Step-by-Step Guide
How to Get Medical Records (Step-by-Step)
How to Request Medical Records?
Step-by-step guide to requesting your medical records yourself. Learn the process, costs, timeline, and what to expect. Includes HIPAA rights and sample forms.
A complete, step-by-step guide to requesting your medical records yourself--including what you need, costs, timeline, and what to expect.
Getting your medical records doesn't have to be complicated. Under federal law (HIPAA), you have the right to access your medical records. This guide will walk you through the entire process of requesting records yourself.
Quick Summary
Requesting medical records typically takes 3-5 steps, costs $0-$50, and takes 7-30 days. You'll need to complete a form, verify your identity, and pay any applicable fees. Most providers now offer online portals for faster access.
1. Your Rights Under HIPAA
The Health Insurance Portability and Accountability Act (HIPAA) gives you specific rights when it comes to accessing your medical records:
Right to Access
You have the right to view and obtain copies of your medical records from any healthcare provider.
30-Day Response
Providers must respond to your request within 30 days (can be extended to 60 days with notice).
Reasonable Fees
Providers can charge reasonable fees but cannot deny access due to inability to pay.
Format Choice
You can request records in paper or electronic format (if available).
Important Exception
There are limited exceptions where access can be denied (e.g., psychotherapy notes, information compiled for legal proceedings). However, most routine medical records must be provided.
2. Before You Start
Gather these items before making your request to speed up the process:
What You'll Need
Personal Information
Full legal name, date of birth, Social Security number (optional), current address, phone number, email
Photo ID
Driver's license, state ID, or passport for identity verification
Provider Information
Hospital/clinic name, location, dates of service (approximate is fine), medical record number if known
Payment Method
Credit card, check, or money order for any applicable fees
3. Step-by-Step Process
Find the Right Department
Contact the provider's Health Information Management (HIM) department, Medical Records department, or Privacy Officer. This information is usually available on their website or by calling the main number.
How to Find Contact Info:
- • Check the provider's website (look for "Medical Records" or "Request Records")
- • Call the main number and ask for the Medical Records department
- • Check your patient portal (often has a request feature)
- • Visit in person and ask at the front desk
Complete the Authorization Form
Every provider requires a written authorization. Some accept standard forms, while others require their specific form. The form typically asks for:
What records: Specific dates, visits, or "all records"
Purpose: Personal use, new doctor, legal, etc.
Format: Paper, electronic, CD, or patient portal
Delivery: Pick up, mail, or secure email
Tip: Request "all records" rather than specific items. It's often faster and ensures you don't miss anything. Providers typically find it easier too.
Submit Your Request
Most providers accept requests in multiple ways:
Online Portal (Fastest)
Many providers now offer instant downloads through patient portals. This is the fastest method, often available immediately.
Fax or Email
Send completed form with photo ID copy. Get a confirmation if possible.
Send via certified mail with return receipt for proof of delivery.
In Person
Hand-deliver to the Medical Records office. Get a stamped copy of your request.
Wait for Processing
The provider will review your request, verify your identity, retrieve the records, and calculate any fees. This typically takes 7-30 days.
What Happens During Processing:
Pay Fees (If Required)
If there are fees, the provider will notify you before releasing the records. You'll need to pay before they send your records.
Know Your Rights: Providers cannot charge more than reasonable costs. If you believe a fee is excessive, you can request an itemized breakdown or file a complaint with HHS Office for Civil Rights.
Receive Your Records
Once payment is received (if required), the provider will deliver your records in the format you requested.
Electronic: Usually password-protected PDF via email or portal
Paper: Mailed copies or available for pickup
CD/USB: Digital files on physical media
Portal: Download anytime from your account
4. Medical Records Request Letter Templates
Most providers have their own authorization forms, but some accept a written letter. Use these templates as a starting point. Copy, fill in your details, and submit via mail, fax, or email along with a copy of your photo ID.
Standard Medical Records Request Letter
Use this for a routine request to any provider.
Records Request for a Specific Date Range
Use this when you need records from a specific hospitalization, surgery, or treatment period.
Follow-Up Letter When Provider Is Unresponsive
Use this if more than 30 days have passed since your initial request with no response or records delivered.
File a complaint: If you still receive no response, submit a complaint at hhs.gov/ocr/complaints or call 1-800-368-1019.
5. Costs and Fees
HIPAA allows providers to charge reasonable fees, but the amount varies by state and provider:
Typical Fee Range: $0 - $50
Low Cost ($0-10)
- • Patient portal downloads (often free)
- • States with fee caps (e.g., New Hampshire: $10 flat fee)
- • Small practices with minimal records
Average Cost ($10-30)
- • Most standard requests
- • Paper copies (per-page fees)
- • Electronic copies on CD
High Cost ($30-50)
- • Large hospitals with extensive records
- • Multiple visit dates over many years
- • Rush processing (if available)
What Providers Can Charge For:
Labor Costs
Time to locate, copy, and prepare records
Supplies
Paper, CDs, envelopes, postage
Summary Preparation
If you request a summary instead of full records
Retrieval/Search Fees
Cannot charge just for searching or retrieving records
Skip the hassle
We handle the entire records request process
- Authorization workflow
- Provider follow-up
- Provider-controlled timing
Why Use MedicalRecords.com?
See how we compare to doing it yourself
Do It Yourself
Use MedicalRecords.com
No hidden fees · built to HIPAA standards · Money-back guarantee
6. Free Ways to Access Your Medical Records Online
Many patients don't realize they can access a significant portion of their medical records at no cost. Federal law strengthened these rights with the 21st Century Cures Act (effective April 2021), which requires most health systems to give patients free electronic access to their health information.
Patient Portals: Usually Free
The most direct free path. If your provider uses an EHR system, they almost certainly have a patient portal. The most common are:
Through your portal you can typically access: visit summaries, lab results, imaging reports, medication lists, immunization records, and care summaries, all downloadable as a PDF or via a FHIR-based API to a health app.
Apple Health & Android Health Apps: Free
If your provider supports FHIR (Fast Healthcare Interoperability Resources) APIs, as required by the 21st Century Cures Act, you can connect your iPhone's Health app or third-party Android health apps directly to your provider. This aggregates records from multiple providers in one place, automatically, for free.
Request Electronic Copies Directly: Often Free or Low Cost
When you submit a records request, ask for electronic delivery (email PDF or portal upload). Under HIPAA's cost rules, the labor cost for sending an electronic file is minimal. Many providers deliver electronic copies for $0-$6.50 (the HIPAA cost-based flat fee cap for electronic access), versus $25-$50 for paper.
OpenNotes Access: Free
The OpenNotes initiative (now a federal requirement as of April 2021) requires most healthcare organizations to share clinical notes (including physician visit notes, nursing notes, and care plans) directly with patients through their portal at no charge. If you can't see your notes in your portal, ask your provider to enable OpenNotes access.
State Health Information Exchanges (HIEs): Free
Most states operate a Health Information Exchange, a network that aggregates records from multiple providers in that state. Patients can often request a summary of care from their state HIE for free. Search "[your state] health information exchange patient access" to find yours.
Pro Tip: Always Try the Patient Portal First
Before submitting a formal records request (which can take 7-30 days and cost up to $50), check whether your provider has a patient portal. Sign up takes 5-10 minutes and you may be able to download your records immediately for free. Look for a "Request Records" or "Health Summary" option inside the portal after logging in.
7. Timeline and Expectations
Expected Timeline: 7-30 Days
Factors That Affect Timeline:
Faster (7-14 days)
- • Patient portal requests
- • Small clinics
- • Recent records (last year)
- • Electronic records
Slower (21-30 days)
- • Large hospitals
- • Multiple departments
- • Old records (5+ years)
- • Paper records from archives
8. How to Get Old Medical Records
Retrieving records from 10, 20, or even 30+ years ago (or from childhood) requires a different approach than requesting recent records. Here is a systematic strategy.
Records from 5-15 Years Ago
Many large health systems have digitized records going back 10-20 years. Start by contacting the provider directly; the process is the same as a standard request. Expect longer processing times (up to 30 days) if records must be retrieved from physical archives.
- Call the Medical Records department and mention the approximate year of service
- Ask specifically whether records from that year are in their system or off-site storage
- If off-site: ask for the name of their records storage vendor (e.g., Iron Mountain, Recall)
- Processing may take the full 30 days, so plan accordingly
Childhood Records and Pediatric Records
Adults can request their own childhood records. Most states require providers to retain pediatric records until the patient reaches adulthood (typically age 18 or 21) plus the standard retention period (often 6-10 years). So records from childhood may be available well into your 20s or 30s.
- Contact the pediatrician's current practice (they may have been acquired by a larger system)
- If the practice is no longer at the same location, search for them by name or phone in your state's medical board directory
- Include your childhood address and parent's name if you have limited details
Records from a Closed Practice or Retired Doctor
When a physician retires or a practice closes, HIPAA still requires that patient records be maintained and accessible for the required retention period. The records don't disappear; they must be transferred to a custodian.
Check the State Medical Board
Your state medical board tracks where records go when a physician retires or surrenders their license.
Contact the State Medical Association
Many state medical associations maintain referral lines to help patients locate records from closed practices.
Look for Successor Practices
Another physician or group may have acquired the practice.
Check with Hospital Affiliations
If your doctor had hospital privileges, the hospital may have records of your care there.
Records Storage Companies
Many practices stored paper records with companies like Iron Mountain or Recall.
Records from a Closed Hospital
Hospital closures are managed differently than individual practices. State health departments often take custody of records when hospitals close without a successor.
- Contact the state Department of Health and request guidance on the specific hospital
- Search "[hospital name] closed records custodian [state]" online
- The acquiring or successor hospital system often retains the records
- See our dedicated guide: How to Get Records from a Closed Hospital
When Records No Longer Exist
If records have passed the retention period and were legally destroyed, the custodian must provide written confirmation that records no longer exist.
What you can do: Request whatever does still exist (billing records often survive longer), check insurance EOBs for documentation of past care, and contact labs or imaging centers directly, as they may retain results independently of your doctor's records.
9. Common Issues and How to Handle Them
🚫 Provider Says They Don't Have Records
What to do: Ask for written confirmation that records don't exist. Records may have been transferred to another provider or destroyed after retention period.
Your rights: Providers must provide evidence they don't have records if they claim this.
⏰ Provider Is Taking Too Long
What to do: Follow up after 30 days. Send a certified letter referencing HIPAA's 30-day requirement. Document all communication.
Your rights: File a complaint with HHS Office for Civil Rights if provider exceeds 30 days without valid extension.
💰 Fees Seem Too High
What to do: Request an itemized fee breakdown. Check your state's laws (some states have fee caps). Compare to other providers.
Your rights: File a complaint if fees are unreasonable. HIPAA requires fees to be cost-based, not profit-based.
📝 Request Denied
What to do: Request written explanation of denial. Denials are rare and must be for specific legal reasons.
Your rights: You can request a review of the denial. Most denials can be appealed.
10. DIY vs Using a Service
✓ DIY (Do It Yourself)
Pros:
- • No service fees (only provider fees)
- • Full control over the process
- • Direct communication with provider
- • Can use patient portal for free instant access
Cons:
- • Time-consuming (research, forms, follow-up)
- • Can be confusing or frustrating
- • Must handle issues yourself
- • Pay provider fees upfront
🚀 Using a Service
Pros:
- • Save time and hassle
- • Expert knowledge of the process
- • They handle follow-up and issues
- • They pay provider fees upfront
- • Higher success rate
Cons:
- • Service fee ($50-149 depending on speed)
- • Less direct control
- • Must authorize third party
- • Still pay provider fees (reimbursed to service)
When to DIY:
- ✓ You have plenty of time
- ✓ Your provider has an easy online portal
- ✓ You've done this before successfully
- ✓ You want to save money
- ✓ You're comfortable with paperwork and follow-up
When to Use a Service:
- ✓ You're busy and want to save time
- ✓ You've had issues with providers before
- ✓ You need records from multiple providers
- ✓ You want guaranteed results
- ✓ The paperwork seems confusing
- ✓ You need records urgently
Summary
Requesting your medical records yourself is absolutely possible and can save money. The process involves finding the right department, completing an authorization form, submitting your request, waiting for processing, paying any fees, and receiving your records.
Most requests take 7-30 days and cost $0-50. While the process is straightforward, it does require time and patience. If you're busy or want guaranteed results, using a service like MedicalRecords.com can save you significant time and hassle.
11. Frequently Asked Questions
How do I request my medical records?
Contact your provider's Medical Records or Health Information Management department. Complete their authorization form, provide a photo ID copy, and submit via portal, fax, mail, or in person. Processing takes 7-30 days. Learn more about your rights under HIPAA.
How much does it cost to get my medical records?
Costs typically range from $0-$50. Patient portal downloads are often free. Paper copies may cost $0.25-$1 per page. HIPAA requires fees to be reasonable and cost-based. Some states have fee caps. Check our guide on state-specific regulations.
How long does it take to get medical records?
Under HIPAA, providers must respond within 30 days (can extend to 60 with notice). Patient portal requests are often instant. Paper requests typically take 7-30 days depending on the provider.
Can a hospital refuse to give me my medical records?
Rarely. Providers can only deny access to psychotherapy notes, information compiled for legal proceedings, or if disclosure could endanger you or others. Standard medical records must be provided. Read more about mental health record protections and your full HIPAA rights.
Can I request medical records online?
Yes, many providers offer patient portals (MyChart, Healow, etc.) where you can download records instantly. For complete records, you may still need to submit a formal request through their online system. Our patient portal guide explains how to access your records digitally.
What information do I need to request medical records?
You'll need: your full legal name, date of birth, current address, phone number, a photo ID copy, and approximate dates of service. Your medical record number helps but isn't required. For complete guidance, see our guide on understanding what's in your medical records.
Can someone else request my medical records for me?
Yes, with written authorization. You must sign a release form naming the person or service authorized to request records on your behalf. Parents can request minor children's records. Legal representatives can request for incapacitated individuals. See our guide on requesting records for family members.
What if my hospital or doctor's office closed?
When hospitals or medical practices close, records are typically transferred to a successor organization, state health department, or designated record custodian. Our guide on getting records from closed hospitals explains how to track down your records.
Can I look up my own medical records online?
Yes, and this is often the fastest, free path. If your provider uses a patient portal (MyChart, Healow, FollowMyHealth, athenahealth, etc.), you can sign up and access visit summaries, lab results, medication lists, and in many cases clinical notes at no cost. Under the 21st Century Cures Act (effective April 2021), most health systems are required to give patients free electronic access to their health data through standardized FHIR APIs, meaning you can also connect health apps on your phone to pull records from multiple providers in one place.
How far back can I get medical records?
Under HIPAA, providers must retain records for at least 6 years from the date of creation or the last effective date. State laws often require longer retention, typically 7-10 years for adults, and until a minor reaches adulthood (18 or 21) plus several additional years for pediatric records. Records older than the legally required retention period may have been destroyed, though many large health systems keep records much longer. If records have been destroyed, the provider must confirm this in writing. See our medical records retention guide for state-by-state requirements.
How do I get medical records from a doctor who retired?
When a doctor retires, they must arrange secure storage of patient records and notify patients of the records custodian. Your best starting point is your state medical board (search "[your state] medical board retired physician records"), which tracks custodians for retired physicians. Records may have been transferred to a successor practice, a hospital system, or a professional records storage company (such as Iron Mountain). Your state medical association also maintains referral lines to help patients locate records. See our section on getting old records for a full step-by-step strategy.
Are medical records free? Can doctors charge for copies?
It depends on the format and your state. Electronic copies accessed through a patient portal are typically free. When you request electronic delivery of records, HIPAA caps what providers can charge to a reasonable cost-based fee, often $0 to $6.50 for electronic copies. Paper copies usually cost $0.25-$1.00 per page plus a flat retrieval fee, totaling $10-$50 for a typical request. Providers cannot charge purely for retrieving or searching records. Some states (such as New Hampshire) cap total fees regardless of volume. If you believe a fee is unreasonable, request an itemized breakdown or file a complaint with the HHS Office for Civil Rights.
How do I get old medical records from 10 or 20 years ago?
Start by contacting the original provider, as many large health systems have digitized records going back 10-20 years. If records are in off-site storage, ask for the name of their storage vendor and request directly. For records from childhood, contact your former pediatrician's practice (which may now be part of a larger system). For records from closed practices, contact your state medical board or medical association, which can direct you to the records custodian. Check our detailed old medical records guide for a complete playbook, including what to do when records may no longer exist.
Qualify for a lawsuit?
If your case qualifies, get your medical records retrieved for FREE as part of your legal case.
Frequently Asked Questions
Do I need a lawyer to request my medical records?
No. You have a legal right under HIPAA to request your own medical records without a lawyer. Simply submit a written authorization to the provider's medical records department. MedicalRecords.com can also handle the process for you starting at $50.
What if a hospital refuses to give me my medical records?
If a hospital refuses your records request or fails to respond within 30 days, you can file a complaint with the HHS Office for Civil Rights at hhs.gov/ocr. You can also contact your state health department. In some cases, an attorney can help compel production of your records.
Can someone else request my medical records for me?
Yes. A personal representative (such as a parent for a minor child, a legal guardian, or a person with healthcare power of attorney) can request records on your behalf. You can also authorize a third party, including MedicalRecords.com, through a signed written authorization.