State medical records law
Utah medical records laws
How do I get my medical records in Utah, and what can a provider charge?
Utah follows HIPAA's deadline: a provider must act on your request within 30 days, with one 30-day extension if it tells you in writing why and when you'll get the records. When you request your own records, HIPAA limits a Utah provider to a reasonable, cost-based fee for copying labor, supplies, and postage. Utah sets separate, inflation-adjusted maximums for attorneys and other authorized third parties: for 2026, $0.65 per page for the first 40 pages, $0.39 per page after that, and $36.53 to locate the record.
- Response deadline
- 30 days (HIPAA)
- Copy fees
- State fee schedule
- Retention — hospitals (general acute)
- At least 7 years; minors until age 18 plus 4 years, but never less than 7 years. Before destroying records, hospitals must publish notice so former patients can access them.
How Utah differs from federal HIPAA
- Sets yearly inflation-adjusted maximum fees for attorneys and other third parties ($0.65/page for the first 40 pages in 2026).
How long a provider has to respond
Utah follows HIPAA's deadline: a provider must act on your request within 30 days, with one 30-day extension if it tells you in writing why and when you'll get the records.(45 CFR § 164.524)
Under 45 CFR § 164.524, a provider may take one 30-day extension only if it tells you in writing, within the first 30 days, why and when you will get the records.
What a provider can charge
When you request your own records, HIPAA limits a Utah provider to a reasonable, cost-based fee for copying labor, supplies, and postage. Utah sets separate, inflation-adjusted maximums for attorneys and other authorized third parties: for 2026, $0.65 per page for the first 40 pages, $0.39 per page after that, and $36.53 to locate the record.(Utah State Courts — Patient / Third party access to medical records (calendar 2026 fee table under § 78B-5-618), 45 CFR § 164.524)
- Paper copies
- Your own records: reasonable, cost-based fee (HIPAA). Attorneys and other third parties (2026): $0.65/page for the first 40 pages, $0.39/page after, plus a $36.53 locating fee
- Electronic copies
- Electronic copies for third-party requests are charged at 50% of the per-page fee (2026 Utah courts fee table).
A provider cannot refuse to give you your records because you owe money for treatment. Compare every state on the medical records fees by state page.
How long records must be kept
- Hospitals (general acute): At least 7 years; minors until age 18 plus 4 years, but never less than 7 years. Before destroying records, hospitals must publish notice so former patients can access them.(Utah Admin. Code R432-100-35)
Minors and sensitive records
- Minors: A minor's hospital records must be kept until the patient is 22 (age 18 plus four years), and never less than 7 years.(Utah Admin. Code R432-100-35)
If a provider doesn't comply
HIPAA has no private right of action — file with HHS OCR. Licensed professionals can be reported to the Division of Professional Licensing, which does not resolve private disputes or recover money.(Utah Division of Professional Licensing — Filing a Complaint)
Utah Division of Professional Licensing (DOPL)
licensed health professionals (physicians and others) · (801) 530-6628
HIPAA violations by any covered entity, within 180 days
How to request your records in Utah
- Ask the provider's medical records (health information) department for its request form, or write your own request with your name, date of birth, dates of care, the records you want, and the format (paper or electronic).
- Keep a copy and note the date — the 30 days (HIPAA) clock runs from when the provider receives it.
- If the deadline passes or the bill exceeds the rules above, use the complaint routes on this page.
Templates and step-by-step help are on the records-access hub. Find a Utah hospital's records office, or browse hospitals in Utah.
Common questions about Utah medical records
How long does a Utah provider have to give me my records?
Utah follows HIPAA: the provider must act within 30 days of receiving your request and may take one 30-day extension only if it tells you in writing.(45 CFR § 164.524)
How much can a Utah provider charge me for my own records?
For your own request, HIPAA limits the fee to a reasonable, cost-based amount covering copying labor, supplies, and postage — not search or retrieval time.(45 CFR § 164.524)
Why was my lawyer charged more for my records?
Utah allows higher, inflation-adjusted fees for attorneys and other third parties. For 2026 the maximums are $0.65 per page for the first 40 pages, $0.39 per page after that, and a $36.53 locating fee.(Utah State Courts — Patient / Third party access to medical records (calendar 2026 fee table under § 78B-5-618))
How long do Utah hospitals keep medical records?
General acute hospitals must keep records at least 7 years. Minors' records must be kept until age 18 plus four years, and never less than 7 years.(Utah Admin. Code R432-100-35)
Where can I complain about a Utah provider?
You can file a complaint about a licensed professional with the Utah Division of Professional Licensing online or by phone at (801) 530-6628, and file a HIPAA complaint with the HHS Office for Civil Rights within 180 days.(Utah Division of Professional Licensing — Filing a Complaint)
Sources
Checked against official sources on November 3, 2026.
- Utah State Courts — Patient / Third party access to medical records (calendar 2026 fee table under § 78B-5-618) — Treasurer-certified CPI-adjusted fee caps, 2026
- Utah Admin. Code R432-100-35 — General acute hospital standards — Medical Records (amended eff. 12/27/2024) (official text via a public mirror)
- Utah Division of Professional Licensing — Filing a Complaint — DOPL complaint page
- 45 CFR § 164.524 — HIPAA right of access — deadline and fees