How Do I Request Records Under HIPAA?
You do not need a special form to request your medical records under HIPAA. A provider may require the request in writing and may ask you to use their own form, but a plain letter or email containing the right elements is a valid request. Those elements are your full name and date of birth, any prior names the record might be filed under, the specific record types and date range you want, how you want it delivered, and your signature and the date. Add one phrase that does more work than everything else combined: the complete record, including outside records received from other providers. Send it to medical records or health information management rather than the clinical front desk, which usually cannot process it. And leave out the reason you want them, because you do not owe anyone one and volunteering it tends to slow the request down.
Do I have to use their form?
No, but you probably want to — and the reason is practical rather than legal.
A provider can require your request in writing and can offer their own form. What they cannot do is use the form as a barrier: a request that has to be collected in person during business hours from a desk that is frequently unstaffed is not a reasonable requirement, and neither is refusing an otherwise complete written request because it arrived on the wrong paper.
That said, their form routes correctly through their internal process and asks the questions their staff need answered. Ask for it first. Use a letter when the form is genuinely hard to obtain, when it demands things it should not, or when you need to ask for something the form has no box for — which happens more often than you would think, because most forms were designed around a routine one-visit request.
What has to be in the request?
Enough to identify you unambiguously, name what you want precisely, and say how you want it delivered.
Something close to this works:
I am requesting a copy of my medical records under my HIPAA right of access. My name is [name], date of birth [date]. Records may also be filed under [prior name]. I am requesting the complete record from [date] to [date], including visit notes, laboratory results, imaging reports, pathology, operative reports, discharge summaries, and outside records received from other providers. Please send this to me electronically as PDF at [email], or advise if you need anything further to process this.
Sign it, date it, and keep a copy. If you mail it, use something that gives you proof of delivery — the date the request arrives starts the clock, and you want to be able to prove when that was.
Why does the wording change what I get?
Because “my records” invites the provider to interpret it, and the interpretation is always narrower than what you meant.
Ask for your records and a records department will reasonably produce recent visit notes. Name the record types and you get the record types. The gap between those two outcomes can be years of history and a second request.
The outside-records clause is the highest-value sentence in the whole document. It captures the material other doctors sent them, which is frequently the only surviving copy of history from a practice that has since closed, and which no portal will ever show you. We went through why in what a patient portal does not show you. The full step-by-step process, including fees and what happens after you send it, is in our guide to requesting your medical records — this post is about getting the document itself right.
What if my records are under a different name?
Say so in the request, because a search for your current name will not return them.
This is the quiet, common failure that almost nobody warns about. Records filed under a maiden name, a previous married name, a name changed for any reason, or a shortened version of a legal first name do not surface when someone types today’s name into a search box. The staff member searching reports that nothing was found, and they are telling you the truth about what their screen showed them.
List every name the record could be under, along with the approximate years. If you have an old insurance card or a member number from the period, include that too. It costs you a line and it can be the difference between a complete record and an empty one.
Can I email it, or do I have to sign in person?
Usually you can send it electronically, and providers may not impose unreasonable barriers on how you submit a request.
Depending on the organization that means a portal message, a web form, a secure email address, or a signed PDF returned by email. Some still ask for a wet-ink signature or notarization. Verifying your identity is legitimate — they are protecting your records from everyone who is not you — but the verification has to be reasonable and it cannot function as an obstacle.
Before you drive anywhere, ask one question: do you accept an electronic signature? A surprising number of organizations do and simply never say so unless asked.
Do I have to say why I want them?
No. And this is the one piece of advice here that runs against most people’s instinct.
You are exercising a right that does not depend on your reasons, and nobody is entitled to ask. More practically, a reason changes how the request gets handled. Mention that you are seeing a new specialist and a helpful staff member may offer to send a summary directly to that doctor instead — convenient, well-intentioned, and not the same thing as your complete record. Mention a lawyer and the request can get routed to risk management, where it will move considerably more slowly and may be requoted at third-party fee rates.
Neither of those is a denial. Both cost you weeks. Ask for the record, specify what you want, say where to send it, and leave the rest out. If you are then told no, the grounds a provider can actually stand on are narrow — we listed them in when a doctor can refuse your records, and the underlying entitlements are in your rights to your own medical records.
Organized.health helps you organize your health information. It does not provide medical advice, diagnosis, or treatment. Always talk to a qualified healthcare provider about your care.
Related: How to request your medical records · How do I get copies of my medical records? · How much can they charge for my medical records?