How to Access Medical Records in South Australia

South Australia has no standalone information-privacy Act at all, public or private, so a public SA Health hospital record is requested through the Freedom of Information Act 1991 with a hard 30-day deadline, while a private provider's record is requested entirely under the federal Privacy Act 1988's APP 12.

Which law covers your provider

Public SA Health hospitals and services are covered by the Freedom of Information Act 1991 (SA) alone. South Australia has no separate health-records statute and no enforceable state privacy Act of any kind, a real structural difference from Victoria, New South Wales and the ACT, which each have their own Health Records Act, and even from Queensland and Western Australia, which each at least have an Information Privacy Act reaching the public sector. SA's closest equivalent is Cabinet Circular PC012, an Information Privacy Principles instruction issued administratively by the Department of the Premier and Cabinet, which carries no legal enforceability in a court and, in its own text, simply defers the actual access mechanism back to the Freedom of Information Act. The Health Care Act 2008 (SA) does not fill this gap either: its confidentiality provision governs when SA Health staff may disclose your information to others, not a right for you to request it yourself.

Private providers (a GP clinic, a specialist's rooms, a private hospital) rely entirely on APP 12 of the federal Privacy Act 1988. This was confirmed two ways: the SA Law Handbook, published by the state's own Legal Services Commission, states plainly that medical records held by private health services are accessible under the federal Australian Privacy Principles, and a targeted search specifically looking for a hidden SA private-sector Act came back negative as well.

How to request

Apply in writing to the specific SA Health Local Health Network, SA Ambulance or SA Dental service that holds your record, since each is treated as its own separate FOI agency rather than one central point of contact. The application must state that it is made under the Freedom of Information Act, identify the document sought with enough detail, give a return address, and be accompanied by the prescribed fee. A SA Health web page reportedly describes an informal, non-FOI channel for some specific categories, such as birth confirmation, attendance confirmation, discharge summaries or specific medical reports, but recordinglaw could not independently confirm the details of that channel, so treat it as a plausible option worth asking your provider about rather than a confirmed formal pathway.

Who can request

You can request your own record directly. On behalf of another person, you may be asked to provide their written consent. For a deceased patient, the Act names the personal representative, or if there is none, the closest relative aged 18 or over. No primary provision was located specifically addressing a parent or guardian's access to a minor's SA public-hospital records, so that mechanism should be treated as unconfirmed rather than assumed to work the same way as for an adult.

Timeframes

The Freedom of Information Act sets a 30-day hard statutory deadline: an application "must be dealt with as soon as practicable (and, in any case, within 30 days)" of receipt. If the agency fails to decide within that window, the request is treated as a deemed refusal, which lets you proceed to review. Private providers, governed instead by APP 12 of the federal Privacy Act, must respond within "a reasonable period" rather than a fixed deadline, since APP 12's hard 30-day rule applies only to federal government agencies, not private organisations.

Fees

The FOI application fee is reported at around $44.70, current as of SA Health's own page at the time of research, though South Australian FOI fees are periodically indexed and this exact figure was not independently confirmed against the underlying Fees and Charges Regulations. Waiver is mandatory for concession-card holders or where financial hardship is demonstrated, and processing charges may apply on top of the application fee. A private provider cannot charge you to make a request in the first place, and any charge for actually providing the record must not be excessive, under APP 12.8 of the federal Privacy Act.

Grounds for refusal

Under section 26 of the Freedom of Information Act, if disclosure of your own record "may have an adverse effect on the physical or mental health, or the emotional state" of you, the agency, rather than simply refusing outright, may instead satisfy the request by giving access to a registered medical practitioner you nominate. Broader Schedule 1 exemption categories, such as for third-party personal or business affairs, can also apply. A private provider can refuse only under the narrower list in APP 12.3 of the federal Privacy Act, such as a serious threat to someone's safety or an unreasonable impact on another person's privacy.

Complaints and review

Two review paths exist for an SA Health FOI decision. Internal review must be sought from the agency's principal officer within 30 days of the decision, and the agency must complete it within 14 days. From there, external review can go either to Ombudsman SA, free of charge and requested within 30 days of the internal-review outcome, aiming to complete within four months, or instead to the South Australian Civil and Administrative Tribunal (SACAT), as an alternative to Ombudsman SA rather than an additional step. South Australia has no dedicated Privacy Commissioner, so Ombudsman SA is the actual complaint destination for a records-access dispute. Separately, service-quality or care complaints, rather than records-access disputes, go to the Health and Community Services Complaints Commissioner. For a private provider governed by APP 12, complaints instead go to the Office of the Australian Information Commissioner (OAIC).

If you're dealing with a workplace injury, see our South Australia workers compensation guide for how medical evidence fits into a claim, and our South Australia enduring power of attorney guide for who can make health decisions, and request records, on someone else's behalf. For the national picture across every state and territory, see the Australia medical records hub.

Frequently Asked Questions

Does South Australia have its own health-records or privacy Act?

No. South Australia has no standalone information-privacy Act covering either the public or private sector. Public SA Health hospital access runs on the Freedom of Information Act 1991 alone, backed only by an administrative Cabinet instruction that has no legal force of its own. This is a real structural difference from states like Victoria, NSW and the ACT, which each have their own Health Records Act.

Do private GPs and specialists in South Australia have to give me my medical records?

Yes, but entirely under federal law. South Australia has no state private-sector health-records Act at all, so a private GP, specialist or private hospital's access obligations come entirely from APP 12 of the Privacy Act 1988, with a reasonable-period response timeframe rather than a fixed number of days.

How long does SA Health have to respond to a records request?

The Freedom of Information Act 1991 sets a hard 30-day statutory deadline to determine a request. If SA Health does not decide within 30 days, the request is treated as a deemed refusal, which lets you proceed to internal and then external review.

How much does it cost to request medical records in South Australia?

The reported FOI application fee is around $44.70, the freshest figure recordinglaw could find on SA Health's own page, though this was not independently confirmed against the Fees and Charges Regulations and SA fees are periodically indexed. The fee must be waived for concession-card holders or where financial hardship is demonstrated.

Who do I complain to if my SA Health records request is refused?

Seek internal review from the agency's principal officer within 30 days of the decision. From there, external review can go to Ombudsman SA, since South Australia has no dedicated Privacy Commissioner, or alternatively to the South Australian Civil and Administrative Tribunal. For a private provider, complaints go to the Office of the Australian Information Commissioner instead, since private SA providers are governed by the federal Privacy Act.