Can You Request Your Original Diagnostic X-Rays and Scans Under UK GDPR Laws?

Introduction

Many patients are unsure whether they have the legal right to access their own dental records — including diagnostic X-rays and scans. Whether you are moving to a new dentist, seeking a second opinion, or simply want to understand your dental history, this is a question more people are asking than ever before.

Under UK GDPR (General Data Protection Regulation), your dental X-rays and diagnostic imaging form part of your personal health data. As a result, you hold specific legal rights over how that data is stored, shared, and made accessible to you. Understanding these rights can feel confusing, particularly when dental clinics vary in how they handle record requests.

This article explains clearly and practically what your rights are regarding dental diagnostic X-rays and scans, how to make a Subject Access Request (SAR), what dental practices are legally required to provide, and when it may be appropriate to speak with a qualified dental professional about your imaging and treatment history. If you are also reviewing treatment documentation, this guide on how consent is handled when treatment plans change provides useful additional context.

Can You Request Your Dental X-Rays Under UK GDPR?

Yes. Under UK GDPR, dental X-rays and scans are classified as personal health data. Patients have the legal right to request access to this information through a Subject Access Request (SAR). Dental practices must respond within one calendar month, and in most cases, they must provide this data free of charge.

What Are Your Legal Rights to Dental Records Under UK GDPR?

The United Kingdom General Data Protection Regulation (UK GDPR), along with the Data Protection Act 2018, gives every patient the right to access their personal data held by any healthcare provider — including private dental clinics.

Your dental records are classified as special category data under UK GDPR due to their health-related nature. This means they receive additional legal protection, but it also means you have clearly defined rights over them.

These rights include:

• The right to access your personal data (including X-rays and scans)
• The right to data portability, meaning you may request data in a format that allows you to share it elsewhere
• The right to rectification, if your records contain errors
• The right to erasure in certain circumstances (though this is limited for clinical records held for legal or health purposes)

When it comes to diagnostic imaging — such as dental X-rays, CBCT scans, or OPG (orthopantomogram) X-rays — these are unambiguously part of your personal health record. You are entitled to request access to them.

How Do You Make a Subject Access Request for Dental X-Rays?

Making a Subject Access Request (SAR) is the formal mechanism through which you can request your dental records, including X-ray images and scan data.

Steps to follow:

1. Contact your dental practice directly — either in writing, by email, or through their patient portal if available.
2. Clearly identify yourself — practices will need to verify your identity before releasing data.
3. Specify what you are requesting — state that you wish to receive copies of your dental X-rays and any associated diagnostic imaging, alongside your clinical notes if needed.
4. The practice must respond within one calendar month of receiving your request.
5. No charge should be applied in most standard circumstances, unless requests are deemed manifestly unfounded or excessive.

If your dental practice fails to respond within the required timeframe, you have the right to escalate your concern to the Information Commissioner's Office (ICO), which oversees data protection compliance in the UK.

It is worth noting that some practices may provide X-ray images digitally (for example, as JPEG or DICOM files), while others may issue printed copies. Either format satisfies the legal obligation, provided the images are legible and complete.

Do Dental Practices Have to Provide the Original X-Ray Files?

This is a common area of confusion for patients. In practice, dental clinics are not always required to provide the original file in its native software format — but they must provide a usable, accurate copy of the data.

For digital X-rays stored in specialist dental software (such as Romexis, Sidexis, or Planmeca systems), many practices will export images in a universally viewable format such as JPEG, PNG, or DICOM. These exports are considered a valid copy of your imaging data under UK GDPR.

What practices cannot do is refuse your request entirely, charge an excessive fee, or unreasonably delay providing your records. If a practice no longer holds your records — for example, if they have changed software systems — they are still obliged to make reasonable efforts to retrieve the data.

If you are transferring to a new dental provider, sharing your existing X-rays can help avoid unnecessary repeat imaging, which is beneficial both from a practical and a radiation exposure perspective. Many dental practices welcome pre-existing diagnostic images, as they can support continuity of care and inform future dental assessment and treatment planning.

How Long Are Dental Records Legally Required to Be Kept?

Understanding how long your dental records must be retained is useful when making a data request — particularly if you are requesting records from a previous clinic you attended some years ago.

In the UK, the general guidance for retaining adult dental records is:

• A minimum of 10 years from the date of the patient's last attendance (for adults)
• Until the patient's 25th birthday, or 10 years after last attendance (whichever is longer), for patients treated as children

These retention periods are guided by the NHS Litigation Authority (NHSLA) standards and professional guidance from the General Dental Council (GDC).

After the retention period has elapsed, practices may lawfully destroy old records. However, if records still exist within the retention window and you submit a SAR, the practice is legally obliged to provide access.

Private dental clinics in London should also hold records in accordance with the Care Quality Commission (CQC) record-keeping standards, which form part of the fundamental standards expected of all regulated healthcare providers.

Clinical Explanation: Why Dental X-Rays and Scans Matter

Dental diagnostic imaging plays an essential role in understanding oral health conditions that are not visible to the naked eye during a standard examination. Different types of imaging reveal different information:

Bitewing X-Rays

Bitewing radiographs are typically used to detect early tooth decay between teeth, assess the level of bone supporting the teeth, and monitor existing restorations such as fillings. They offer a focused view of the upper and lower back teeth simultaneously.

Periapical X-Rays

These provide a detailed view of an individual tooth from crown to root tip, including the surrounding bone. They are often used to investigate root canal infections, abscesses, or the structural integrity of a specific tooth.

OPG (Panoramic X-Rays)

An OPG — or dental panoramic tomograph — captures a broad view of the entire jaw, teeth, and supporting structures in a single image. This is particularly useful for assessing wisdom teeth, jaw bone health, and overall dental development.

CBCT (Cone Beam CT Scans)

Cone beam computed tomography provides three-dimensional imaging of the teeth, jaw, and surrounding structures. It is commonly used in implant planning, orthodontic assessment, and more complex surgical planning. If you are exploring clear aligner treatment or orthodontic options, three-dimensional imaging may form part of the diagnostic process.

Each imaging type produces data that belongs to you as part of your health record. Having access to this information allows you to make informed decisions about your ongoing care.

When a Professional Dental Assessment May Be Appropriate

While understanding your rights under UK GDPR is important, it is equally important to recognise when speaking with a qualified dental professional may be beneficial — particularly in relation to your diagnostic imaging.

You may wish to seek a professional assessment if:

• You are experiencing persistent dental pain or discomfort that has not been explained by your current or previous dental team
• You are considering changing dental provider and want a new clinician to review your existing imaging alongside a fresh clinical examination
• You have been recommended a dental procedure and wish to seek a second opinion, with your existing X-rays forming part of the review
• You have concerns about previous dental work and want an independent clinical perspective
• You have noticed changes in your bite, jaw comfort, or tooth sensitivity and want these assessed in conjunction with your imaging history

It is important to note that X-rays and scans should always be interpreted alongside a full clinical examination. Reviewing imaging in isolation — without proper assessment of your current oral health status — does not constitute a diagnosis. Always consult with a qualified dental professional who can assess your individual circumstances.

What If a Dental Practice Refuses Your Request?

Occasionally, patients encounter difficulties when requesting their dental records. Understanding your options in this situation is important.

If a practice refuses your SAR, they must provide a clear written reason for the refusal. They may only decline in limited circumstances, such as:

• The request is manifestly unfounded or repetitive
• Providing the data would adversely affect the rights and freedoms of another individual

If you believe your request has been refused unfairly, you can:

1. Raise a complaint directly with the dental practice through their formal complaints procedure
2. Contact the Information Commissioner's Office (ICO) at ico.org.uk
3. Contact the General Dental Council (GDC) if you believe the refusal reflects a professional conduct concern
4. Seek advice from Citizens Advice regarding your data protection rights

Patients comparing complaint routes and private treatment protections may also find this explainer on Consumer Rights Act 2015 protections for private dental appliances helpful.

Private dental clinics operating in London are regulated by the CQC and are expected to maintain transparent, patient-centred communication in line with professional GDC standards.

Prevention and Maintaining Good Oral Health: The Role of Routine Imaging

One of the most practical reasons to understand your right to dental imaging is to ensure continuity of preventive care. Routine diagnostic X-rays — taken at appropriate intervals as recommended by your dentist — help identify early changes in the teeth and supporting bone before they become more complex conditions.

Practical tips for maintaining good oral health and making the most of your dental records:

• Attend regular dental check-ups as recommended by your dentist — typically every six to twelve months for most adults
• Ask about your imaging at each appointment — understanding what the X-ray shows helps you make informed decisions about your care
• Keep a note of when X-rays were last taken — this can help avoid unnecessary repeat imaging if you change provider
• Inform your new dental provider of your previous treatment history — sharing records helps ensure your care is well-coordinated
• Maintain a consistent oral hygiene routine — brushing twice daily with fluoride toothpaste, flossing, and using interdental brushes where recommended

If you are considering a new patient assessment, our new patient appointments allow your clinical team to review both your current oral health and any relevant imaging history.

Key Points to Remember

• ✅ Under UK GDPR, dental X-rays and scans are part of your personal health data — you have the legal right to access them.
• ✅ A Subject Access Request (SAR) is the formal process for requesting your dental records; practices must respond within one calendar month.
• ✅ Dental practices should not charge for standard SARs unless requests are deemed excessive or repetitive.
• ✅ Records must be retained for a minimum of 10 years for adult patients — requests within this window should be honoured.
• ✅ Imaging files may be provided digitally in formats such as JPEG or DICOM — practices are not always required to provide native software files.
• ✅ X-rays and scans should be interpreted alongside a clinical examination — they do not independently constitute a diagnosis or treatment recommendation.

Frequently Asked Questions

Can I request dental X-rays from a practice I no longer attend?

Yes. You are entitled to request your dental records — including X-ray images — from any practice that holds them, regardless of whether you are a current patient. The practice must respond to your Subject Access Request within one calendar month, provided the records are still within the required retention period. If the practice has closed, the ICO can advise on how to trace former practitioners or their data processors.

Will I be charged for requesting my dental X-rays?

In most cases, no. Under UK GDPR, Subject Access Requests should be provided free of charge. A practice may apply a reasonable administrative fee only if a request is considered manifestly unfounded or excessive, or if you are requesting additional copies of records already provided. They must notify you of any intended charge before processing your request.

Can I use my existing dental X-rays at a new dental practice?

Yes, and this can be clinically beneficial. Sharing existing diagnostic imaging with a new dental provider helps avoid unnecessary repeat X-rays, reduces radiation exposure, and gives the new clinical team useful historical context for your oral health. However, your new dentist may also recommend updated imaging if your previous X-rays are not recent enough to reflect your current dental health accurately.

How long does a dental practice have to respond to my data request?

Under UK GDPR, a dental practice must respond to a Subject Access Request within one calendar month of receiving it. In complex cases, they may extend this by a further two months, but they must notify you within the first month if an extension is being applied and provide a reason. Failure to respond within the required timeframe can be reported to the ICO.

What format will my dental X-rays be provided in?

This varies between practices and the software they use. Digital X-rays are often exported as JPEG, PNG, or DICOM files. DICOM (Digital Imaging and Communications in Medicine) is the standard medical imaging format and can be viewed using free DICOM viewer software. Some practices may provide printed copies, which also constitute a valid response to a SAR, provided the images are clear and legible.

Can a dental practice refuse to provide my X-rays if I owe an outstanding balance?

No. Under UK GDPR, your right to access your personal health data is separate from any commercial or financial relationship with the dental practice. Outstanding fees may be pursued through other means, but they do not legally justify withholding your personal data. If a practice refuses your SAR on this basis, you may escalate the matter to the ICO.

Conclusion

Understanding whether you can request your original diagnostic X-rays and scans under UK GDPR laws is a question with a clear answer: yes, you can. Your dental imaging forms part of your personal health data, and the law provides you with defined rights to access it through a formal Subject Access Request.

Knowing your rights helps you take an active role in your dental care — whether you are seeking continuity of treatment, considering a second opinion, or moving to a new dental provider. It also reinforces the value of preventive dental care and the importance of maintaining accurate, accessible records over time.

If you have questions about your dental health, your imaging history, or would like to discuss your treatment options, speaking with a qualified dental professional is always the most appropriate next step.

Dental symptoms and treatment options should always be assessed individually during a clinical examination.