main law is Republic Act No. 10173, or the Data Privacy Act of 2012. It gives a data subject — the person whose information is being processed — the right to reasonable access to the contents of their personal information. Medical information is treated as sensitive personal information, so hospitals must be careful before releasing it. (National Privacy Commission)

Under Section 13 of the Data Privacy Act, processing sensitive personal information is generally prohibited unless an exception applies, such as specific consent, processing required by law, processing necessary to protect life and health when the data subject cannot consent, medical treatment by a medical practitioner or institution with adequate safeguards, or protection of lawful rights in court proceedings. (National Privacy Commission)

Hospitals are considered personal information controllers for patient health records and must comply with the Data Privacy Act, its IRR, and National Privacy Commission issuances. The NPC has emphasized that protecting patient privacy is at the core of the hospital-patient relationship.

Right of heirs when the patient is deceased or incapacitated

Section 17 of the Data Privacy Act says the lawful heirs and assigns of the data subject may invoke the data subject’s rights after death or when the data subject is incapacitated or incapable of exercising those rights. (National Privacy Commission)

The National Privacy Commission has clarified, however, that the Data Privacy Act does not itself list exactly who counts as a “lawful heir” or who should prevail when relatives disagree. In practice, hospitals may look to the Civil Code rules on succession, the Rules of Court on guardianship, and their own reasonable hospital policies.

Civil Code rules on heirs

For deceased patients, hospitals often ask for documents showing that the requester is a legal heir. Under the Civil Code, compulsory heirs include legitimate children and descendants, legitimate parents and ascendants in default of legitimate children, the widow or widower, and illegitimate children whose filiation is duly proved. (Lawphil)

For intestate succession, the Civil Code generally gives priority to the nearest relatives according to the rules on legal succession. Legitimate children and descendants succeed the parents, while parents and ascendants inherit in default of legitimate children and descendants. The surviving spouse and illegitimate children may also have rights depending on the family situation. (Lawphil)

This matters because a hospital may be cautious when, for example, a sibling requests records of a deceased patient who left a spouse and children. The sibling may be a family member emotionally, but not necessarily the person with the strongest legal basis to receive confidential medical documents.

Physician-patient privilege in court

Medical records may also be protected by physician-patient privilege in court. In Chan v. Chan, G.R. No. 179786, the Supreme Court held that disclosing hospital records containing test results, diagnosis, advice, and treatment could be equivalent to compelling the physician to testify on privileged matters without the patient’s consent. (Supreme Court E-Library)

This does not mean records can never be released. It means that when records are being sought for litigation, the proper method matters. A court order, subpoena, discovery motion, or written patient consent may be required depending on the case.

Who can request hospital records of a family member?

Situation	Who can usually request	Documents usually needed
Patient is alive and competent	Patient, or authorized representative	Patient’s valid ID, requester’s valid ID, authorization letter or SPA, request form
Patient is abroad	Representative in the Philippines	Authorization letter or SPA signed abroad, patient’s passport/ID, requester’s ID, proof of relationship if required
Patient is unconscious or incapacitated	Legal guardian, authorized representative, nearest qualified relative under hospital policy, or lawful heir/assign when applicable	IDs, proof of relationship, medical proof of incapacity if needed, guardianship order or hospital-required affidavit/undertaking
Patient is a minor	Parent or legal guardian	Parent/guardian ID, child’s birth certificate, hospital card, request form
Patient is deceased	Lawful heir, estate representative, or person authorized by heirs	Death certificate, proof of relationship, valid IDs, affidavit of heirship or SPA/authorization from heirs if required
Request is for a court case	Party through lawyer, court, prosecutor, or authorized person	Subpoena, court order, written consent, or other lawful process
Request is by employer, insurer, school, or non-family third party	Usually only with patient consent or legal authority	Patient consent/authorization, specific purpose, IDs, institutional request

What hospital records can you request?

Hospitals usually distinguish between the medical chart and documents derived from it. The complete chart may be harder to obtain, while summaries and certificates are commonly released.

Commonly requested documents include:

Medical abstract or clinical abstract – a summary of diagnosis, treatment, procedures, and hospital course.
Discharge summary – the patient’s condition, treatment, and instructions upon discharge.
Certificate of confinement – proof of admission and discharge dates.
Medical certificate – usually states diagnosis or fitness-related information, depending on purpose.
Laboratory and imaging results – blood tests, X-rays, CT scans, MRI reports, ultrasound reports, ECG, and similar results.
Operating room record or operative report – useful for surgery, insurance, disability, or medico-legal matters.
Emergency room record – useful for accident, assault, insurance, or police-related matters.
Death summary or cause-of-death-related hospital documents – separate from the civil registry death certificate.
Certified true copies – copies stamped or certified by the hospital as faithful copies of records on file.

In practice, it is better to request specific documents instead of asking for “all records.” A broad request is more likely to be delayed because the medical records office may need clearance from several departments.

Step-by-step process to get hospital records of a family member

1. Call or visit the Medical Records Department

Ask for the hospital’s Medical Records Department, Health Information Management Unit, or Medical Records Section. Large hospitals usually have a specific window for record requests.

Ask these questions before going:

What form should I fill out?
What documents are needed if I am the patient’s spouse, child, parent, sibling, or representative?
Is an authorization letter enough, or do you require a notarized SPA?
Can I request by email?
How much are the fees?
When can the record be released?
Do I need the attending physician’s approval?

Some private hospitals require clearance from the attending physician or medical director for certain records. Some public hospitals process routine certificates more quickly.

2. Prepare IDs and proof of authority

At minimum, prepare:

requester’s valid government ID;
patient’s valid government ID, passport, senior citizen ID, PhilHealth ID, or other available ID;
hospital card or patient number, if available;
authorization letter or SPA if the patient is alive and competent;
proof of relationship, such as PSA birth certificate or marriage certificate, if requesting as family;
death certificate if the patient is deceased;
guardianship order or court document if the patient is legally incapacitated or there is a dispute;
representative’s contact number and email.

For ordinary requests, an authorization letter may be accepted. For more sensitive records, old records, deceased-patient records, or requests made by someone abroad, hospitals often ask for a notarized Special Power of Attorney.

3. Use a clear written authorization

The authorization should be specific. It should name the hospital, the patient, the representative, and the records being requested.

A practical wording is:

I authorize [name of representative], with valid ID No. [ID number], to request, receive, and sign documents for the release of my hospital records from [hospital name], including my medical abstract, discharge summary, certificate of confinement, laboratory results, imaging reports, and other related records for my confinement/consultation on [dates]. This authority is given for [purpose].

The patient should sign it, attach a copy of their valid ID, and include contact details so the hospital can verify.

4. Submit the request form and pay copy fees

Hospitals may charge reasonable copy, certification, or retrieval fees. Fees vary by hospital and by document. As one public hospital example, a Quezon City hospital citizen’s charter lists requirements such as a valid government ID and hospital card, with sample fees of ₱30 for a medical certificate and ₱50 for a certificate of confinement, clinical abstract, discharge summary, or certified true copy of laboratory/radiology reports. (Quezon City Government)

Private hospitals may charge more, especially for certified true copies, imaging CDs, old chart retrieval, or voluminous records.

5. Wait for release and bring the same IDs when claiming

Routine certificates may be released the same day or within a few working days. Clinical abstracts, operative reports, old charts, medico-legal records, or records requiring physician approval may take longer.

Typical practical timelines:

Record type	Common timeline
Certificate of confinement	Same day to 3 working days
Medical certificate	Same day to 5 working days
Discharge summary or clinical abstract	3 to 10 working days
Operative report	5 to 15 working days
Old archived records	1 to 4 weeks, sometimes longer
Records for medico-legal or court use	Depends on clearance, certification, and legal requirements

If the patient is abroad

Many Filipinos abroad need hospital records for insurance, immigration, disability benefits, employment medical clearance, or a foreign doctor. The patient may authorize a relative in the Philippines.

Prepare:

SPA or authorization letter signed by the patient;
copy of the patient’s passport or foreign ID;
copy of the representative’s Philippine ID;
proof of relationship, if needed;
exact hospital name, confinement dates, and requested documents.

If the SPA is executed abroad, a Philippine Embassy or Consulate may notarize private documents such as a Special Power of Attorney for use in the Philippines, and personal appearance of the signer is typically required. (Philippine Embassy)

If using a foreign notarized document instead, check whether the hospital will accept an apostilled document from the foreign country or will require consular notarization. Requirements differ, so confirm with the medical records office before spending on authentication.

If the patient is unconscious, intubated, or mentally incapable

If the patient cannot give consent, the hospital may release limited information to the appropriate relative for treatment decisions, billing, transfer, or urgent medical care. But full copies of records are still usually controlled.

The NPC has said that for incapacitated patients, hospitals may refer to the Civil Code hierarchy of heirs, guardianship rules, and applicable ethical guidelines, and may craft policies on default relatives who may receive medical documents and status updates.

In real life, hospitals often prefer the following order:

court-appointed guardian or legally authorized representative;
spouse;
adult children;
parents;
siblings or other relatives, depending on facts and hospital policy.

If relatives disagree, the hospital may refuse to release full records until authority is clarified. This is not always bad faith; it may be the hospital trying to avoid violating patient confidentiality.

If the patient has died

For a deceased patient, prepare stronger proof. Hospitals commonly ask for:

death certificate;
requester’s valid ID;
patient’s valid ID, if available;
PSA marriage certificate if requester is the spouse;
PSA birth certificate if requester is a child or parent;
proof of filiation for illegitimate children;
authorization or SPA from other heirs, if the hospital requires it;
affidavit of heirship or extrajudicial settlement, especially if the request is connected to insurance, estate, or litigation.

A hospital may release records to one heir in appropriate cases, but if there is a known dispute among heirs, it may ask for a court order, joint authorization, or estate representative authority.

Special records that may be harder to obtain

Some records are more sensitive than ordinary lab results or discharge summaries.

Psychiatric and mental health records

Mental health records may receive stricter handling because disclosure can harm privacy, dignity, treatment, or safety. The Mental Health Act, RA 11036 of 2018, protects the rights and freedoms of persons with psychiatric, neurologic, and psychosocial health needs and requires mental health facilities to inform service users of their rights and protect dignity and privacy. (Supreme Court E-Library)

HIV-related records

HIV-related information has special confidentiality rules. Under RA 11166, the Philippine HIV and AIDS Policy Act of 2018, the confidentiality and privacy of a person tested for HIV, exposed to HIV, living with HIV, or treated for HIV-related illness are guaranteed. Disclosure without written consent is generally unlawful except as allowed by the law. (Supreme Court E-Library)

Drug and alcohol test results

Drug or alcohol test results may be released only to properly authorized persons or when required by law. In one NPC advisory opinion involving a request for alcohol or drug test information from a hospital, the NPC emphasized that disclosure to a third party should have the patient’s consent or authority under existing laws and regulations.

Medico-legal records

If the records are connected to assault, vehicular accident, workplace injury, suspected abuse, or criminal investigation, the hospital may require coordination with the medico-legal unit, police, prosecutor, or court. A police blotter alone does not automatically entitle a relative to confidential hospital records.

Can a hospital refuse to release the records?

Yes, in some situations. Common reasons include:

no patient authorization;
incomplete IDs;
no proof of relationship;
unclear or overly broad request;
patient is alive and competent but did not consent;
relatives are fighting over who may receive the records;
record contains third-party information;
record is restricted by law;
old record has already passed the retention period;
request should go through a court, prosecutor, insurer, or official legal process.

The Department of Health’s health privacy rules state that a third party has no access to a patient’s personal data or health information unless access or disclosure is required by law, upon a lawful court order, or supported by a legal instrument such as an SPA for that purpose. (UP College of Law)

How long do hospitals keep medical records?

Record retention depends on the type of record and applicable DOH rules. The DOH has stated that under Department Circular No. 2021-0226, in-patient health records have a 10-year total retention period before disposal, while outpatient health records have a 7-year retention period after the last consultation. (www.foi.gov.ph)

This is a common reason old records cannot be produced. If the confinement was many years ago, ask whether the hospital can issue:

a certification that no record is available;
a certificate of confinement based on admission logs;
billing or PhilHealth-related records;
archived laboratory or radiology reports;
a statement of record disposal if the records were lawfully disposed of.

What to do if the hospital delays or refuses

Start with the least adversarial route.

Ask for the exact reason in writing. A vague “bawal po under Data Privacy” is not enough. Ask what document is missing.
Ask whether a notarized SPA will solve the issue. Many refusals are procedural, not final.
Submit a narrower request. Ask first for a medical abstract, discharge summary, and certificate of confinement instead of the entire chart.
Contact the hospital Data Protection Officer. Under the Data Privacy Act, hospitals should have accountable persons for data protection. A written request to the DPO often clarifies the basis for release.
For privacy-related violations, consider the National Privacy Commission process. The NPC explains that complaints may be filed by data subjects or authorized representatives, and that exhaustion of remedies generally means first informing the respondent in writing and giving it an opportunity to act; the NPC page also states that a notarized complaint form and supporting evidence may be required. (National Privacy Commission)
For hospital service or facility-level issues, use DOH channels. The DOH Health Facilities and Services Regulatory Bureau handles concerns related to hospital licensing and complaints against hospitals and health facilities. (Google Sites)
For court cases, use proper legal process. If the record is needed for an estate case, negligence case, insurance dispute, criminal complaint, or annulment/nullity case, a court order, subpoena, or discovery process may be necessary.

Common mistakes that cause delays

Bringing only your ID, not the patient’s ID.
Assuming “anak naman ako” or “asawa naman ako” is enough.
Using an authorization letter that does not name the hospital or records requested.
Asking for “complete medical records” without dates of confinement.
Not knowing the patient number or admission date.
Submitting a foreign document without apostille, consular notarization, or translation when required.
Having several relatives make conflicting requests.
Asking the billing office instead of the medical records office.
Requesting records from the wrong hospital branch.
Waiting too long, especially beyond retention periods.

Frequently Asked Questions

Can I get my mother’s or father’s hospital records in the Philippines?

Yes, but if your parent is alive and mentally competent, the safest requirement is their written authorization plus copies of both your IDs. If your parent is incapacitated or deceased, you may need proof of relationship, proof of incapacity or death, and possibly an SPA, affidavit, or court/guardianship document depending on the hospital.

Can a spouse get hospital records without the patient’s consent?

Not automatically. A spouse is usually treated as a close next of kin, especially in emergencies, but full copies of records of a living competent patient generally require the patient’s consent or a lawful basis. If the patient is unconscious or deceased, the spouse often has a stronger basis, but the hospital may still require documents.

Can siblings request medical records?

A sibling can request records if authorized by the patient or by the proper legal representative. If the patient is deceased and left a spouse, children, or parents, the sibling may have a weaker legal basis unless authorized by the heirs or supported by a court order.

What if my family member is unconscious and we need the records for transfer to another hospital?

Ask the attending physician or nurses to coordinate a referral summary, discharge summary, or transfer documents directly with the receiving hospital. For urgent treatment, hospitals may share necessary information to protect life and health, but full certified copies may still require the medical records process.

Can a hospital refuse because the bill is unpaid?

Hospitals may collect legitimate charges and copy fees, but unpaid bills should not be used as a blanket excuse to violate patient rights. RA 9439 and its DOH implementing rules address the unlawful detention of patients or refusal to release a cadaver because of nonpayment, while also allowing payment arrangements such as promissory notes in covered situations. (Supreme Court E-Library)

How long does it take to get hospital records?

Simple certificates may be released the same day or within a few working days. Medical abstracts, discharge summaries, operative reports, and old archived records may take 1 to 4 weeks depending on the hospital, the attending physician’s clearance, and whether the chart is archived.

Can I request records by email?

Some hospitals allow email requests, especially for overseas patients, but they usually still require scanned IDs, signed authorization, and sometimes a notarized or consularized SPA. The original documents may be required when the representative claims the records.

Can an employer, insurance company, or school request my family member’s records?

Usually only with the patient’s written consent or a specific legal basis. Employers, insurers, and schools should not receive confidential hospital records just because they ask. The authorization should identify what records may be released and for what purpose.

What if the hospital says the records are gone?

Ask for a written certification that the record is unavailable, lost, disposed of, or beyond the retention period. Also ask whether secondary documents exist, such as admission logs, billing records, PhilHealth claim records, laboratory system results, or a certificate of confinement.

Key Takeaways

Hospital records in the Philippines are private and protected by the Data Privacy Act.
A family relationship alone is usually not enough; bring written patient authorization or proof of legal authority.
For living competent adults, consent is the cleanest basis for release.
For minors, parents or legal guardians usually request the records.
For incapacitated or deceased patients, lawful heirs, guardians, assigns, or authorized representatives may request, but hospitals may require stronger documents.
If relatives disagree, the hospital may wait for joint authority, guardianship papers, or a court order.
Ask for specific documents such as a medical abstract, discharge summary, certificate of confinement, operative report, or lab results.
Old records may no longer exist because DOH retention rules generally allow disposal after set retention periods.
If refused, ask for the reason in writing, address missing documents, elevate to the hospital DPO, and use NPC, DOH, or court processes when appropriate.