HIPAA and your medical records
What HIPAA actually protects, what you can request, and how appeals work when a request is denied.
Why it matters
Requesting your records is one of the most practical rights patients have, and it is frequently misunderstood on both sides of the counter.
Key facts
- You generally have the right to inspect and get a copy of your medical records.
- Providers may charge a reasonable, cost-based fee for copies.
- Requests are generally answered within 30 days, with one possible 30-day extension.
What HIPAA covers
HIPAA sets national standards for protecting health information held by covered entities such as most providers, health plans, and their business associates. It does not cover every app or website that stores health data.
Getting your records
Submit a written request to the provider's medical records or health information management department. Ask for the format you want, such as an electronic copy through the patient portal.
If your request is denied
Ask for the denial in writing and the reason. You may request a review, and you may file a complaint with the HHS Office for Civil Rights.
Questions to ask your care team
- How do I submit a records request here?
- What is the fee, and what formats are available?
- How do I correct an error in my record?
Phoenix Insights™
Common misconceptions
- "HIPAA means no one can ever discuss my care." It governs how protected health information is used and shared, with defined exceptions such as treatment and payment.
Things to know
- Keep a copy of every request you send, with dates.
Ask Phoenix about this
Phoenix Guide searches trusted educational sources first and clearly labels any AI-generated explanation. It never diagnoses or recommends treatment.
Keep going
More in Patient Rights
- Understanding informed consent
Informed consent is a conversation, not a signature. Here is what the conversation is supposed to cover.
Sources & transparency
- Individuals' Right under HIPAA to Access their Health Information(opens in a new tab)
U.S. Department of Health & Human Services
Retrieved by Phoenix Jul 10, 2026
- Last reviewed:
- Jul 15, 2026
- Next review due:
- Jan 15, 2027
- Editorial owner:
- Phoenix Health Compass Editorial Team
- Medical reviewer:
- Not yet clinically reviewed