If they ask you for a copy, ask if they comply with all the medical records privacy laws. In the States we have HIPAA (which technically only applies to health care providers), but you can ask if they VOLUNTARILY comply with it. Then show them the privacy requirements:
http://postimg.org/image/zcj18tull/
[url=http://postimg.org/image/zcj18tull/][img=http://s28.postimg.org/zcj18tull/hipaa_simplification_201303.jpg][/url]....booo....can't seem to post an image of the actual doc here.
Tell them you will provide a copy when they can show that their recordkeeping policies and procedures satisfy these requirements.