Medical Record Copy Fees by State (2025): Updated Per‑Page Rates, Maximum Charges, and HIPAA Rules

HIPAA Privacy Rule on Medical Record Fees

HIPAA gives you a right of access to your medical records within set timeframes and at a cost that reflects only reasonable, cost-based fees. This right applies when you, or your personal representative, ask the provider or health plan directly for your records.

What you can be charged

• Reasonable Cost-Based Fees for labor to copy and transmit the record (not to search for it).
• Supplies used to fulfill the request: paper, CD, USB, or other media.
• Postage Costs when you ask for mail delivery.
• Preparation of a summary or explanation only if you specifically agree to receive and pay for it.

What you cannot be charged

• Search and Retrieval Charges, intake, verification, or other administrative overhead tied to locating records.
• Per-Page Copy Rates for Electronic Medical Records Fees when the information is maintained electronically and you request an electronic copy.
• Any fees that exceed the provider’s actual, supportable cost to copy and send the record.

Electronic copies and flat-fee option

If your records are kept in an EHR, you can request an electronic copy through a secure portal, encrypted email, or other agreed method. For patient requests, providers may calculate actual or average costs, or use a compliant flat fee for e-copies. Per-page pricing is not permitted for ePHI under HIPAA.

Timing and format

Providers must act on your request promptly, generally within 30 days, with one permissible 30‑day extension if they explain the delay. You may choose the format and delivery method if it is readily producible; otherwise, agree on an alternative that balances access, security, and cost.

State Laws Versus HIPAA on Medical Record Fees

HIPAA sets the national floor. State Compliance Regulations may cap per-page copy rates, allow Certification Fees, or define Maximum Charges. When you request your own records, HIPAA’s cost-based limits control; any state rules that would allow higher charges or Search and Retrieval Charges cannot override HIPAA for patient access.

When state fee schedules matter

• Paper copies: Many states publish Per-Page Copy Rates and specific Certification Fees for affidavits or notarized copies.
• Third-party requests: Subpoenas, insurers, or attorneys may be billed under state schedules where HIPAA’s patient-access pricing does not apply.
• Annual adjustments: Some states update caps yearly; others set fixed amounts until changed by statute or regulation.

How to apply the rules in practice

1. Identify the requester. If you or your personal representative is asking, use HIPAA’s cost-based framework. For other requesters, check the relevant state schedule.
2. Choose format first. Electronic copies from an EHR should be priced under HIPAA’s cost-based approach, not per page.
3. Limit scope. Narrow date ranges, exclude imaging you do not need, and decline certification unless required to reduce cost.
4. Request an estimate. Ask for a written, itemized estimate showing labor, supplies, Certification Fees, and Postage Costs before you approve fulfillment.

Ohio Medical Record Copy Fees 2025

Ohio law sets defined parameters for paper copies and permits specific ancillary charges in certain contexts. In parallel, HIPAA governs patient-initiated requests, requiring Reasonable Cost-Based Fees and prohibiting Search and Retrieval Charges.

What typically appears on Ohio invoices

• Per-Page Copy Rates for paper records up to the state’s maximums.
• Certification Fees for affidavits when you specifically request a certified copy.
• Postage Costs if mailed, or media costs for CDs/USBs when requested.

HIPAA overlay for 2025

For your own request, per-page fees are not appropriate for e-copies maintained in an EHR, and retrieval or “handling” fees are not allowed. Providers should either calculate actual or average labor plus supplies and Postage Costs, or apply a compliant flat fee for e-copies.

Practical steps

• Ask for portal download or secure electronic delivery to avoid per-page paper charges.
• Decline certification unless a court or agency requires it.
• Request an itemized estimate reflecting labor for copying only, not for locating records.

Pennsylvania Medical Record Copy Fees 2026

Pennsylvania publishes an annually adjusted schedule that caps Per-Page Copy Rates and certain ancillary charges for paper records. These adjustments typically take effect each calendar year and are widely used for legal and third‑party requests.

How the 2026 framework works

• Per-page tiers for paper copies with defined Maximum Charges by page range.
• Certification Fees allowed when you request an affidavit of records.
• Postage Costs billed at actual mailing expense.

HIPAA interaction in Pennsylvania

For a patient access request, HIPAA’s Reasonable Cost-Based Fees govern. That means no Search and Retrieval Charges and no per-page pricing for electronic copies from an EHR. If you direct your ePHI to a third party under HIPAA’s right of access, the same patient-access pricing applies.

Tips for 2026 requests

• Specify electronic format first; reserve paper only if necessary.
• Limit your date range to reduce any page-based elements for paper copies.
• Ask for an itemized estimate that distinguishes labor, supplies, Certification Fees, and Postage Costs.

Missouri Medical Record Copy Fees 2026

Missouri’s schedule commonly includes a base processing component and Per-Page Copy Rates for paper records, with periodic adjustments. For patient‑initiated requests under HIPAA, retrieval or processing components are not chargeable.

Common elements in Missouri

• State‑capped Per-Page Copy Rates for paper.
• Potential processing or retrieval line items for third‑party or subpoena requests under state rules.
• Certification Fees on request and Postage Costs when mailed.

Applying HIPAA in 2026

When you request your own records, providers should price only the labor to copy and transmit, plus supplies and postage. Electronic Medical Records Fees must reflect cost to produce the e-copy; per-page paper rates and retrieval fees do not apply to ePHI delivered electronically.

Request strategy

• Ask for secure electronic delivery or portal export from the EHR.
• Decline certification unless legally required.
• Confirm that any “processing” or “retrieval” lines are removed from patient-access invoices.

Georgia Medical Record Copy Fees 2025

Georgia law prescribes tiered Per-Page Copy Rates for paper records and may allow a defined search/retrieval component and Certification Fees in specific circumstances. For patient access to ePHI, HIPAA’s cost-based limits supersede per-page and retrieval pricing.

Typical Georgia billing lines

• Per-Page Copy Rates for paper with tiered Maximum Charges.
• Certification Fees for notarized or affidavit copies when requested.
• Postage Costs at actual rates; media costs for CDs or USBs if chosen.

HIPAA alignment for 2025

If you request an electronic copy from an EHR, your fee should reflect actual or average labor for copying plus supplies (if any) and postage. Providers should not apply per-page or Search and Retrieval Charges to e-copies for patient access.

Georgia request tips

• Choose electronic delivery to avoid paper tiers.
• Specify only the records you need to keep labor time—and cost—low.
• Ask for a clear, written estimate before fulfillment.

Other State Medical Record Copy Fees

Across the U.S., states use a mix of fixed and annually indexed caps for paper copies, often with Certification Fees and Postage Costs added as pass‑throughs. A minority of states expressly prohibit Search and Retrieval Charges even for third‑party requests; others allow them outside of patient access.

Universal principles to control costs

• Start with HIPAA’s Reasonable Cost-Based Fees for patient requests; avoid per-page charges for ePHI and refuse retrieval fees.
• Use the patient portal or request an encrypted email to eliminate paper and postage.
• Limit scope by date, provider, document type, and exclude images unless necessary.
• Request an itemized estimate and question any line items not tied to copying labor, supplies, or postage.

Simple cost calculation approach

1. Determine request type: patient/personal representative vs. third party.
2. Select format: electronic copy if records are in an EHR; paper only when unavoidable.
3. Apply the correct framework: HIPAA cost-based pricing for patient access; state schedule for qualifying third‑party requests where applicable.
4. Add only allowable extras: Certification Fees you requested and Postage Costs if mailed.

FAQs.

What fees are permitted under HIPAA for medical record copies?

Only Reasonable Cost-Based Fees are permitted: labor to copy and transmit the records, supplies for the format you choose (paper, CD, USB), actual Postage Costs if mailed, and an optional summary or explanation you expressly agree to receive and pay for. Providers may not charge to search for, verify, or retrieve your records.

How do state laws impact medical record copy fees?

State laws set maximum Per-Page Copy Rates, Certification Fees, and other limits—especially for paper and third‑party requests. But when you request your own records, HIPAA’s patient‑access rules control and preempt conflicting state rules that would allow higher or impermissible fees.

Are there limits on search and retrieval fees?

Yes. Under HIPAA, Search and Retrieval Charges are not allowed for patient access requests. Some states permit retrieval fees for third‑party or subpoena requests, but those charges cannot be applied when you, or your personal representative, are exercising your HIPAA right of access.

Can patients request electronic copies at the same rates?

Yes. If your provider maintains your information electronically, you can request an e-copy. For patient access, the fee must reflect actual or average copying labor plus any media or postage you select; per-page pricing is not permitted for e-copies, and providers may use a compliant flat-fee option for electronic records.

What are the penalties for non-compliance with fee regulations?

Providers that overcharge or delay access risk HIPAA enforcement, including corrective action plans and monetary settlements, and may face additional state-level penalties. Repeated or willful violations can trigger higher sanctions and ongoing monitoring, so most organizations design policies to ensure fees remain cost-based, transparent, and promptly disclosed.