Oregon medical records laws

How Oregon differs from federal HIPAA

• Oregon Medical Board licensees get a hard 30-day limit with no extension in the Board rule; HIPAA allows a 30-day extension.
• Sets a dollar fee schedule ($30 first 10 pages, $0.50 pages 11–50, $0.25 after) where HIPAA only requires a cost-based fee; HIPAA's limit still caps patient requests.
• Board licensees may not deny copies because of inability to pay.
• Minors 15+ can consent to their own medical care.

How long a provider has to respond

Oregon Medical Board licensees (physicians, PAs, etc.) must provide records within a reasonable time not to exceed 30 days; other providers follow HIPAA's 30 days, which allows one 30-day extension with written notice.(OAR 847-012-0000, 45 CFR 164.524)

What a provider can charge

For Oregon Medical Board licensees (OAR 847-012-0000) and for authorized disclosures (ORS 192.563): up to $30 for 10 or fewer pages, $0.50 per page for pages 11–50, $0.25 per page thereafter, plus postage, a $5 charge if mailed first class within seven business days, and actual cost for films or a requested summary. For a patient's own request, HIPAA's reasonable, cost-based limit also applies, so the lower amount governs.(OAR 847-012-0000, 45 CFR 164.524)

Paper copies

Up to $30 for the first 10 pages, $0.50 per page for pages 11–50, $0.25 per page after that

maximum charge for copying 10 or fewer pages

Up to $30.00

Electronic copies

No Oregon-specific electronic rate found; HIPAA cost-based limits apply. Films/x-rays and other non-written records: actual reproduction cost.

When copies are free

Oregon Medical Board licensees may not deny a patient copies or summaries because of inability to pay.

A provider cannot refuse to give you your records because you owe money for treatment. Compare every state on the medical records fees by state page.

How long records must be kept

• Hospitals: At least 10 years after discharge; x-rays and similar clinical graphics 7 years after the last exam (mammograms 10 years)(OAR 333-505-0050)

Minors and sensitive records

• Minors: A minor 15 or older may consent to hospital, medical and surgical care without a parent (ORS 109.640), and a minor of any age may consent to reproductive health care. Providers may still tell a parent or guardian about the minor's care without the minor's consent (ORS 109.650).(ORS 109.640, ORS 109.650)
• hiv: ORS 433.045 generally bars disclosing the identity of a person tested for HIV or their results in an identifying way, unless law permits it or the person authorizes it.(ORS 433.045)
• mental health: Psychotherapy notes may be withheld from patients (OAR 847-012-0000 and HIPAA).(OAR 847-012-0000, 45 CFR 164.524)

If a provider doesn't comply

• Oregon Medical Board

  physicians, physician assistants and other OMB licensees; complaints must be in writing · (971) 673-2702

• Oregon Health Authority, Health Care Regulation and Quality Improvement

  hospitals and other licensed health care facilities

• HHS Office for Civil Rights

  HIPAA violations by any covered entity, within 180 days

How to request your records in Oregon

1. Ask the provider's medical records (health information) department for its request form, or write your own request with your name, date of birth, dates of care, the records you want, and the format (paper or electronic).
2. Keep a copy and note the date — the 30 days clock runs from when the provider receives it.
3. If the deadline passes or the bill exceeds the rules above, use the complaint routes on this page.

Templates and step-by-step help are on the records-access hub. Find a Oregon hospital's records office, or browse hospitals in Oregon.

Common questions about Oregon medical records