How To Request Your Medical Records In Writing?

To request your medical records in writing, send a signed letter to your healthcare provider’s medical records department. Your letter must include your full name, date of birth, the specific dates of treatment, a clear statement that you are requesting copies of your records, and your preferred format (paper or electronic). Send the letter by certified mail with a return receipt so you have proof of delivery. Under the federal HIPAA Privacy Rule, you have the legal right to access your medical records, and providers must respond within 30 days.

What Are Your Legal Rights to Access Medical Records?

The HIPAA Privacy Rule gives you the right to inspect and obtain copies of your medical records. This right applies to records held by most doctors, hospitals, clinics, and other healthcare providers. You do not have to give a reason for requesting your records. Providers cannot deny your request simply because you have not paid your medical bills. However, they can charge a reasonable fee for copying and mailing the records. Some state laws give you additional rights, such as shorter response times or lower cost limits. If you are requesting records for a deceased family member, you must show that you are the personal representative of the estate or have legal authority under state law.

How To Request Your Medical Records In Writing

Write a letter addressed to the medical records department of the facility where you received care. Include the following key pieces of information:

• Your full name and date of birth
• Your address and phone number
• The dates of service you are requesting (for example, January 1, 2020 – December 31, 2024)
• The type of records you want (lab results, imaging reports, doctor’s notes, etc.)
• Your preferred format: paper copy, electronic file (PDF), or a secure online portal
• Where you want the records sent (your address or a direct download link)
• Your signature and the date of the request

Keep a copy of your letter for your records. If possible, send the letter by certified mail so you have tracking proof. Some providers also accept requests through a secure patient portal, but a written, signed letter is the most formal and reliable method. If you are requesting records for someone else, include a signed authorization from the patient or documentation of your legal authority (such as a power of attorney or executor papers).

What Information Should You Include in Your Request Letter?

Be as specific as possible to avoid delays. At minimum, your letter must clearly identify yourself and the records you need. Include your full legal name, date of birth, and any patient identification number used by the provider (such as a medical record number). List the exact dates of treatment or the date range you need. Specify the type of records: lab results, imaging studies, operative reports, discharge summaries, progress notes, medication lists, or billing records. If you want everything, state “complete medical record for the dates below.” Also state whether you want paper copies mailed, an electronic file emailed (via secure method), or access through an online portal. If you are willing to pay a copying fee, say so—but note that HIPAA allows only reasonable copying and postage costs, not search or retrieval fees.

How Much Does It Cost to Get Medical Records?

Under HIPAA, providers can charge only a reasonable cost‑based fee for copying and mailing records. They cannot charge a fee for searching or retrieving your records. Federal guidelines suggest a per‑page fee for paper copies (often $0.50–$1.00 per page for the first 25 pages, then less) and a flat fee for electronic records (commonly $6.50 or less). State laws may set lower caps. Some providers may waive fees for a small number of pages or for records sent directly to another provider. If the fee seems unusually high, you can ask for an itemized breakdown. You cannot be denied access solely because you cannot pay, but the provider does not have to give you free copies.

How Long Does It Take to Receive Your Records?

HIPAA requires providers to respond to your request within 30 days. They can extend that by another 30 days if they give you a written reason for the delay. Many states have shorter deadlines, such as 15 or 20 days. If you requested electronic records, the provider must provide them in the format you asked for if it is readily producible. If the records are denied — for example, because they contain psychotherapy notes that are exempt — the provider must give you a written denial that explains the specific reason and your right to appeal. You can file a complaint with the U.S. Department of Health and Human Services if you believe your rights were violated.

What to Do If Your Request Is Denied or Delayed

Start by contacting the provider’s privacy officer (the person responsible for HIPAA compliance). Ask for a written explanation of the denial or delay. Under HIPAA, denials are allowed only in limited situations: psychotherapy notes that are kept separate from the rest of your record, information compiled for a legal proceeding, and a few other narrow exceptions (for example, records that could cause serious harm to you or others). If the denial does not fall into one of those exceptions, you have the right to request a review by a licensed health professional chosen by the provider. If the delay is unreasonable (beyond 60 days total) or the denial is invalid, file a complaint with the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services. OCR investigates violations of HIPAA and can require the provider to release the records.

Can You Request Records for a Deceased Family Member?

Yes, but only if you have legal authority. Under HIPAA, the personal representative of a deceased person — such as the executor of the will or administrator of the estate — has the same right to access the deceased person’s medical records as the person had while alive. You will need to provide proof of your legal authority, such as a certificate of appointment as executor, letters of administration, or a court order. Some states also allow next of kin (spouse, adult child) to access records if no estate is open, but the rules vary. Call the provider before sending the request to ask what documentation they require. If you are not the personal representative, you cannot get the records unless the deceased person signed a release before death or state law specifically authorizes it.