The Data Protection Act 1998 gives every living person (or authorised representative) the right to apply for access to their health records.