How to Get Your Immunization Records: A Step-by-Step Guide

Where is the fastest place to look first?

Every U.S. state maintains an Immunization Information System (IIS) — a confidential, population-based database that collects vaccination records from clinics, pharmacies, schools, and health departments 3Ref 3Centers for Disease Control and Prevention (2024).About Immunization Information Systems.IIS are confidential, population-based computerized databases that record all immunization doses from participating providers; they consolidate vaccination information from multiple sources and many states allow individual patient access through consumer portals. Many states allow individuals to request their own records directly online or by phone 1Ref 1Centers for Disease Control and Prevention (2024).Contacts for IIS Immunization Records.CDC provides state-by-state contact information for all 50 states and territories so patients can request their own immunization records from their state's IIS by phone, website, or email; CDC itself does not hold individual vaccination records. Search for "[your state] immunization registry patient access" or go to your state health department's website. The CDC also provides direct state-by-state contact details at cdc.gov/iis/contacts-locate-records. This is often the fastest route to a consolidated history, particularly for vaccines received at multiple locations over many years.

How complete that history is depends a great deal on your age. In the CDC's 2018 IIS participation report, 95% of children aged under 6 participated in an IIS, alongside 80% of adolescents aged 11-17 and 56% of adults aged 19 and older (national coverage, excluding territories) 4Ref 4Centers for Disease Control and Prevention, Immunization Information Systems Annual Report (IISAR) (2018).2018 IISAR Data Participation Rates.Percentage of children aged <6 years participating in an immunization information system (IIS) — National coverage: 95% (excluding territories). Percentage of adolescents aged 11-17 years participating in an immunization information system (IIS) — National coverage: 80% (excluding territories). Percentage of adults aged 19+ years participating in an immunization information system (IIS) — National coverage: 56% (excluding territories).. Participating is not the same as every dose being captured, but the pattern holds: if your childhood shots were given in the U.S. and in one state, the registry is a good bet; if you are chasing adult boosters, travel vaccines, or shots given at work, treat the registry as one source among several rather than the whole answer.

How do I get records from my patient portal or past provider?

If you have received care at a clinic or health system in the past decade, your vaccination history may be in your electronic health record. Log in to your patient portal (MyChart and similar platforms are common) and look for a Health Summary, Immunizations, or Preventive Care section.

If the portal lacks complete records — especially for childhood vaccines — contact the clinicians or clinics where they were given. You have the legal right to your medical records under HIPAA 2Ref 2U.S. Department of Health and Human Services, Office for Civil Rights (2023).Individuals' Right under HIPAA to Access their Health Information (45 CFR § 164.524).Under HIPAA, individuals have the legal right to access their medical and health records held by covered healthcare entities; providers may charge only a reasonable cost-based fee and have 30 days to fulfill a records request (one 30-day extension permitted). Practices may charge a small, reasonable cost-based fee and typically have 30 days to fulfill the request, though many respond faster. If a practice has closed, their records may have been transferred to another provider or a medical records company; the state medical board can sometimes help locate them.

Two specifics are worth knowing before you ask. The fee has to be a reasonable, cost-based one rather than an amount the practice sets at will, and the 30-day window can be extended once by a further 30 days 2Ref 2U.S. Department of Health and Human Services, Office for Civil Rights (2023).Individuals' Right under HIPAA to Access their Health Information (45 CFR § 164.524).Under HIPAA, individuals have the legal right to access their medical and health records held by covered healthcare entities; providers may charge only a reasonable cost-based fee and have 30 days to fulfill a records request (one 30-day extension permitted) — so if a school, employer or camp has a deadline, say the deadline out loud when you make the request rather than after the first month has passed.

Which other sources are likely to have your records?

• Schools: Schools often retained vaccination records required for enrollment and may keep them for years.
• Pharmacies: Any vaccines given at a pharmacy are usually on file and can be printed on request. This is where annual flu shots and the shingles vaccine most often live for adults. Pharmacies in most states also submit vaccination records directly to the state IIS 3Ref 3Centers for Disease Control and Prevention (2024).About Immunization Information Systems.IIS are confidential, population-based computerized databases that record all immunization doses from participating providers; they consolidate vaccination information from multiple sources and many states allow individual patient access through consumer portals.
• Employers: If a prior employer required vaccination documentation — for healthcare work, for example — records may still be on file.
• Your own yellow card: The CDC international vaccine booklet is a valid personal record if you have kept one.
• Military records: If you served in the military, vaccination records are held by the Department of Defense and can be accessed through milConnect.

What if my records cannot be found?

If records are truly unavailable, a clinician can order titer tests — blood tests that measure antibodies to specific diseases — to confirm whether you still have protective immunity 1Ref 1Centers for Disease Control and Prevention (2024).Contacts for IIS Immunization Records.CDC provides state-by-state contact information for all 50 states and territories so patients can request their own immunization records from their state's IIS by phone, website, or email; CDC itself does not hold individual vaccination records. This is commonly done for measles, mumps, rubella, hepatitis B, and varicella. If immunity is not confirmed, re-vaccination is safe and straightforward.

A primary care clinician can also review which vaccines you may be due for now based on your current age and health history, separate from what old records show.