Start here

Choose a copy request or an amendment request

Use the record holder’s official process and save your request and its response. Ask for a usable copy when you need information; identify the specific entry and proposed correction when you need an amendment.

Understand the situation

What may help answer the question

Start with the records the organization holds

HIPAA access applies to information about you in a designated record set held by or for a covered provider or plan. This can include clinical, billing, and claims records. Some internal quality or investigation files fall outside that set; the underlying patient information may still be accessible.

Supporting guidance: HHS: which records you can request ↗

Ask for a usable copy

Request your preferred paper or electronic format. Under HIPAA, use the requested format when readily producible. For electronically maintained records, an unavailable preferred electronic format leads to an agreed readable electronic alternative. A particular native image format is not guaranteed in every situation.

Supporting guidance: 45 CFR 164.524: access to records ↗

Track the response to an access request

For a HIPAA access request, the record holder generally must act within 30 calendar days of receipt. One extension of up to 30 days is allowed if it gives a written reason and completion date within the initial period. This is an outer limit, not a reason to delay a readily available copy. Ask whether another applicable rule requires faster access.

Supporting guidance: 45 CFR 164.524: access to records ↗

Ask about copy fees before agreeing

HIPAA permits certain reasonable, cost-based copying charges. Search and retrieval fees are not permitted for patient access, and unpaid treatment bills are not a reason to withhold a copy. Ask for an estimate and an explanation of the fee.

Supporting guidance: HHS: your medical records ↗45 CFR 164.524: access to records ↗

Use a separate request for an amendment

An amendment asks to correct inaccurate or incomplete information. Under HIPAA, the record holder generally must act within 60 days of receiving the request. One extension of up to 30 days is allowed with a written reason and completion date provided within the initial 60 days. A request can be denied on specified grounds; a written denial explains how to submit a statement of disagreement. An accepted amendment is linked or added to the record.

Supporting guidance: 45 CFR 164.526: amendment requests ↗

Ask for the reason when something is withheld

A HIPAA access denial must explain its basis, complaint options, and any available review rights. Ask for accessible portions of the record. A missing item in your copy does not by itself establish that it never existed.

Supporting guidance: 45 CFR 164.524: access to records ↗

Terms in ordinary language

Designated record set
Records held by or for a covered entity that fall within HIPAA’s access framework, including many clinical, billing, and decision records. It is not every internal document.
Amendment
A request to correct or complete information, usually through an added or linked entry rather than erasing the original.
Keep the limits in view

These are record-holder response periods, not lawsuit or complaint filing deadlines. HIPAA does not apply to every record holder. Separate psychotherapy notes have a specific exclusion; this does not exclude all mental-health records or ordinary clinical progress notes. Some internal files also fall outside the access rule. This guide focuses on a copy for you, not every third-party transmission request.

Supporting guidance: 45 CFR 164.524: access to records ↗HHS: your medical records ↗

Prepare for a conversation

Questions to put in writing

  1. 1Which existing records and dates should my request cover?
  2. 2Can you provide my preferred format, or what readable alternative is available?
  3. 3What fee is proposed, and what does it cover?
  4. 4If information is withheld, what is the written reason and what review or complaint options apply?
  5. 5How do I request an amendment, and how can I submit a disagreement if it is denied?

Useful information

Records that may help

Ask for relevant existing material. Not every item will exist or be available through the same process.

  • Your access or amendment request
  • Proof of when it was received
  • Fee estimate, extension notice, response, or denial
  • A list of what you received and what you still need

Choose a next step

Practical next steps

  1. 1

    Use the records page’s blank request outline and adapt the categories to the care.

  2. 2

    Keep the files as received and use separate working copies.

  3. 3

    Ask about omissions, unreadable files, fees, or a written denial through the record holder’s process.

  4. 4

    If a HIPAA access concern remains, check HHS complaint instructions; state rules or a different process may also matter.

Use the blank records-request outline →Check HHS privacy and access complaint instructions ↗
Choosing a processStart with the record holder’s access or amendment process. Use the navigator to distinguish a records concern from privacy, billing, or professional conduct.Build a route map →

Source checkpoints

Sources and review scope

The links below support the explanations they accompany. They do not determine which rule or treatment applies to your circumstances. Individual source dates show later checks where only part of a guide was refreshed.

HHS: which records you can request ↗

Explains HIPAA’s designated record set, clinical notes, and the limits on access to separate psychotherapy notes and some internal files.

Source checked: September 30, 2026

HHS: your medical records ↗

Patient guidance on copies, fees, unpaid treatment bills, and corrections. Read its court-decision qualification when considering other kinds of requests.

Source checked: September 30, 2026

Content updated: September 30, 2026. Guide source check: September 30, 2026. Checking sources is not a clinical or legal review of your situation. No clinical or legal reviewer is identified for this page.