Obtaining a Late Relative's Medical Records

Who is allowed to request them

Access to a deceased person's records belongs to their personal representative, the individual with legal authority over the estate. Under most states' probate law, that is the executor named in the will, or, when there is no will, the administrator the court appoints. HIPAA treats that personal representative as standing in the deceased person's shoes, with the same right to the records the patient would have had.

HIPAA gives individuals rights over their protected health information, including the right to obtain a copy of their records 1Ref 1U.S. Department of Health and Human Services, Office for Civil Rights (2024).HIPAA for Individuals.That HIPAA gives individuals rights over their protected health information, including the right to access and obtain a copy of their records, which a personal representative exercises on the deceased individual's behalf., and after death those rights pass to the personal representative rather than vanishing. Being a spouse, adult child, or sibling does not by itself grant access; documented authority over the estate does. This mirrors how a parent acts as the personal representative for a child's records: authority, not relationship alone, is what the provider is required to verify. If no estate has been opened yet, the first step is often the probate process that names someone, which is part of an executor's duties.

Access to a deceased person's records follows legal authority over the estate, not simply being next of kin.

What documents prove your authority

Providers will ask for proof before releasing a deceased patient's records, and having the paperwork ready prevents most delays. The usual set is a certified copy of the death certificate plus the court document naming you: letters testamentary if you are the executor under a will, or letters of administration if the court appointed you. Some providers also accept a small-estate affidavit where state law allows one.

Gather these before you send the request:

• A certified copy of the death certificate.
• The letters testamentary or letters of administration naming you.
• A copy of your own photo identification.
• Any HIPAA authorization or written instruction the deceased signed naming you, if one exists.

Providers verify authority carefully because HIPAA's privacy protections continue after death, so the documentation is not bureaucratic friction; it is what lets them release sensitive records lawfully to the right person. Requirements vary by state and by provider, so it is worth calling the medical records department first to confirm exactly what they need.

How to make the request

Send a written request to the medical records or health information management department of each provider that treated your relative: the hospital, the primary doctor, any specialists. State that you are the personal representative, name the patient and their dates of service, list what you want, and attach your proof of authority. A written request creates a record and speeds the response.

Putting a records request in writing, on the provider's release form or in your own letter, is the reliable route. The same federal access framework that applies to living patients sets the timeline and the fees: a provider generally must act within about 30 days, and any charge must be reasonable and cost-based rather than a flat fee 2Ref 2U.S. Department of Health and Human Services, Office for Civil Rights (2024).Individuals' Right under HIPAA to Access their Health Information.That a covered entity generally must respond to a records request within 30 days and that any fee must be reasonable and cost-based, the access mechanics that apply once a personal representative establishes authority.. Ask for the specific records you need, such as discharge summaries, a particular admission, imaging reports, or the full chart, since a narrower request is often filled faster. If the records are held electronically, they can usually be provided as files rather than paper.

Electronic records and the portal

If your relative used a patient portal, you generally cannot simply log in with their credentials. Access after death runs through the records department and your proof of authority, not the deceased's account. But the electronic nature of modern records often makes fulfillment faster, because the chart can be exported rather than photocopied.

Federal rules require that patients, and by extension their personal representatives, be able to obtain electronic health information at no cost and without special effort, and they prohibit providers from obstructing that access 3Ref 3Office of the National Coordinator for Health Information Technology (ONC) (2020).ONC's Cures Act Final Rule.That the Cures Act Final Rule requires access to electronic health information at no cost and without special effort and prohibits obstructing that access, which applies when a personal representative requests an electronic chart.. In practice, once you have established authority, an electronic chart can be released as digital files, which is quicker and cheaper than a large paper copy. If a provider treats your valid request as an occasion to stall, that runs against the same access protections that apply to living patients. Some older records may still exist only on paper or in an archived system, so ask each provider how far back their electronic records reach.

If a provider stalls or refuses

A provider can lawfully ask you to prove your authority, but it cannot use vague reluctance to keep records from a properly documented personal representative. If a request stalls, first confirm they received your proof of authority and that it names you specifically; missing or mismatched paperwork is the most common snag. If the authority is in order and they still refuse, you have escalation options.

Obstructing access to electronic health information is called information blocking, defined and enforced under federal law with only narrow exceptions 4Ref 4Office of the National Coordinator for Health Information Technology (ONC/ASTP) (2024).Information Blocking.That information blocking is defined under the 21st Century Cures Act (45 CFR Part 171) as a practice likely to interfere with access to electronic health information, subject to narrow exceptions, and is enforced by federal agencies.. When records are wrongly withheld, you can file a complaint with the HHS Office for Civil Rights, which enforces the HIPAA right of access. Before escalating, it often resolves faster to speak directly with the medical records supervisor, since front-desk staff may be unfamiliar with the personal-representative rules. Keeping copies of every request, form, and reply gives you a clear record if you do need to escalate.

Common reasons families need these records

Families request a late relative's records for a handful of practical reasons, and the reason often shapes what you actually need to ask for. Settling the estate, filing a life-insurance or veterans' benefit claim, answering a lingering question about the care, and, very commonly, learning a family medical history that now bears on the survivors' own health are the usual ones.

For estate and benefits claims, a targeted set, such as a discharge summary, the final records, and a bill, is often enough, so you need not request the entire chart. For a hereditary-risk question, the diagnoses and pathology matter most, and sharing them with your own clinician can change your own screening. As you receive documents from several providers, organizing your medical records, sorting them by date and provider into one chronological summary, keeps a scattered paper trail usable, whether for probate, a claim, or your family's future care.