The European Union’s Data Protection Act (DPA) gives rights for living individuals to access their own records. The right can also be exercised by an authorised representative on the individual’s behalf. This is the basis of the UK Department of Health’s Guidance for Access to Health Records Requests.