In my country, you have a legal right to your medical data. I asked for it, it got denied: too much work. I could get 6 non-related pdf files on a USB stick I had to pay for.
A friend of mine worked for a medical temporary employment agency. In accordance with EU GDPR law, upon request of deletion of data, you are legally required to do so. He told me he wasn't allowed to by his boss, he had to reply with "yup we deleted all of it" while in fact they would keep it. I assume many companies do this.