How to Calculate HITECH-Compliant Medical Records Fees: Examples and Best Practices

HITECH Act Fee Structure

HITECH-compliant medical records fees must follow a cost-based fee calculation. You may only charge for: (1) labor for copying the records (paper or electronic), (2) supplies used to deliver the copy, (3) postage if mailing, and (4) an explanation or summary if the individual agrees in advance. Retrieval, verification, storage, or system maintenance costs are not permissible.

Allowed cost components

• Labor for copying: exporting from the EHR, compiling, converting formats, and transmitting or mailing.
• Supplies: actual cost of paper, envelopes, CD, or USB used to fulfill the request.
• Postage: actual postal or courier charges when the individual asks for mailed copies.
• Optional summary: only if the individual specifically requests and agrees to any fee.

Three compliant fee methods

• Actual cost: calculate the precise labor minutes for the request, multiply by an allowed hourly rate, then add supplies and postage.
• Average cost schedule: publish reasonable, data-backed averages (for example, “portal delivery typical e-copy: X minutes”) and apply them consistently.
• Flat fee option: for electronic copies to the individual, you may charge a permissible flat fee not to exceed $6.50 total.

Quick examples

• Portal download (e-copy): 8 minutes of copying at $30/hour = $4.00; no supplies; total $4.00.
• USB mailed: 12 minutes at $28/hour = $5.60; USB $3.00; postage $3.40; total $12.00.
• Paper set (patient request): 18 minutes at $25/hour = $7.50; paper/envelope $1.20; postage $4.10; total $12.80. Per-page charges are not used for e-copies.

When a patient asks for an electronic copy, per-page fees are not appropriate. For paper copies requested by the patient, you may still use cost-based time and supplies; if state law sets lower limits for paper, follow the lower amount to stay within HITECH Act compliance.

Labor Cost Calculation

To justify electronic health records fees, you need a clear, repeatable method for labor cost justification. Track only the time it takes to create and transmit the copy—not time spent searching, verifying, or handling unrelated administrative tasks.

Step-by-step formula

• Capture copy time in minutes: exporting from the EHR, converting, packaging, and sending.
• Use a reasonable hourly rate for the staff role performing the copying work.
• Labor cost = (minutes ÷ 60) × hourly rate.
• Add actual supplies and postage, if any. Document each line item.

What counts as “copying” labor

• Locating the specific dataset in the EHR and executing the export or print function.
• Compiling records from multiple modules and converting to the requested format (PDF, CCD, or text).
• Transmitting securely (portal upload, encrypted email) or preparing to mail.

What not to include

• Retrieval or search fees, chart review for legal risk, or record storage/system amortization.
• General overhead beyond the staff time actually spent copying and delivering the records.

Worked examples

• EHR export to portal: 6 minutes by HIM technician at $32/hour = $3.20. No supplies or postage. Total $3.20.
• Encrypted email of EHR summary: 10 minutes at $28/hour = $4.67 (rounded to $4.70). No supplies. Total $4.70.
• Paper packet for pickup: 15 minutes at $24/hour = $6.00; paper/toner $1.00. Total $7.00.

Maintain a simple worksheet for each request. This record supports internal audits and shows patients how you arrived at a fair, HITECH-compliant medical records fee.

Flat Fee Option

You may set a permissible flat fee up to $6.50 for electronic copies sent to the individual. This approach minimizes calculations for routine requests and is widely used to standardize electronic delivery pricing.

When the flat fee is appropriate

• Patient requests an electronic copy for themselves.
• Electronic delivery (portal, secure email, or direct message) without physical media.
• Scope is typical (for example, an after-visit summary or a standard EHR export).

When not to use the flat fee

• Requests that are not patient access requests (for example, insurer or attorney requests made directly to you).
• Delivery on physical media plus mailing, where supplies and postage are significant. In these cases use actual or average cost instead.

Flat fee examples

• Standard e-copy via portal: charge $6.50 total (no additional supplies or postage).
• E-copy with minimal labor: you may still use your set flat fee (up to $6.50) or charge the documented actual cost if you prefer.

If your documented actual or average cost is regularly below $6.50, consider lowering your flat fee to reflect efficiencies and strengthen your consumer-friendly posture.

Third-Party Request Fees

Differentiate between third-party record requests initiated by the patient and those initiated by the third party. The HITECH/HIPAA right-of-access fee limits apply when the individual requests their own copy or directs you to send an electronic copy of ePHI from an EHR to a designated third party. Other third-party requests typically follow state medical records law and may allow different fee structures.

Patient-directed vs. third-party–initiated

• Patient-directed (access request): cost-based limits apply. You may use actual cost, an average schedule, or the permissible flat fee for e-copies.
• Third-party–initiated (for example, attorney or insurer requests sent to you): handle under state law or contract. Per-page or statutory fees may apply, subject to state limits and any applicable preemption rules.

Examples

• Patient asks you to send an EHR export to their new specialist: treat as a patient access request; apply cost-based limits or the flat fee for an e-copy.
• Attorney sends a records request with an authorization but not a patient-directed EHR request: follow state fee rules for third-party record requests.

Always document the request type, the legal basis you used (patient access vs. third-party), and your fee method. Consistent categorization is essential to HITECH Act compliance.

State Regulations and Compliance

HIPAA/HITECH sets a federal floor for privacy and access. For patient access requests, follow the federal cost-based standard; if state medical records law is more protective for the patient (for example, lower caps for paper copies), apply the lower amount. For non-access third-party requests, state fee schedules usually govern.

How to reconcile overlapping rules

• Identify the request type first: patient access or third-party–initiated.
• For patient access: apply the federal cost-based rules and your documented methods; use state limits if they are lower for the specific format.
• For third-party–initiated: apply your state’s fee schedule and any contractual terms, keeping patient interests and transparency in view.

Operational checklist

• Maintain a current, state-by-state quick reference for third-party fees.
• Publish a simple patient-facing notice that explains electronic health records fees and delivery options.
• Review your schedule annually and whenever your EHR, staffing, or postage rates change.

Best Practices for Fee Management

Strong processes help you calculate HITECH-compliant medical records fees quickly and consistently. Use standardized tools, provide clear estimates, and default to the most economical delivery method the patient accepts.

Practical steps

• Use a single worksheet or calculator to apply actual, average, or flat-fee methods with the same inputs.
• Default to electronic delivery via portal or secure email to minimize time, supplies, and postage.
• Offer the $6.50 flat fee for routine e-copies; use actual cost when physical media or special handling is needed.
• Log labor minutes by task (export, convert, transmit) to support labor cost justification.
• Give patients a written estimate before fulfilling the request; note any ways to reduce cost (for example, narrower date range).
• Train staff to classify requests accurately and to avoid impermissible retrieval or search charges.
• Audit a sample of fulfilled requests each quarter to confirm calculations, timeliness, and documentation.

Compliance Considerations and Penalties

Right-of-access enforcement remains active. Complaints often involve delays, per-page fees for e-copies, or charges that include retrieval or administrative overhead. Sustained noncompliance can lead to corrective action plans, repayments, and civil monetary penalties.

Risk controls that prevent findings

• Timeframes: track the 30-day fulfillment clock and document any permissible extension.
• Transparency: provide an estimate up front and a line-item receipt afterward.
• Consistency: apply the same cost-based fee calculation across departments and locations.
• Remediation: promptly refund overcharges and update your average-cost schedule when processes improve.

Summary

Calculate HITECH-compliant medical records fees by limiting charges to copying labor, supplies, and postage; choosing among actual, average, or the permissible flat fee; and documenting every step. Classify requests correctly, align with state medical records law where applicable, and favor electronic delivery to keep costs low. These practices protect patients, improve turnaround, and reduce compliance risk.

FAQs

What is the permissible flat fee under the HITECH Act?

The permissible flat fee is a simple option you may use for electronic copies provided to the individual. It must not exceed $6.50 total and replaces itemized labor, supplies, and postage for those e-copies.

How are labor costs calculated for medical records fees?

Track the minutes actually spent copying and delivering the records, multiply by a reasonable hourly rate for the staff performing the work, then add actual supplies and postage. Exclude retrieval, verification, storage, and other administrative overhead.

Does the $6.50 flat fee apply to third-party requests?

The $6.50 option applies to electronic copies provided to the individual, including when the individual directs you to send an electronic EHR copy to a designated third party. It does not apply to requests initiated by a third party that are not patient access requests.

How do state regulations affect HITECH-compliant fees?

For patient access requests, follow the federal cost-based rules and apply any lower state limits where they exist. For third-party–initiated requests, state medical records law typically governs fee amounts and structures.