How Do I Get Copies of My Medical Records?
To get copies of your medical records, contact the medical records or health information management department of each provider that holds them, ask for their release form, complete it specifying the record types and date range you want, and submit it with a photo ID. Under HIPAA, the provider must respond within 30 days and may take one 30-day extension if they tell you why. They can charge a reasonable, cost-based fee for copies, but they cannot refuse to release your records because you owe them money. Requests are per organization, so if you have seen five providers, you will file five separate requests. Many providers now release records through a patient portal, which is usually the fastest route for recent visit notes, labs, and imaging reports — though portals rarely hold the complete record.
Who do I actually send the request to?
Ask for medical records or health information management — not the clinical front desk, which usually cannot process a request and will route it onward, sometimes slowly.
For hospital systems, records for the hospital and for its affiliated outpatient clinics are sometimes held separately even though they share a name and a logo. It is worth asking directly whether one request covers both. If the answer is no, file two.
If the practice has closed, records do not simply vanish. State law generally requires them to be retained and transferred, often to a custodian or another practice. Your state medical board can usually tell you where they went.
What should I ask for, specifically?
A request for “my records” invites the provider to interpret it, and the interpretation is almost always narrower than you meant.
Name the record types explicitly: visit notes, lab results, imaging reports, pathology, operative reports, discharge summaries. Give a date range. If you want everything, say the complete record, including outside records received from other providers.
That last phrase does real work. It captures material other doctors sent them — often the hardest part of your history to reassemble from anywhere else, because the originating provider may be closed, out of network, or in another state.
How long can they take?
HIPAA gives a provider 30 days to act on your request. They may take one 30-day extension, but only if they notify you in writing and explain why. Several states set shorter deadlines, and where they do, the shorter deadline applies.
In practice, the failure mode is not refusal — it is silence. Requests get misfiled, sent to the wrong department, or lost when someone leaves. Note the date you submitted, and follow up at three weeks rather than at thirty days. A request that has gone missing is far easier to resurrect before the deadline than to argue about after it.
What can they charge me?
Providers may charge a reasonable, cost-based fee covering the labor of copying, supplies, and postage. They may not charge for the labor of searching for and retrieving your records.
They also cannot withhold your records because of an unpaid medical bill. This is a common misconception and it is sometimes repeated by front-desk staff in good faith. It is not correct, and the U.S. Department of Health and Human Services is explicit about it.
If you are quoted a fee that looks unreasonable, ask for it in writing and ask what it covers.
What if they refuse, or just never respond?
You have a right of access, and a provider ignoring it is a HIPAA problem rather than a customer-service one.
Start by escalating inside the organization — ask for the privacy officer by name. Most systems have one, and most requests that stalled at the department level move once the privacy officer is involved.
If that fails, you can file a complaint with the HHS Office for Civil Rights. There is a deadline: generally 180 days from when you knew about the problem, though it can be extended for good cause. That window is the single most common reason complaints never get filed — people spend months trying to resolve things directly and find the deadline has passed by the time they give up.
Once you have them, read them
Records are worth reading, not just filing.
Errors are more common than most people expect: medications you never took, allergies that are not yours, diagnoses that were ruled out but never removed, notes describing symptoms you did not report. For anyone with a complex or contested condition, a wrong line entered early gets read as fact by every clinician who sees it afterward.
If you find something wrong, you have a separate legal right to request a correction. That process has its own rules and its own clock, and it is worth knowing before you need it.
Organized.health helps you organize your health information. It does not provide medical advice, diagnosis, or treatment. Always talk to a qualified healthcare provider about your care.
Related: How to request your medical records · How to correct an error in your medical record · Health records in Organized.health
