Guide

How to get copies of your medical records

In the US, your medical records belong to you in every way that matters: HIPAA gives you a legal right to copies of nearly everything in your chart. Most people never exercise it. Here's how, source by source.

Know your rights first

Under the HIPAA right of access, providers and health plans must give you copies of your records when you ask. The essentials:

  • They must respond within 30 days (one 30-day extension is allowed if they tell you why).
  • You can ask for electronic copies, and if the record is stored electronically they generally must provide it that way.
  • Fees must be reasonable and cost-based — copying and postage, not a search fee. Portal downloads are free.
  • They can’t withhold records over an unpaid medical bill.
  • A few things are excluded (e.g. psychotherapy notes kept separate from the chart), but labs, imaging reports, visit notes, medication lists, and immunizations are all yours.

Start with the portals (fastest, free)

Every health system you’ve visited in the last ~decade probably gave you a portal account. In each one, look for “Medical records,” “Health summary,” or “Download my record” — most portals can export visit summaries and lab results as PDFs. Download everything; storage is cheap and gaps are expensive.

National labs run their own portals too: if you’ve had bloodwork at Quest or Labcorp, you can usually create an account and pull years of past results directly.

For everything else: the written request

Providers without portals (and older records) need a records request — usually a one-page “authorization for release of information” form from the provider’s website or front desk. Include:

  • Your name, date of birth, and contact info
  • The date range and what you want (“complete medical record” is a valid ask)
  • That you want electronic copies, delivered to you
  • Your signature and the date

Send it to the provider’s medical-records (health information management) department, and note the date — the 30-day clock starts when they receive it.

Closed or retired practice? Records don’t vanish — they transfer to a custodian (another practice, a records company, or the state). The state medical board can usually tell you who holds them.

Imaging: ask for the report AND the images

Imaging centers hold two things: the radiologist’s report (a document — always get this) and the images themselves (often burned to CD or shared via a download link). For ongoing care the report is what most appointments need; request the images too if you’re seeing a new specialist who may want to re-read them.

If they stall or refuse

Escalate politely but firmly: ask for the HIM department supervisor and mention the HIPAA right of access — the phrase alone often unsticks things. If that fails, you can file a complaint with the HHS Office for Civil Rights (ocrportal.hhs.gov), which enforces the right and has fined providers for access failures.

You've got the records. Now what?

A folder of 60 PDFs is ownership without usefulness — the next step is turning the pile into something you can actually read. That’s a system problem, and we wrote a guide for it: how to organize your medical records. (And if you’d rather the organizing happened automatically, that’s what open-chart is for.)