Your Right to Access Medical Records Under HIPAA
Quick Answer
Under HIPAA, you have the right to obtain and review a copy of your medical records, dental records, and billing information. Healthcare providers must provide your records within 30 days of your written request. You can request records in paper or electronic format, and providers can charge reasonable copying and postage fees.
Understanding Your Access Rights
The Health Insurance Portability and Accountability Act (HIPAA) gives you the fundamental right to access your own health information. This is one of your most important patient rights and allows you to stay informed about your medical care and catch any errors in your records.
What Records Can You Access?
- Medical records from doctors and hospitals
- Billing records from healthcare providers
- Test results and imaging reports
- Mental health and psychotherapy notes (with some exceptions)
- Dental records
- Records from urgent care centers and clinics
What Records Are Excluded?
- Psychotherapy notes kept by mental health professionals
- Information compiled for legal proceedings
- Information that could endanger someone's safety
Step-by-Step Guide to Request Your Records
Identify the Provider
Determine which healthcare facility or provider has your records. This might be your primary doctor, hospital, specialist, or urgent care center. If you've seen multiple providers, you'll need to submit a request to each one separately.
Contact Records Department
Call or visit the provider's medical records office. Most healthcare facilities have a dedicated department that handles records requests. Ask for their specific process and any required forms. Get a name and direct contact information if possible.
Submit Your Written Request
Send a written request (email, mail, or in-person) to the medical records department. Include your full name, date of birth, medical record number (if available), and the specific records you want. Be specific about the date range and type of records.
Choose Your Format
Specify whether you want paper copies or electronic copies (CD, USB, or electronic transfer). Most providers now offer electronic delivery options. Requesting electronic format is often faster and cheaper.
Pay the Fee
The provider will inform you of the copying and postage costs. They cannot exceed reasonable amounts set by state law (typically $0.25 per page). You may be able to pick up copies in person to avoid postage fees.
Follow Up
If you don't receive your records within 30 days, follow up with the medical records department. Document all communications. If the provider refuses, ask them to explain the denial in writing.
Sample Request Letter
Use this template to request your medical records: