How to Get Your Medical Records and What to Check When You Receive Them
Your medical records contain the history of what happened to you inside the healthcare system: diagnoses, test results, medications, imaging, procedures, hospitalizations, treatment decisions, and the notes clinicians wrote about your care.
Patients often do not think about obtaining those records until something forces the issue. You may be changing doctors, seeking a second opinion, appealing an insurance denial, applying for disability benefits, reviewing a medical bill, or trying to reconstruct years of complicated care.
At that point, discovering that your records are scattered across several hospitals, physician practices, laboratories, imaging centers, and patient portals can become its own administrative problem.
You have rights to access much of your health information. Knowing what to request, where to request it, and what to do when records are incomplete or inaccurate can make the process considerably easier.
Know What Counts as Your Medical Record
There is no single universal file called “your medical record.” Healthcare organizations maintain different kinds of information in different systems, and the records available from one provider may not include information created somewhere else.
Depending on your care, relevant records may include physician and consultation notes, laboratory results, imaging reports and images, pathology reports, operative reports, hospital discharge summaries, medication lists, immunization records, treatment records, and other clinical documentation.
Under HIPAA, the federal right of access generally extends beyond what patients casually think of as the medical chart. A covered entity’s “designated record set” can include medical and billing records, health-plan enrollment, payment and claims records, case-management records, and other information used to make decisions about you.
If you are investigating a financial or coverage problem, you may therefore need records from the healthcare provider as well as bills, claim information, and Explanations of Benefits from your health plan.
Start With the Patient Portal
For recent care, the patient portal is often the fastest place to begin. Many health systems make visit notes, laboratory results, imaging reports, medication lists, and other information available electronically.
Download what you need rather than assuming it will remain easy to find forever. Patient portals change, health systems merge, clinicians move, and access can become more complicated years later.
The portal may not contain everything in the provider’s designated record set, and older records may be stored elsewhere. If the information you need is missing, request it directly from the healthcare organization.
Request the Records You Actually Need
A request for “everything” may be appropriate in some situations, but it can also produce hundreds or thousands of pages that are difficult to use. Think about why you need the records before deciding what to request.
For a second opinion, the new clinician may need recent consultation notes, imaging, pathology, laboratory results, operative reports, and treatment history. For an insurance appeal, you may need the clinical documentation supporting medical necessity. For a billing dispute, the relevant encounter and billing records may be enough.
Ask the person or organization receiving the records what they require. A targeted request can be faster and easier to review, and may reduce permitted copying costs.
Know Your Federal Access Rights
Under the HIPAA Privacy Rule, individuals generally have a right to inspect or obtain copies of protected health information about themselves in one or more designated record sets maintained by HIPAA-covered healthcare providers and health plans, subject to limited exceptions.
That right is broad. It can include medical and billing records, clinical laboratory results, diagnostic images such as X-rays, clinical case notes, insurance information, and other records used to make decisions about you.
Two important categories are expressly excluded from the HIPAA right of access: psychotherapy notes that are maintained separately from the medical record, and information compiled in reasonable anticipation of or for use in certain legal proceedings. Other limited grounds for denying access also exist.
A provider generally cannot refuse access simply because you want to see what was written, and it cannot withhold records covered by the access right merely because you have an unpaid medical bill.
For current information about federal access rights, the U.S. Department of Health and Human Services Office for Civil Rights is the authoritative source.
How to Make a Records Request
Healthcare organizations usually have a Health Information Management, medical records, or Release of Information department. Many allow requests through a patient portal or online form, while others use paper or electronic request forms.
Be precise enough that the organization can identify both you and the information you want. A typical request may ask for:
· Your full name and identifying information
· The dates or date range of care
· The specific records you want
· The format you want to receive them in
· Where the records should be sent
· Your signature or other information needed to verify and process the request
If you are asking the provider to send records to another clinician, confirm the receiving office’s address, fax number, secure electronic destination, or other required delivery information before submitting the request.
Ask for Electronic Records When Practical
If the records are maintained electronically and an electronic copy works for your purpose, ask for an electronic copy. Under HIPAA, when protected health information is maintained electronically, a covered entity generally must provide it in the electronic form and format you request if it is readily producible that way. If it is not, the entity and patient should agree on another readable electronic format.
Digital records are often easier to store, search, duplicate, and send to another clinician than a thick envelope of paper.
Ask what format will be used. Clinical documents may arrive as PDFs, while imaging may require separate files, downloads, discs, or access through an imaging exchange.
Store the records somewhere you control. A personal computer or secure storage service can become your long-term archive, while a healthcare portal is controlled by the healthcare organization.
Imaging Requires More Than the Radiology Report
If another clinician needs to evaluate an MRI, CT scan, X-ray, ultrasound, PET scan, or other imaging study, the written radiology report may not be enough. The clinician may need the actual images.
HIPAA’s access right includes diagnostic images maintained in a designated record set, not only the written report. Ask the imaging facility or radiology department how to obtain the image files themselves. Large file sizes can affect how the images are delivered.
For a second opinion, ask the receiving medical center exactly what it wants before requesting the transfer. This can prevent delays caused by sending a report when the specialist needed the underlying images.
Pathology May Require Slides or Specimens
Pathology presents a similar practical issue. A pathology report describes the pathologist’s interpretation, but another medical center may sometimes want to review original slides, tissue blocks, or other specimen material.
This is particularly relevant for some cancers, rare diseases, and other diagnoses where pathology interpretation directly affects treatment decisions.
Physical pathology materials are not handled exactly like an ordinary PDF copy of a medical record. Do not attempt to manage specimen transfer without instructions. Ask the second-opinion center what materials it requires and how the pathology departments should coordinate the transfer.
Understand Timing and Fees
Under HIPAA, a covered entity generally must act on a request for access no later than 30 calendar days after receiving it. If it cannot act within that period, it may take one extension of up to an additional 30 calendar days, but it must provide written notice explaining the delay and giving a completion date. State law may require faster access in some circumstances.
Covered entities may charge certain reasonable, cost-based fees for copies. Under the federal rule, permitted fees are generally limited to specified labor for copying, supplies used to create the copy, postage when you request mailing, and, when agreed to in advance, preparation of an explanation or summary.
If you are quoted a substantial fee, ask what the fee covers and whether receiving the records electronically or narrowing the request would reduce the cost. For current federal guidance on access fees and timing, consult the U.S. Department of Health and Human Services Office for Civil Rights.
Check the Records When You Receive Them
Do not assume that receiving a large file means you received what you requested. Check the date range and the types of documents included.
If the records are being used for an important decision, verify that critical items are present. Depending on the situation, that may include:
· Major diagnoses
· Recent specialist notes
· Laboratory and test results
· Imaging reports and images
· Pathology reports
· Operative or procedure reports
· Medication and allergy information
· Hospital discharge summaries
· Treatment history
If something important is missing, contact the records department and identify the missing item specifically. It may exist in a different system or require a separate request.
What to Do If Something Is Wrong
Medical records can contain errors. A medication may be listed incorrectly, a diagnosis may be outdated, a history may be copied forward from an earlier note, or information may simply be wrong.
Under HIPAA, you generally have a right to request an amendment of protected health information about you in a designated record set. The covered entity generally has 60 days to act on the amendment request and may take one additional 30-day extension if it provides the required written notice.
A provider does not have to accept every requested change. Among other reasons, it may deny a request when it determines the existing record is accurate and complete, or in certain circumstances when the information was not created by that organization.
If you identify a meaningful error, follow the healthcare organization’s amendment process. Explain what information you believe is incorrect, what you believe the accurate information should be, and why the correction matters.
If an amendment is denied, the organization must provide a written denial. In qualifying circumstances, you may submit a statement of disagreement that becomes linked to the disputed information, and the covered entity may prepare a rebuttal.
Keep a copy of your amendment request and the organization’s response.
Separate an Error From a Medical Disagreement
Not every statement you dislike in a medical record is an error. A clinician’s assessment, diagnosis, or interpretation may differ from your own understanding without being a factual mistake.
That distinction matters when requesting a correction. An incorrect birth date, medication dose, or statement that you had surgery you never had is different from disagreeing with a clinician’s medical opinion.
If the disagreement concerns diagnosis or treatment rather than a factual record error, a second medical opinion may be more useful than a records amendment. See Should I Get a Second Opinion? How to Get One and When It Matters in the Patient Survival Guide.
If the Provider Does Not Respond
If a healthcare organization does not provide records, repeatedly delays without explanation, or denies access, ask for the reason in writing and determine what rights apply to the request.
Start by escalating through the organization’s medical records or Health Information Management department. A patient relations, privacy, or compliance office may also be able to investigate an unresolved access problem.
For potential violations of federal health-information access rights, the U.S. Department of Health and Human Services Office for Civil Rights provides information about filing complaints. State law may provide additional rights or remedies, and the appropriate state agency depends on the issue and the type of organization involved.
Build Your Own Medical Archive
You do not need to become the curator of every piece of paper the healthcare system has ever produced. But maintaining a basic personal archive becomes increasingly valuable when care involves multiple doctors, hospitals, diagnoses, or years of treatment.
Keep the records that would be difficult to reconstruct or particularly important to future care. That may include major imaging, pathology, operative reports, hospital discharge summaries, important test results, treatment summaries, and an accurate medication history.
Organize files by year, healthcare organization, or medical condition in a way that makes sense to you. The perfect filing system matters less than being able to find the important information when you need it.
Where to Get Help
Begin with the healthcare organization’s medical records, Health Information Management, or Release of Information department. For records held by your health plan, contact the plan directly.
The U.S. Department of Health and Human Services Office for Civil Rights publishes information about HIPAA access and amendment rights and accepts complaints involving certain violations of federal health-information privacy and access rules.
Your state may provide additional medical-record access rights or complaint options. State health departments, professional licensing boards, insurance departments, attorneys general, and other agencies have different responsibilities, so the appropriate agency depends on the problem.
If you need records for another healthcare professional, ask that office exactly what it needs. The receiving clinician can often tell you which documents, images, or pathology materials matter most.
Your Records Are Part of Your Healthcare Toolkit
Medical records are not useful only after something goes wrong. They can help you change doctors, obtain a second opinion, understand your treatment history, challenge an insurance decision, investigate a billing problem, and communicate more effectively across healthcare systems.
Start with the portal. Request what is missing. Get actual imaging or pathology materials when another clinician needs them. Review important records for errors. Keep copies of the information that would be difficult to replace.
The healthcare system may create and maintain the record, but you should not have to navigate your own care without access to the information inside it.
Sources and Additional Help
For current federal information about access to medical records, diagnostic images, permitted fees, response deadlines, and requests to amend records, consult the U.S. Department of Health and Human Services Office for Civil Rights and its HIPAA Right of Access guidance.
Last reviewed: August 2026
This guide provides general educational information and is not medical, legal, financial, or insurance advice. HIPAA applies to covered entities and their business associates, and state law may provide different or additional medical-record rights.
