Pennsylvania Imaging CD Access Fees: How State Law Differs from HIPAA

Patients often discover that the price of an imaging CD varies depending on whether the request is handled under federal HIPAA rules or Pennsylvania’s state fee schedule. Understanding how these frameworks interact helps you ask for the format you want, pay only what the law allows, and avoid delays.

This article explains the HIPAA right of access, the Pennsylvania Department of Health fee schedule, how each applies to radiology images and reports, and what counts as a reasonable cost-based fee for protected health information.

HIPAA Privacy Rule on Access Fees

The right to get copies

Under the Health Insurance Portability and Accountability Act, you have a right to access your protected health information maintained by a provider in a designated record set. For imaging, that typically includes radiology reports and, when the provider uses the images to make decisions about you, the underlying DICOM images themselves.

What a provider may charge

HIPAA allows only a reasonable cost-based fee. That fee can include: labor for copying (not searching or retrieving), the cost of supplies such as a CD or USB if used, and postage if you ask for mailing. If you agree in advance to a written summary or explanation, the provider may charge for preparing it.

What a provider may not charge

• No fees for locating, reviewing, or verifying records.
• No per-page pricing for electronic health record access or other electronic copies.
• No “technology,” “archive,” “licensing,” or “portal” surcharges passed to you as the patient.

Format and form

If the records are readily producible in the form and format you request—such as an imaging CD—HIPAA expects the provider to honor that request or offer a reasonably similar alternative. The provider may not force paper if an electronic copy is feasible.

Pennsylvania State Law on Access Fees

General framework

Pennsylvania law permits health care providers to charge up to certain maximums for copying medical records. The Department of Health fee schedule, updated periodically, sets those maximum charges for paper, certification, and certain media. Regulations governing facilities—such as 28 Pa. Code § 563.11—also address how records and imaging services are maintained and made available to patients.

When the state schedule is used

Providers commonly apply the state schedule to requests connected to litigation, insurer requests, or other third-party record productions. However, when you (or your personal representative) request copies for yourself under HIPAA’s right of access, HIPAA’s limits apply and override conflicting state maximums.

This article is for general information only and not legal advice; specific obligations can vary by request type and context.

Pennsylvania Fee Schedule for Medical Records

Typical components under the schedule

• Per-page copy charges for paper records.
• A base preparation or retrieval fee in certain contexts.
• Optional fees for certification or notarization if you request them.
• Postage or shipping when you ask for mailed delivery.

How HIPAA changes the calculus for patients

When your request qualifies as a HIPAA individual access request, providers must ignore state-authorized retrieval or administrative fees that HIPAA prohibits. For electronic copies, per-page rates are not permitted; only a reasonable cost-based fee tied to actual copying labor and supplies may be charged.

Practical implications

If you are seeking your own records, clearly state that your request is under HIPAA’s right of access and specify the electronic format you prefer. Doing so helps ensure that the Department of Health fee schedule is not applied in place of HIPAA’s narrower limits.

Pennsylvania Fee Schedule for Imaging Records

State maximums for images versus text

The state schedule distinguishes between textual records (such as radiology reports) and imaging materials. Historically, medical imaging reproduction charges for films, CDs, or DVDs may be listed separately from paper pages and can include media and duplication costs.

Where HIPAA draws the line

For a patient request under HIPAA, a provider may charge for the physical media (for example, a CD), plus the reasonable labor to copy the images and reports. Charging per-image fees, retrieval charges, or technology surcharges to the patient is not allowed when fulfilling an electronic copy request.

Reports and images often travel together

Radiology reports are part of your designated record set and are typically provided with the images. If the provider can supply a secure download or portal access to both, HIPAA expects that option to be offered without per-page pricing.

Interaction Between HIPAA and State Law

The preemption rule

HIPAA preempts state rules that conflict with federal requirements unless the state rule is more protective of the individual. For access fees, that means the stricter standard—usually HIPAA’s reasonable cost-based fee—controls for patient requests, even if the Department of Health fee schedule would otherwise allow higher amounts.

How to analyze a request

• Who is requesting? Patient/personal representative versus an attorney, insurer, or subpoenaing party.
• What format is requested? Paper, electronic health record access, or imaging CD/secure download.
• Where is it going? To you, or to a third party at your direction.

When the request is your HIPAA access request, apply HIPAA’s limits. For third-party productions outside HIPAA’s access pathway, providers often rely on the state schedule.

Applicability to Imaging CDs

Images are PHI

CT, MRI, ultrasound, and x-ray images—along with their radiology reports—are protected health information. If your provider uses the images to make decisions about you, the images are part of your designated record set and fall under HIPAA’s access rules.

Reasonable fees for CDs

For a HIPAA request, the provider may charge for the blank CD (or other agreed media) and the reasonable labor to copy and verify the data. They may not add retrieval, archive, or “image viewer” fees to your patient request.

Alternatives to CDs

If a secure download or portal delivery is readily available, you can request that option to minimize costs. HIPAA discourages per-image or per-page pricing for electronic formats and expects providers to offer a practicable electronic method.

Electronic Access and Fee Limitations

Digital delivery principles

• No per-page fees for electronic copies, including portal downloads and secure email.
• Only copying labor and supplies may be included in a reasonable cost-based fee.
• Vendors acting for providers must follow the same limits; outsourcing does not create extra billable items.

Flat-fee options

Federal guidance permits the use of a reasonable flat fee for electronic copies in lieu of calculating exact labor each time, provided the flat fee reflects actual average costs and remains tied to the permitted cost elements.

Tips for a smooth request

• State that your request is a HIPAA individual right-of-access request for an electronic copy.
• Specify “radiology images (DICOM) and radiology reports on CD or secure download.”
• Ask that any charge be limited to a reasonable cost-based fee covering media and copying labor only.

Conclusion

Pennsylvania’s Department of Health fee schedule sets ceilings for many third‑party record productions, but your HIPAA right of access controls the price when you request your own imaging. For imaging CDs and other electronic formats, the lawful charge is limited to copying labor, necessary media, and postage—nothing more.

FAQs

How does Pennsylvania law regulate fees for imaging CDs?

The Commonwealth relies on a Department of Health fee schedule that lists maximum charges for medical records, including separate provisions for imaging materials. Providers often use that schedule for third‑party productions, but when you make a HIPAA access request for your own images, HIPAA’s cost limits govern even if the schedule would otherwise allow more.

What fees can covered entities charge under HIPAA?

Only a reasonable cost-based fee: copying labor, the cost of supplies like a CD or USB if used, and postage on request. HIPAA bars charges for searching, retrieving, maintaining systems, technology licenses, or per‑page pricing for electronic health record access or other electronic copies.

When does state law override HIPAA fees?

State law does not override HIPAA for a patient’s own access request; HIPAA preempts conflicting state rules unless the state rule is more protective of the individual. The state fee schedule typically applies to non‑HIPAA contexts such as subpoena or insurer requests.

Are imaging CDs treated differently from other medical records in Pennsylvania?

Yes and no. The state schedule may list distinct maximums for imaging media, reflecting the cost of duplication. But for a HIPAA patient request, imaging CDs are treated like any other electronic copy of protected health information: only the reasonable cost-based fee for copying labor, necessary media, and postage may be charged.