How to get a copy of your medical records in the U.S.

Updated 2026-10-06 · Reviewed for accuracy by the EKO Labs team. Educational only; not medical advice.

Under the federal HIPAAHIPAA the U.S. law that protects the privacy of your health information. Privacy Rule, you have the right to see and get a copy of most of the health information that doctors, clinics, hospitals, pharmacies and health plans keep about you. Having your own records helps when you change doctors, start a telehealthTelehealth a medical visit by video or phone. consultation, see a specialist or move to another state or country. This guide is general information, not legal or medical advice.

Who must give you your records

The right applies to HIPAA "covered entities": health plans and health care providers that handle billing electronically, which includes most doctors, clinics, hospitals and pharmacies. It covers your "designated record set": for example, your medical and billing records, lab results, prescription and pharmacy records, and the enrollment, payment and claims records a health plan uses to make decisions about you.

What is not included

• Psychotherapy notes that a mental health professional keeps separate from the rest of your record
• Information prepared for a lawsuit or another legal proceeding

In a few limited situations a provider may deny access, for example when a licensed health professional decides that access is reasonably likely to endanger your life or physical safety, or someone else's. Some of these denials can be reviewed by another licensed professional who was not part of the first decision.

How to ask

• Contact the medical records or privacy office of the provider, pharmacy or health plan. Many patient portals also let you view and download records yourself.
• The provider may ask you to make the request in writing, often on a form, and to confirm your identity, as long as it told you this in advance.
• Say exactly what you want (for example, lab results from the last two years, or all pharmacy records) and the format you want: paper, PDF, email or the portal.
• You can ask the provider to send the copy directly to another person you choose, such as your new doctor. This request must be in writing, signed by you, and clearly name the person and where to send it.

The deadline: 30 days

The provider must act on your request no later than 30 days after it receives it. It may take one extension of up to 30 more days only if, within the first 30 days, it tells you in writing the reason for the delay and the date you will get your records. Some state laws require faster access.

Paper or electronic copies

The provider must give you the records in the form and format you ask for if it can readily produce them that way. If your records are kept electronically and you ask for an electronic copy, it must give you an electronic copy, in the format you asked for or in another readable electronic format you agree to.

Fees

HIPAA allows only a reasonable, cost-based fee for a copy. It may include only the labor for copying, supplies (paper, or electronic media such as a USB drive), postage if you asked for the copy to be mailed, and preparing a summary or explanation if you agreed to one. Ask about the fee before the copy is made.

If something in your record is wrong

You also have the right to ask the provider to correct (amend) information in your record. It may ask you to make the request in writing and give a reason. It must act within 60 days, with one possible extension of up to 30 days. If it refuses, it must tell you why in writing, and you can submit a written statement of disagreement that becomes part of your record.

If your request is denied or ignored

A denial must be in writing, in plain language, and explain the reason and how you can complain. You can complain to the provider's privacy officer and to the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). A complaint to OCR must be in writing, on paper or electronically, and is generally due within 180 days of when you knew or should have known about the problem; OCR can extend this for good cause.

Tips if you moved from another country

HIPAA applies to U.S. providers. Keep your own copies of important records from your home country, such as recent lab results, vaccination records and a list of your medicines with their generic names, and ask your U.S. doctor whether a translation would help.

Questions to ask

• Can I get my records through the patient portal?
• Is there a fee for a copy, and how much is it?
• Can I get the copy electronically?
• Can you send my records directly to my new doctor?
• When will I receive them?

At EKO Labs, our team can help you in Portuguese or English by phone to prepare for your consultation, including which records to have ready.

Sources: HIPAA Privacy Rule, 45 CFR 164.524 (access of individuals to protected health information) and 45 CFR 164.526 (amendment of protected health information); 45 CFR 160.306 (complaints to the Secretary); HHS Office for Civil Rights, individuals' right under HIPAA to access their health information. This guide is general information, not legal or medical advice.