Your Right to Your Own Medical Records
If you’re considering a medical second opinion — whether for a concerning diagnosis, a complex treatment plan, or a nagging feeling that something was missed — the very first step is gathering your medical records. Without them, even the best specialist is working blind.
The good news is that federal law is firmly on your side. Under the Health Insurance Portability and Accountability Act (HIPAA), you have a legal right to access your complete medical records, and your healthcare provider is required to hand them over. No exceptions for unpaid bills. No requirement to explain why you want them.
Yet many patients find the process confusing, slow, or unexpectedly expensive. This guide walks you through exactly how to request your medical records, what they should cost, how long the process takes, and what to do if your provider drags their feet.
What HIPAA Says About Your Medical Records
HIPAA’s Right of Access rule is clear: you own access to your health information. Covered entities — which include hospitals, doctor’s offices, clinics, pharmacies, and health insurance companies — must provide your records without unreasonable delay and no later than 30 calendar days from the date they receive your request.
If a provider cannot meet the 30-day deadline, they may extend it by an additional 30 days, but only if they notify you in writing before the original deadline expires, explaining the reason for the delay. Beyond that, there are no further extensions — 60 days is the absolute maximum.
Your provider must supply records in the format you request, if it is readily producible. This means if your records are stored electronically and you ask for an electronic copy, they must provide one. They cannot force you to pick up paper copies in person, and they cannot create unnecessary barriers to access.
What Records to Request for a Second Opinion
When seeking a second opinion, having comprehensive and organized records is essential. Not all medical records are created equal, and knowing exactly what to ask for can save you time and help your new doctor provide the most informed assessment possible.
Essential Records to Request
Diagnostic imaging and reports. This includes X-rays, CT scans, MRIs, ultrasounds, PET scans, and mammograms, along with the radiologist’s written interpretation. Request the actual images (usually available on CD or via secure download) in addition to the written reports. A second-opinion radiologist may interpret the same images differently.
Pathology and biopsy reports. If tissue samples were taken, request the full pathology report including the pathologist’s analysis, staining results, and any molecular or genetic testing performed. For cancer diagnoses, these reports are critical. Some patients also request that their tissue slides or blocks be sent directly to the second-opinion pathologist for independent review.
Laboratory results. Request all blood work, urinalysis, and other lab tests performed during your diagnostic workup. Include reference ranges so the reviewing physician can see what was flagged as abnormal.
Physician notes and clinical summaries. These document your doctor’s reasoning — what they considered, what they ruled out, and why they arrived at a particular diagnosis. Detailed clinical notes can be more revealing than test results alone.
Surgical and operative reports. If you have had any procedures, request the full operative report, including the surgeon’s notes on what was found, what was done, and any complications. For implants, request the device model, brand, and serial number.
Medication lists and treatment history. A complete record of what has been prescribed, dosages, duration, and your response to treatment helps the second-opinion doctor understand what has already been tried.
Discharge summaries. If you have been hospitalized, discharge summaries provide a concise overview of your hospital stay, diagnosis, treatment, and follow-up instructions.
Records You May Not Think to Request
Don’t overlook the less obvious records that can provide valuable context. Allergy documentation, immunization records, family medical history as noted in your chart, and referral letters between providers all contribute to the complete picture. If you have been seen by multiple specialists, request records from each one — communication gaps between providers are a leading cause of misdiagnosis.
Three Ways to Request Your Medical Records
You have several options for obtaining your records, and the best approach depends on your situation and how quickly you need them.
1. Through Your Patient Portal
Most healthcare systems now offer secure online patient portals where you can view, download, and print many of your records immediately. This is by far the fastest option for basic records like visit summaries, lab results, medication lists, allergies, immunization records, and discharge summaries.
However, patient portals typically don’t include everything you need for a second opinion. Detailed operative reports, physician’s narrative notes, pathology slides, and imaging files usually require a separate request.
2. Written Request (Email or Letter)
For a complete records request, submit a formal written request to the medical records department. Your request should include your full legal name and date of birth, contact details (address, phone number, email), the specific dates of service you need records from, the types of records you are requesting, your preferred delivery format (electronic or paper), and where you want the records sent.
Many providers have a standardized medical records release form, often available on their website. Using their form can speed up the process, but you are not required to use it — a clearly written letter or email is legally sufficient.
3. In-Person Request
Visiting your doctor’s office or hospital’s health information department in person can be effective for straightforward requests. Bring a photo ID and be prepared to sign an authorization form. Some facilities can provide basic records on the spot, though imaging files and pathology materials usually take longer.
How Much Should Medical Records Cost?
This is where many patients get an unpleasant surprise. While the law limits what providers can charge, the rules are more nuanced than most people realize.
Under HIPAA, providers may only charge a “reasonable, cost-based” fee that covers the actual labor for copying, supplies used, and postage (if mailed). They are prohibited from charging for search and retrieval of records, identity verification, or per-page fees for electronic copies of records that are stored electronically.
In practice, copying fees typically range from $0.25 to $2.00 per page for paper copies, with rates often decreasing for larger requests. Electronic copies should cost significantly less, and many facilities provide them free of charge.
Several important cost protections to be aware of: your provider cannot deny access to records because of unpaid medical bills. They cannot charge you more than the actual cost of producing the copies. And they cannot require payment upfront before beginning to process your request.
If you receive a bill that seems excessive, you have the right to challenge it. Contact the provider’s billing department first, and if that doesn’t resolve the issue, file a complaint with the HHS Office for Civil Rights.
What to Do When Providers Stall or Refuse
Despite clear legal requirements, some patients encounter resistance when requesting records. Here’s how to handle common obstacles.
The provider says they need more time
They may legitimately need the initial 30 days, or the extended 30 days if they notify you in writing. Beyond 60 days total, they are in violation of HIPAA. Document every communication and follow up in writing.
The provider says you need to come in person
This is not a valid requirement under HIPAA. While some providers prefer in-person requests, you have the right to submit your request in writing and receive records by mail or electronic delivery. If they insist, cite HIPAA’s Right of Access provision (45 CFR 164.524).
The provider says you owe money first
Providers cannot withhold your medical records because of unpaid bills. This is explicitly prohibited under HIPAA. If a provider attempts this, document the refusal and remind them of the regulation.
The provider refuses outright
Legitimate reasons for denial are extremely limited: psychotherapy notes (which have special protections), records that could endanger someone’s safety, information involved in active litigation, and data from ongoing research. For reviewable denials, you have the right to have an independent licensed professional assess whether the denial is justified.
If your request is denied, the provider must give you a written denial notice explaining the specific reason, your right to appeal, and how to file a complaint. If you believe the denial is unjustified, file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights within 180 days of the violation.
Requesting Records from Multiple Providers
Most patients don’t receive all their care from a single provider, which means a complete medical picture may require records from several sources. Here’s a systematic approach:
Make a list of every provider you’ve seen relevant to your condition: primary care doctor, specialists, hospitals, urgent care centers, imaging centers, and laboratories. Don’t forget pharmacies, which maintain their own prescription records.
Submit requests simultaneously. Don’t wait for one set of records before requesting the next. Send all your requests at the same time and track each one with the date submitted, the contact person, and the expected delivery date.
Specify direct delivery when possible. You can authorize your records to be sent directly from your current provider to the second-opinion specialist. This saves you from acting as the middleman and ensures records are received in a format the new doctor’s system can process.
Keep your own copies. Always request a copy for yourself in addition to any copies sent to other providers. Building a personal health record is invaluable not just for second opinions, but for all future medical care.
Special Situations
Records from a Closed Practice
If your former doctor has retired or their practice has closed, your records still exist and you still have the right to access them. Physicians are required to maintain HIPAA-compliant storage for patient records even after closing their practice. Try contacting the office at any forwarding address, reaching out to the medical facility or local health department, or gathering records from the hospitals, labs, and specialists you were referred to. Your insurance company may also be able to help locate where records were transferred.
Records for a Minor
Parents and legal guardians generally have the right to access a minor child’s medical records. However, there are exceptions: in many states, minors who have received treatment for substance abuse, mental health conditions, or reproductive health care may have protections that limit parental access. Check your state’s specific laws regarding minor consent and access.
Records for a Deceased Family Member
The executor of the estate or a person with executor permission can request medical records for a deceased individual. You will need to provide proof of your legal authority, such as letters testamentary or a court appointment document.
Military and VA Records
VA and TRICARE records requests do not have the same specific fulfillment timelines as civilian healthcare providers. Requests may take longer to process, so plan accordingly. You can request VA records through the My HealtheVet portal or by contacting your local VA medical center’s Release of Information office.
Organizing Your Records for a Second Opinion
Once you have your records in hand, how you present them to your second-opinion doctor matters. A disorganized stack of papers creates work for the reviewing physician and increases the chance that something important gets overlooked.
Organize chronologically. Arrange all records by date, oldest to newest, so the reviewing doctor can see the progression of your condition over time.
Create a summary sheet. Prepare a one-page overview that includes your diagnosis, a timeline of symptoms, key test results, treatments tried and their outcomes, your current medications, and the specific questions you want the second-opinion doctor to address.
Flag the important documents. If certain test results, imaging reports, or physician notes are particularly relevant, mark them so the reviewing doctor can find them quickly.
Bring everything. Even records you think might not be relevant could provide context that changes the diagnosis. Let the second-opinion doctor decide what matters.
Pro Tips for a Smooth Records Request
Download records from patient portals regularly, even when you don’t have an immediate need. Having a current copy of your records on hand means you’re never starting from scratch.
Store records securely in both digital and physical formats. A password-protected folder on your computer or a secure cloud storage service ensures your records are available when you need them.
Request records in electronic format whenever possible. Digital records are easier to share, copy, and organize, and they should cost less than paper copies.
Keep a log of every records request you make, including the date, method, contact person, and response. This documentation is essential if you need to file a complaint.
Don’t be afraid to follow up. A polite phone call a week after submitting your request can keep the process moving and catch any issues early.
Frequently Asked Questions
How long does it take to get medical records?
Under HIPAA, healthcare providers must fulfill your records request within 30 calendar days. They may extend this by an additional 30 days (for a maximum of 60 days) if they provide written notice before the original deadline. In practice, many facilities provide records much sooner, sometimes within five business days, especially for electronic records accessed through patient portals. Imaging files and pathology materials may take longer than basic clinical notes and lab results.
Can a doctor refuse to give you your medical records?
A doctor can refuse only in very limited circumstances defined by HIPAA: psychotherapy notes, records that could endanger someone’s safety, information involved in active litigation, and data from ongoing research. They cannot refuse because of unpaid bills or because they disagree with your reasons for wanting the records. Any denial must be provided in writing with a specific reason, your right to appeal, and instructions for filing a complaint with the HHS Office for Civil Rights.
Do I need to give a reason for requesting my medical records?
No. Under HIPAA, you have an unconditional right to access your medical records. You do not need to explain why you want them, and your provider cannot require a reason before processing your request. Whether you want a second opinion, are changing doctors, or simply want to review your own health information, the reason is yours and yours alone.
Can I request my medical records be sent directly to another doctor?
Yes. HIPAA allows you to direct your records to be sent to any person or entity you designate. Simply include the recipient’s name, address, and delivery instructions in your written authorization. This is especially useful for second opinions, as the receiving specialist gets the records in a format their system can process without you needing to manage the transfer.
What if my medical records contain errors?
You have the right to request corrections to your medical records. Contact your provider through their patient portal, by phone, or in writing, and specify the error and the correction you are requesting. The provider has 60 days to act on your request. If they deny the correction, they must explain why in writing, and you have the right to submit a statement of disagreement that will be attached to your records going forward.