How to Request Your Records

The whole process comes down to seven steps. None of them are complicated. Most people who get stuck get stuck because nobody told them what to expect at each step. By the end of this chapter, you'll know.

Step 01Make a list of everyone who has ever treated you

This sounds tedious. It's the most important thing you'll do.

Most people underestimate how many different organizations hold pieces of their medical history. Your primary care doctor. Every specialist you've ever seen. Every hospital you've ever been admitted to. Every emergency room you've ever visited. Every urgent care clinic. Every imaging center where you've had an X-ray or MRI. Every lab that has ever run blood work for you. Every pharmacy that has ever filled a prescription. Every insurance company that has ever paid a claim on your behalf.

For a healthy adult under 40, that's usually 5 to 15 organizations. For someone older, with chronic conditions or who has moved across state lines, it can easily be 50 or more.

Write them all down. You don't need exact addresses or phone numbers yet. Just names and approximate years. A list that says "Dr. Mendez, family doctor, Phoenix, 2008 to 2014" is enough to start.

This is your master list. You'll come back to it.

Step 02Figure out who to ask first

Don't try to ask everyone at once. Start with the organizations that hold the most useful information.

In order, these are usually:

1. Your current primary care doctor. They hold the longest continuous record of you. If you have a recent relationship with a primary care office, that's where to start.
2. Your most recent hospitalization or ER visit. Hospitals generate enormous amounts of data per visit — many entries — and they're required to release it to you under the same federal law.
3. Any specialist you've seen in the past five years. Specialists' records often contain information your primary care doctor never received.
4. Your pharmacy. Pharmacy records are usually the most complete source of medication history, more accurate than what's in any doctor's office.
5. Your insurance company. Insurance claims data covers everywhere you've been and everything that was billed, which is sometimes the only way to reconstruct a long history.

You can skip around. The point is not to do everything at once. Pick three organizations and start there.

Step 03Try the patient portal first

The U.S. Department of Health and Human Services explicitly recommends starting with the patient portal if your provider has one. There's a reason. Portal access is fast, free, and protected by federal law in a stronger way than any other channel.

Most providers in the U.S. now offer patient portals — typically branded as MyChart, FollowMyHealth, Patient Fusion, or a name specific to the hospital system. If you've ever had a "click here to view your test results" email, that's a portal.

Log in. Find the section called "Health Records," "My Chart," "Documents," or something similar. Look for buttons labeled "Download," "View," "Transmit," or "Export."

Under the 21st Century Cures Act, providers are required to give you immediate access through the portal to nearly all of your test results, clinical notes, imaging reports, and other electronic information — without a request, without a form, without a fee. HHS guidance is explicit: when records are delivered through the View, Download, and Transmit function of a certified electronic health record, providers cannot charge anything at all.

If everything you need is in the portal, download it as PDFs and you're done with that provider. If only some of it is there — and this is common — move to Step 4.

Step 04If the portal isn't enough, ask in writing

When the portal doesn't have what you need, you escalate to a written request. This is the formal channel under HIPAA's Right of Access.

You have two ways to do this:

Use the provider's official request form if they have one. Most hospitals and large practices have a form called "Request for Access," "Authorization for Release of Information," or similar. They will usually send it to you by email or post it on their website. It's typically one or two pages, and they have to provide it on request.

Send your own written request if they don't have a form, or if their form is missing things you need. Federal law does not require you to use their form. A written letter that contains your identifying information, the records you're requesting, the format you want them in, and your signature is legally sufficient. (Chapter 4 contains the templates for this.)

Either way, the written request goes to the Health Information Management (HIM) Department at a hospital, or to the medical records coordinator at a smaller practice. If you don't know who that is, call the main line and ask, "Who handles patient record requests?" They will tell you.

Submit your request in a way that creates a paper trail. Email is fine. Certified mail with return receipt is better for anything important. Hand-delivery in person, with a stamped copy returned to you, is best of all — it starts the 30-day clock with proof of the start date.

Step 05What to ask for, specifically

This is where most people accidentally undersell themselves.

If you ask for "my records," you may get a summary. If you ask for "all my records, complete and unabridged," you'll get more. The HHS Office for Civil Rights has made clear that you have the right to the complete record set, not a curated summary.

Ask for these by name:

• Clinical notes — progress notes, consultation notes, admission notes, discharge summaries, operative reports, after-visit summaries.
• Laboratory and pathology results — every blood test, every culture, every biopsy, including the actual values, not just the doctor's interpretation.
• Imaging reports AND the images themselves — the radiology report is the doctor's written interpretation; the images are the actual MRI, CT scan, X-ray, or ultrasound files, stored in a format called DICOM. You are entitled to both. Most providers will only give you the report unless you ask for the images. Ask explicitly: "I am requesting the imaging studies in DICOM format, including the actual image files, not just the radiology report."
• Medication records — every prescription written, every refill, every dose change.
• Billing and claims records — these often contain the cleanest, most complete history of what services you received and when.
• All electronic health information (EHI) — this is the umbrella term used in the Cures Act for everything maintained electronically. Asking for "all EHI" closes the loophole some providers try to use when they release only certain categories.

Step 06Get the format right

You have the right to receive your records in the format you request, if the provider is capable of producing it. For nearly all modern providers, this means electronic.

Always ask for electronic. PDF is fine. Direct upload to a portal is better. DICOM for imaging is essential.

If a provider insists on paper, push back. Federal law is on your side: if the records are stored electronically, you cannot be required to drive across town to pick up a stack of paper. The exception is the rare provider whose records are genuinely on paper only — usually a very small practice or an older, closed facility. In that case, paper is what you'll get.

A note on CDs: many hospitals still deliver imaging files on physical CDs. Most modern laptops don't have CD drives. Most specialists' offices won't accept them. If you're given a CD, you have two options: ask the provider to send the files electronically instead (federal law allows this), or use a free online DICOM viewer or cloud uploader to convert the CD to digital files. We cover specific tools in Chapter 7.

Step 07Track the clock

Once your written request is received, the federal 30-day clock starts.

Write down the date you submitted the request. Mark 30 days from that date on a calendar. The provider has until that day to give you the records or to provide a written explanation of why they can't (and the reasons they can use are very limited).

If your state has a stronger law — like California's 15-day rule, or New York's 10-day rule — the shorter deadline applies.

If the deadline passes and you haven't received your records, you don't have to wait any longer. The next chapter is the templates chapter. The chapter after that is what to do when they push back, which includes the federal complaint process. Both work. Both have been used to win settlements as recently as last month.

A bare-minimum starter letter

If you've read this far and want to do something today, this is the shortest possible written request that meets the federal requirements:

That's it. Six sentences. Sign it, attach a photocopy of your ID, send it. The provider is legally required to respond within 30 days.

The next chapter has the longer, more detailed templates — for hospitals, insurers, pharmacies, and special situations like requesting records for a family member or for a closed practice. Use whichever you need.

You don't have to know everything. You just have to start.