HIPAA Rights
HIPAA is not only a privacy rule. It is also your legal right of access to your own health information.
You have the right to inspect and receive a copy of your medical and billing records held by providers and health plans.
Providers generally must respond within 30 days, with one possible 30-day extension if they tell you why in writing.
You can ask for records in the format you want when it is readily producible — including electronic copies sent to you or to a person you designate.
Fees must be reasonable and cost-based. You cannot be charged a search or retrieval fee for access to your own record.
You can request an amendment if something is wrong, and you can request an accounting of certain disclosures.
Why it matters
Records are the raw evidence behind every appeal, second opinion, and complaint. If you cannot get them, you cannot advocate effectively.
What to do
- Put every records request in writing and keep a dated copy.
- Ask specifically for what you need: office notes, imaging discs, operative reports, pathology, labs, medication history.
- If a request is ignored or over-charged, file a complaint with the HHS Office for Civil Rights.
Educational purposes only
Phoenix Health Compass does not provide legal advice or medical advice. This content summarizes publicly available government and nonprofit resources and is cited throughout. Always confirm requirements, deadlines, and forms with the official agency.
Last reviewed by the Phoenix Health Compass editorial team.