Free Guide to Requesting Your Medical Records

Understanding Your Right to Medical Records

Federal and state laws give you the legal right to access your own medical records. The Health Insurance Portability and Accountability Act (HIPAA), passed in 1996, established national standards protecting your health information privacy. Under HIPAA, healthcare providers must give you copies of your medical records within 30 days of your written request. Some states have additional laws that may require faster responses—as little as 10 or 15 days.

Your medical records belong to you in terms of access rights, even though the physical documents or systems may be owned by the healthcare facility. This includes records from hospitals, doctor's offices, urgent care centers, mental health clinics, and dental offices. You can request records from any healthcare provider you've visited, whether recently or many years ago.

Understanding this right matters for several reasons. You may want to review your own medical history, share records with a different doctor, check for errors, gather information for a personal health journal, or prepare for a legal matter. Whatever your reason, the law protects your ability to see what's in your file.

Different types of records exist within a typical healthcare facility. Clinical notes describe your symptoms, examination findings, and the doctor's assessment. Lab results show blood tests, imaging studies, and other diagnostic information. Medication lists detail prescriptions and dosages. Billing records show what services were provided and charges. Imaging reports interpret X-rays, ultrasounds, and MRIs. You can request all of these or specific types.

Practical Takeaway: You have a legal right to your medical records. Knowing this right exists is the first step toward obtaining them. There is no requirement to explain why you want your records, and providers cannot deny you access simply because they believe you shouldn't have them.

How to Request Medical Records in Writing

A written request is the most reliable way to obtain your medical records because it creates a documented trail. Healthcare facilities often prefer written requests because they can verify your identity and maintain a clear record of what you asked for and when. You can submit a written request by mail, email, fax, or in person, depending on what the facility accepts.

Your written request should include specific information to help the facility locate your records quickly. Start with your full name and date of birth. Include your medical record number if you have it—this appears on bills or previous paperwork from that facility. Provide the date range of the records you want, such as "all records from January 2020 to present" or "records from my visit on March 15, 2023." Be specific about what records you need: everything in your file, only lab results, only imaging reports, or specific visit notes.

Include your current contact information so the facility can reach you about your request. Provide a phone number and email address, or a mailing address if you prefer to be contacted by mail. Some facilities ask which format you prefer—paper copies, electronic files, or both. Specify this if you have a preference. Electronic copies are often faster to produce and easier to store.

Here's a sample structure for your written request:

• Your full name and date of birth
• Your medical record number (if known)
• Specific dates or date range of records requested
• Types of records wanted (all records, or specific types)
• Preferred format (paper, electronic, or both)
• Your phone number and email address
• Your signature (if mailing or faxing)
• Any special instructions (such as sending records to another doctor)

Mail your request to the medical records department of the facility. You may need to contact the main phone number to get the correct mailing address, fax number, or email address for records requests. Many hospitals and larger practices now have online portals where you can submit requests electronically. Ask if this option is available.

Practical Takeaway: Send your request in writing with your name, date of birth, medical record number, specific dates, and the types of records you want. Keep a copy for your records and consider sending it by certified mail or email so you have proof of when you submitted it.

Handling Fees and Processing Times

Healthcare facilities may charge fees for copying and sending your medical records. Federal HIPAA law allows providers to charge reasonable costs for copying, mailing, and labor. These fees vary widely depending on the facility and your location. Paper copies typically cost between $0.25 and $2.00 per page. A typical medical record might be 50 to 200 pages, resulting in fees of $12.50 to $400 or more. Electronic copies usually cost less than paper—sometimes $10 to $50 total—because the facility's costs are lower.

Some states cap how much healthcare providers can charge. For example, California limits copying fees to $0.50 per page for the first 30 pages and $0.25 per page after that. New York allows up to $0.75 per page but caps the total at $100 for a request. Check your state's laws to understand what you might owe. Many states also require providers to give you a cost estimate before they process your request, so you can decide whether to proceed.

You have the right to refuse a request if the fees seem too high. You can ask the facility to send only part of your records to reduce costs, or you can appeal an unusually high fee estimate. Some facilities may waive fees for patients who are indigent or cannot afford them, though this varies by provider.

Processing times are typically 30 days under federal HIPAA rules, but many states require faster responses. Some facilities can provide records within 10 to 15 days, especially if the records are small or electronic. Factors affecting processing time include how busy the records department is, whether records are stored electronically or in paper files, how many pages your records contain, and whether the facility needs to redact (remove) certain information. Complex requests or records stored in multiple locations may take longer.

You can follow up on your request if you don't hear back within the expected timeframe. Contact the medical records department and ask for a status update. If the facility consistently delays providing records beyond the legal deadline, you may file a complaint with your state health department or the federal Office for Civil Rights.

Practical Takeaway: Ask about fees before submitting your request. Understand your state's fee limits and processing timeline. Follow up if you don't receive your records within 30 days or your state's shorter deadline.

Requesting Records from Multiple Providers and Older Records

Many people receive care from several different healthcare providers over time. You may see a primary care doctor, a specialist, a hospital, a mental health provider, and a dentist, among others. Each facility maintains separate records systems, so you'll need to submit a request to each one. Create a list of all the providers you've visited in the past several years, then submit requests to each one.

Older records—from 5, 10, or even 20 years ago—can often be retrieved, though it may take longer. Healthcare facilities are required to keep records for varying lengths of time depending on state law and the type of facility. Most states require hospitals to keep records for at least 6 years after the last visit. Some states require longer retention. Psychiatric records often have longer retention requirements, sometimes 7 to 10 years or more.

Records older than several years may be stored in off-site archives or converted to microfilm rather than kept in the active filing system. This means processing your request may take longer. The facility may charge higher fees for retrieving archived records because the work is more labor-intensive. However, the facility must still attempt to locate and provide them if they're within the required retention period.

If a facility tells you they cannot find records from years ago, ask them to confirm in writing that they searched their archives. Sometimes records are retained but labeled differently than expected, or they may be stored under a different name if you've changed your name since your visit. Provide the facility with any information that might help them locate your records, such as your maiden name or a former address you used during that time.

For records from facilities that have closed, contact your state health department to ask where records may have been transferred. When hospitals or practices close, state law typically requires that records be transferred to another facility or stored according to specific rules. Your state health department can