How to Put a Records Request in Writing

What goes on a records request form?

A records request is a short, specific instruction, and it works whether you fill out the clinic's own form or write a signed letter of your own. Under your federal right of access you can ask any provider that holds your records for a copy, and you do not have to say why 1Ref 1U.S. Department of Health and Human Services, Office for Civil Rights (2024).Individuals' Right under HIPAA to Access their Health Information.That individuals have a right to obtain a copy of their records, that a covered entity generally must act within 30 days, and that any fee must be reasonable and cost-based.. What makes a request go smoothly is completeness.

Include: - Your full name and date of birth, plus any former name your records might be filed under. - The records you want — specific types and a date range, or "the complete record" if that is what you need. - The format you prefer: paper, a searchable file, or a download from the portal. - Where to send it — to you, or directly to another office. - Your signature and the date, plus a daytime phone number in case they have a question.

A signed letter carries the same weight as the clinic's own form — you are never required to use theirs.

Be specific about the records you want

Vagueness is what slows a request down. "Send my records" forces someone to guess, and guessing produces either a thin summary or a delayed, oversized dump. Name the record types you actually need — visit notes, labs, imaging reports, pathology — and give a date range. If you only need the last two years, say so; if you need everything, say that instead.

Be explicit about format, because format changes what you get and how fast you get it. Ask for electronic copies where you can: federal rules require your electronic health information to be available at no cost and without special effort, which often means a same-day portal download rather than a mailed disc 2Ref 2Office of the National Coordinator for Health Information Technology (ONC) (2020).ONC's Cures Act Final Rule.That patients must be able to access their electronic health information at no cost and without special effort.. For scans, note that imaging on a disc is requested from the radiology department and may travel separately from the rest of the file.

How to prove who you are, and where to send it

Offices verify identity before releasing records, so expect to confirm who you are — a copy of a photo ID, a portal login, or a signature the office can match against your chart. This is a safeguard for you, not an obstacle, and a records office that asks for it is doing its job. Send the request to the health-information management or medical-records department, not to the individual doctor, because that is the team that actually processes copies.

If you are requesting a child's medical records, or those of someone you care for, the office will also ask for proof that you are the personal representative authorized to receive them. Either way, keep proof of what you sent and when: a dated copy of your letter, a portal confirmation, or a certified-mail receipt gives you a clock to point to if the response is slow.

Directing the copy to a new doctor or a third party

You can ask that the copy go straight to someone else — a new physician, a specialist you are consulting, or a family member helping you. A government patient guide frames this as ordinary: gathering the records for a second opinion means bringing or arranging to transfer copies of your records, imaging, and scans to the reviewing doctor 3Ref 3MedlinePlus, U.S. National Library of Medicine (NIH) (2024).Your cancer diagnosis - Do you need a second opinion?.That patients should bring or arrange to transfer copies of their records, imaging, and scans to a reviewing doctor.. Your HIPAA rights include not just getting your records but also asking to amend them and to see an accounting of certain disclosures 4Ref 4U.S. Department of Health and Human Services, Office for Civil Rights (2024).HIPAA for Individuals.That HIPAA gives individuals rights over their health information, including access, requesting corrections, and an accounting of certain disclosures..

When you direct records to a third party, put the destination in writing and be exact about the name and address. If you are asking one office to send to another, that provider-to-provider route is often the least work for you. And if you find something wrong in the file, a separate records amendment request is the right tool — not the copy request, which only gets you the record as it stands.

How long it should take, and what it can cost

The office generally has to act on your request within about a month, and it can charge only a reasonable, cost-based fee for the actual copying 1Ref 1U.S. Department of Health and Human Services, Office for Civil Rights (2024).Individuals' Right under HIPAA to Access their Health Information.That individuals have a right to obtain a copy of their records, that a covered entity generally must act within 30 days, and that any fee must be reasonable and cost-based.. Electronic copies pulled from a portal are frequently free. If a quoted price sounds like a penalty rather than a cost, ask for the records electronically, or ask the office to itemize the charge before you agree to it.

Note that the records retention period — how long a provider must keep your file — is a different question from how fast they must give you a copy of it. Timing and fees are covered in depth elsewhere; the practical point here is to start early and get the request clean the first time. A precise request is cheaper and faster than a vague one, because the office is neither copying more than you asked for nor coming back to you for clarification.

If the request is ignored or refused

Most requests are routine, but if yours stalls you have leverage. A provider or its health-IT vendor generally may not obstruct your access to your electronic health information; that behavior can meet the federal definition of information blocking under the 21st Century Cures Act, which ONC and the HHS Office of Inspector General oversee 5Ref 5Office of the National Coordinator for Health Information Technology (ONC/ASTP) (2024).Information Blocking.That information blocking is defined under the 21st Century Cures Act (45 CFR Part 171) and that ONC and HHS OIG oversee and enforce these rules.. Knowing the term, and that an oversight process exists, changes the tone of a follow-up call.

If a reasonable follow-up does not work, your hipaa right of access is enforceable through a complaint to the HHS Office for Civil Rights. Point to your dated request and the time that has passed. A refusal is not always improper — a few narrow categories of information can be withheld — but "we're busy" and "pay your bill first" are not among the lawful reasons to deny you a copy of your own record.