HOW-TO
How to Actually Request Your Medical Records (Step-by-Step)
You have the legal right. Here's exactly how to use it.
4 min read
·
May 7, 2026
Requesting your complete medical records is simpler than you think, and it's your federal right under HIPAA and the 21st Century Cures Act.
Step 1: Start with your insurance
Log into your health plan's website. Every major insurer now has a patient portal. Look for a section called "Health Records," "My Care," "Claims History," or sometimes just "Documents." What you'll find is a record of every covered service: doctor visits, labs, prescriptions, imaging, everything your plan has paid for in the last few years. Download it. Print it. Save it. This is yours.
Step 2: Repeat with your old insurers
If you've switched insurance (new job, marriage, Medicare eligibility, ACA enrollment), call your old insurer's member services line and request your records under the Patient Access API mandate. They legally have to provide them.
Step 3: Request from past providers
Call the medical records department of any doctor, hospital, or clinic you've used in the past decade. Tell them you want a copy of your medical records. They'll ask for some basic info: name, date of birth, maybe a patient ID. They will send the records electronically, usually within thirty days, at no charge.
If they refuse, that's a federal violation. The 21st Century Cures Act makes information blocking illegal. You can file a complaint with the Office of the National Coordinator for Health IT.
If they try to charge you more than a reasonable copying fee, that's also a violation.
Step 4: Organize what you get
You're going to end up with PDFs, sometimes hundreds of pages. Don't panic. You don't need to memorize any of it. Just create a folder on your computer or in cloud storage and keep everything in one place. Major diagnoses, current medications, recent surgeries, hospitalizations. Keep a one-page summary at the front so you can quickly remind yourself what's in there.
Step 5: Bring it to your next doctor's appointment
Even a one-page document helps. Your doctor sees context they otherwise wouldn't have. It stops the system from repeating work that's already been done. It prevents your doctor from prescribing something that interacts with a medication you're on.
You don't need a perfect record. You need a better picture than the one your doctor will otherwise see.
That's it. You've just exercised a federal right that most Americans don't even know they have.
FREQUENTLY ASKED QUESTIONS
Common questions
How do I request my own medical records?
Submit a written request to the medical records department of any provider who has treated you. Under HIPAA's right of access (45 CFR § 164.524), the provider must give you a copy in the form you request within 30 days. The request can be a short letter or email with your name, date of birth, the records you want, and your preferred delivery method. No special form is required for getting your own records.
How long does a provider have to respond to a records request?
Thirty days from receipt of your written request, with one possible 30-day extension if the provider notifies you in writing of the reason. Many providers respond faster, often within 5 to 10 business days for electronic records sent through a patient portal or by email.
Does my doctor have to give me my records electronically?
Yes, if you ask for them electronically. Under the 21st Century Cures Act and 45 CFR § 164.524(c)(2)(ii), you have the right to receive your records in the form you request, including PDF by email, patient portal download, or USB drive. The provider cannot force you to accept paper or in-person pickup if you asked for electronic delivery.
Can a doctor charge me a large fee for my records?
No. Per the 2020 Ciox Health v. Azar court ruling, providers cannot charge flat retrieval fees for electronic copies sent directly to the patient. They may charge a reasonable, cost-based fee for labor, supplies, and postage. Patient portal downloads and email deliveries are almost always free.
What if I don't know which provider has my records?
Start with your health insurance company. Insurers maintain claims data covering every doctor, hospital, lab, pharmacy, and imaging center where you have received covered services. Their member portal usually shows a chronological list of every provider you have used. From there, request records directly from each provider.
Do I need to use a special form to request my records?
No. A written request (letter, email, fax, or message through the patient portal) is sufficient under HIPAA. Some providers offer their own form for convenience, but they cannot require you to use a specific form as a condition of receiving your records. A simple written request naming you, the records you want, and how you want them delivered is enough.
What if the provider refuses to release my records?
Refusal, excessive fees, or unreasonable delays generally violate federal law. File a complaint with the HHS Office for Civil Rights at hhs.gov/ocr (HIPAA right of access enforcement) and an information blocking complaint with the HHS Office of the National Coordinator at healthit.gov/feedback (Cures Act enforcement). OCR has fined providers from $3,500 to over $4 million for right-of-access violations.
Do I have to give a reason for requesting my own records?
No. Under HIPAA, you have the right to access your records for any reason or no stated reason. The provider cannot require you to explain why you want them. Some providers ask anyway out of habit or for their workflow, but you are not legally required to answer.
