Can a Doctor Refuse to Give Me My Medical Records?
In almost all cases, no. Under HIPAA’s right of access, a provider must give you a copy of the records they hold about you, and the exceptions are narrow and specific. They cannot refuse because you owe them money, because you are switching doctors, because they disagree with why you want the records, or because they would rather send them straight to your new provider instead. The real exceptions are limited: psychotherapy notes kept separately from the medical chart, information compiled for a legal proceeding, and a small set of safety-based denials that a second clinician must review. Anything else is not a legal denial — it is a stalled request. If you are told no, ask which specific ground the denial rests on and ask for it in writing. Most refusals evaporate at that question, because most of them were never a formal denial in the first place.
What are the actual legal grounds for denial?
They divide into two kinds, and the difference matters because one kind can be appealed and the other cannot.
Unreviewable denials are final. The main ones are psychotherapy notes that a mental health professional keeps separate from your medical record, and information that was compiled in anticipation of or for use in a legal proceeding. Note how narrow the first one is: it covers a therapist’s separately maintained process notes, not your diagnoses, medication list, treatment plan, session dates, or billing records. Those are ordinary chart material and you have a right to them.
Reviewable denials rest on safety. A licensed professional may deny access if, in their professional judgment, releasing the record is reasonably likely to endanger your life or physical safety or that of another person. This is a high bar, and it explicitly does not cover a worry that the information will upset you or that you will misunderstand it. If your record is denied on this ground, you can require review by a second licensed professional who was not part of the original decision.
Can they hold my records over an unpaid bill?
No. This is the single most common false refusal, and it is often delivered sincerely by staff who believe it.
Your right of access does not depend on your account balance. A provider may bill you for the cost of copying, and may pursue an unpaid balance the same way any business would, but they cannot make the record itself the leverage. The U.S. Department of Health and Human Services addresses this directly.
When you hear it, the useful move is not to argue with the front desk. Ask for the privacy officer. They know the rule.
What if they just never respond?
This is far more common than an outright refusal, and it is not really a refusal at all — it is a request that fell through a gap.
Under HIPAA, a provider has 30 days to act on your request, with one 30-day extension available if they notify you in writing and explain the delay. Several states set a shorter clock, and where they do, the shorter one governs.
Silence is easier to fix early. Follow up at the three-week mark, not at day 30, and ask three things: whether the request was received, who has it now, and what date they expect to release it. Write down the answers and the name of the person who gave them. Requests that go missing almost always went missing in a handoff, and naming the handoff is usually enough to recover it.
Do I have to say why I want them?
No. You do not owe anyone a reason, and giving one sometimes backfires.
If you say the records are for a second opinion, a well-meaning staff member may offer to send only the relevant portion to the new doctor. If you mention a lawyer, the request can get routed to risk management and slow down considerably. Neither is a legal denial, but both cost you weeks.
Ask for the record. Specify what you want and the date range. Leave the reason out.
Can they insist on sending records to my new doctor instead?
They can offer, and provider-to-provider transfer is genuinely convenient. But it is not a substitute for your own copy, and you are entitled to both.
There is a practical reason to insist. What a provider sends to another provider is a curated packet — a summary, recent notes, whatever they judge relevant. What you get when you exercise your right of access is the record. For anyone managing a long or contested history, the difference between those two things is exactly where the useful detail lives.
You can also direct a copy to a third party of your choosing, and ask for it in the electronic format you want when the provider can readily produce it.
What if the denial is real?
Sometimes it is, and then the question becomes what is left.
If the denial is reviewable, request the second-professional review in writing. If it is unreviewable, you may still be entitled to the rest of the record — a psychotherapy-notes denial does not shield the whole chart, and providers sometimes overapply it. Ask specifically for everything outside the denied category.
If the denial looks improper and internal escalation has failed, you can file a complaint with the HHS Office for Civil Rights. The window is generally 180 days from when you knew about the problem. That deadline is worth marking on a calendar the day the trouble starts, because the most common reason a complaint never gets filed is that months of good-faith back-and-forth quietly ran it out.
Organized.health helps you organize your health information. It does not provide medical advice, diagnosis, or treatment. Always talk to a qualified healthcare provider about your care.
Related: How do I get copies of my medical records? · How to request your medical records · Filing a HIPAA complaint
