The exercise of the law of access of a citizen about the persons who have asked for access to its clinical history, allows to know persons foreign to the entity that treats its data, but does not include the communication of the concrete persons who as a staff of this entity have had access there if the data have communicated. In case one has been produced loss or undue access to the information of the person, the responsible for the file or treatment is that one who has to establish the appropriate mechanisms to make this undue access cease and, if it is proper, to require the corresponding internal responsibilities to the causer of the same one, although the valid regulations do not establish the duty to communicate the persons affected of the losses or undue accesses to the information that it affects them.