Medical Records Request Process: Step-by-Step Guide to Getting Your Health Records

Product Pricing
Ready to get started? Book a demo with our team
Talk to an expert

Medical Records Request Process: Step-by-Step Guide to Getting Your Health Records

Kevin Henry

HIPAA

April 10, 2026

6 minutes read
Share this article
Medical Records Request Process: Step-by-Step Guide to Getting Your Health Records

Identify the Custodian of Your Records

Start by locating the Medical Record Custodian for each organization that treated you. This is typically the provider’s Health Information Management department, a centralized Release of Information team, or a contracted records vendor for hospitals, clinics, labs, and imaging centers.

List every facility, practice, and specialty involved in your care, then note the date ranges and record types you need (visit notes, lab results, imaging, billing). Include any closed practices; their records are often stored offsite or maintained by a successor custodian.

What to gather before you request

  • Full legal name, prior names, date of birth, phone, and mailing address.
  • Specific date ranges and types of records to limit the search.
  • Preferred format (electronic PDF, patient portal, paper, CD/USB) and delivery method.
  • Government-issued ID and, if applicable, proof of authority for a proxy request.

Be aware of special categories. Psychotherapy Notes Access is restricted, and certain substance use disorder records may have additional consent requirements. If unsure, ask the custodian to clarify what’s available in the designated record set.

Obtain and Complete the Authorization Form

Most providers supply a HIPAA Authorization form. Even when you request your own records, many organizations require their standard form so staff can verify identity, scope, and release method and remain compliant.

Key elements to include

  • Patient identifiers: full name, DOB, address, phone, and optional medical record number.
  • Recipient: you or a named person/organization, with contact details.
  • Purpose: personal use, continuity of care, insurance, legal, or other permitted purposes.
  • Scope: specific dates, providers, and record types (e.g., progress notes, labs, imaging).
  • Format and delivery: portal, encrypted email, mail, fax, pickup.
  • Expiration date/event, your signature and date; attach photo ID.

If you are a personal representative, include documentation (e.g., durable power of attorney, guardianship, executor papers). Some states require notarization for certain sensitive releases; the custodian will tell you if that applies.

Submit the Authorization Form

Send the form using the custodian’s preferred channel: secure portal upload, encrypted email, fax, mail, or in-person. Many systems route requests through Health Information Management to streamline intake and tracking.

Submission best practices

  • Use the provider’s current form and correct destination address or portal inbox.
  • Be precise about date ranges and record types to reduce back-and-forth.
  • Request confirmation of receipt and a tracking or reference number.
  • If multiple custodians hold records, submit a separate request to each.

Keep copies of everything you submit. If timing is critical, note any upcoming appointment or deadline so the custodian can prioritize when possible.

Await Processing

Record Retrieval Timelines vary by organization and request complexity. Under federal rules, you generally should receive access within a reasonable period, commonly within 30 days, with limited extensions if more time is needed and you are notified in writing.

Complex, multi-year, or archived requests may take longer, as can imaging on disc or large downloads. Follow up if you do not receive an update within a week, and document all contacts and dates in case escalation is needed.

If a request is denied in whole or part, you will receive a written explanation. Some denials are reviewable, and you can often resubmit a narrower scope or choose an alternative format to resolve issues.

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Receive Your Records

Records are commonly delivered via patient portal download, encrypted email, secure link, mailed paper copies, or CD/USB for imaging. You may request a particular form and format; if it is readily producible, the custodian should accommodate it.

Quality-check your disclosure

  • Verify the date range, included providers, and record types match your request.
  • Confirm readability: open PDFs, view images, and check that pages are complete.
  • Ask promptly for any missing items or a different format if files are unusable.

Store your files securely. Consider a clear folder structure for medications, labs, imaging, and visit notes to keep future requests simpler.

Understand Fees and Restrictions

Copying Fees Compliance matters. Custodians may charge a reasonable, cost-based fee for labor, supplies, and postage when providing copies to you. Retrieval or access fees for your own request are typically not permitted; state rules may set additional limits for paper copies.

Restrictions apply to certain materials. Psychotherapy notes are generally excluded from the right of access, and information prepared for legal proceedings may be withheld. Identity verification is required, and special authorization rules may apply to sensitive records.

Ask for an estimate before processing, especially for large paper sets or mailed media. You can often reduce costs by narrowing the date range or choosing electronic delivery.

Request Corrections to Medical Records

If you spot inaccuracies, use the provider’s Record Amendment Procedures. Submit a written request that identifies the specific entry, date, what is incorrect, and the exact correction you propose; attach supporting documentation when available.

What to expect

  • The custodian reviews your request and responds within a defined timeframe, often within 60 days, with a possible brief extension and written notice.
  • If accepted, an amendment is added to the record and relevant parties may be notified.
  • If denied (e.g., the record is already accurate or was created elsewhere), you can submit a statement of disagreement that will accompany the record in future disclosures.

Keep your tone factual and concise. Focus on objective errors such as dates, dosages, allergies, diagnoses, or procedure details to improve the likelihood of approval.

FAQs.

What information is required on a medical records request form?

You’ll typically need your full legal name, prior names, date of birth, contact information, and a copy of your photo ID. Specify the recipient, purpose, exact date ranges, and the record types you want, plus preferred format and delivery method. Include an expiration date for the HIPAA Authorization and sign and date the form; representatives must attach proof of authority.

How long does it take to receive medical records after a request?

Timing depends on scope and format. Many routine requests are fulfilled within a week or two, while larger or archived files can take longer. Regulations set an outer limit for processing with limited extensions when necessary; custodians should notify you if more time is required. Following up with your tracking number helps keep things moving.

Are there fees associated with requesting medical records?

Yes, custodians may charge a reasonable, cost-based fee for making copies and for postage when mailing. Per-page fees may apply to paper copies under some state rules, but charges should reflect actual labor and supplies. Choosing electronic delivery and narrowing the date range usually reduces or eliminates costs.

Can I request corrections to my medical records?

Yes. Submit a written amendment request that pinpoints the entry, explains what is wrong, and provides the correct information with supporting documents. If approved, the provider adds an amendment; if denied, you can add a statement of disagreement that will accompany the record. This process helps keep your chart accurate for future care decisions.

Share this article

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Related Articles