KiteText Kite Here

How to Get Your Medical Records (Yes, All of Them. Yes, It's Your Right)

July 5, 2026 · 6 min read · by the Kite team

The short answer

Under HIPAA, every doctor, hospital, and lab must give you a copy of your medical records within 30 days of a written request (one 30-day extension allowed), in electronic form if you want, for at most a reasonable cost-based fee. They cannot refuse because you owe them money. Ask the office for its records request or medical release form, or send a short written request yourself.

Going through this right now? Text Kite and it walks you through your exact situation, free.

Text Kite

Key takeaways

  • Your records belong to you by federal law. Providers can charge a modest copying fee, and can't use unpaid bills, switching doctors, or "policy" as reasons to refuse.
  • The clock is 30 calendar days from your request, extendable once by 30 more days only with written notice.
  • Ask for electronic copies. Most systems can deliver them through the portal or on a disk or drive, and electronic copies keep fees near zero.
  • Request the useful core: visit notes, test results, imaging reports (and the images themselves), medication list, problem list, and immunizations. "The whole chart" often buries you in duplicates.
  • Stalling past the deadline is a federal violation you can report to the HHS Office for Civil Rights, and mentioning that tends to shake records loose.

In the patient threads we studied, records problems wear two costumes. The dramatic one: "I found out I'd been diagnosed with chronic kidney disease two years ago and nobody told me." The everyday one: re-explaining your entire history from memory at every new specialist because no chart follows you. Both have the same cure: get your own copies, keep them, and stop depending on any one system's filing. Federal law is squarely on your side, and most people have no idea how squarely.

What HIPAA actually guarantees you

The HIPAA right of access requires nearly every provider and health plan to give you, on request:

  • A copy of your records within 30 calendar days, extendable once by 30 days only with a written explanation.
  • Electronic copies if you want them and the records exist electronically (they almost always do now).
  • A fee limited to reasonable, actual copying costs. Viewing your record in person or by portal must be free. Many states cap fees further, and portal downloads cost nothing.
  • No conditions. They cannot withhold records because you owe money, because you're leaving the practice, or until a doctor "signs off."

You can also send records directly to another person or doctor: a signed request naming the recipient does it. And a parent, guardian, or personal representative (for example, under a healthcare power of attorney) can exercise these rights for someone else, which makes this the load-bearing tool for anyone coordinating a parent's or child's care.

What to actually ask for

"Everything" sounds thorough and delivers 400 pages of duplicate fax cover sheets. The high-value core:

  • Visit notes and consult notes (our guide to reading them decodes the shorthand)
  • Lab results and pathology reports
  • Imaging reports, plus the images on disk or link (reports and images are separate requests at many facilities; specify both if a new doctor will re-review)
  • The current medication list, problem list, and allergy list
  • Immunization history, operative reports, and discharge summaries if relevant
The magic words, if you need them in writing: "Under my HIPAA right of access, 45 CFR 164.524, I request an electronic copy of the following records within 30 days." One sentence, and the office knows you know the rules.

How to send the request

  1. Start with the portal. Many systems let you download visit summaries and results instantly, free. HealthIT.gov's guide walks through the common portals.
  2. For the rest, ask the office for their "records request" or "authorization for release" form, or send your own short written request (letter or portal message) naming the records, the date range, and electronic delivery.
  3. Date it and keep a copy. The 30-day clock starts at receipt, and your dated copy is what makes the deadline real.
  4. Moving or switching doctors? Have records sent both to the new doctor AND to you (the full switching-doctors sequence covers the refill bridge and timing). Practices close, systems purge, doctors retire; your copy is the one that survives.

When they stall, and they do stall

Records departments run slow, and "we have 60 days" or "the doctor has to approve it" are common and wrong (the extension requires written notice, and no approval is needed for your own records). The escalation ladder: call and ask for the date your records will be ready, referencing your request date; ask for the privacy officer (every covered provider has one) and mention the 30-day HIPAA deadline; then file a complaint with the HHS Office for Civil Rights, which has fined providers repeatedly under its Right of Access Initiative for exactly this. In practice, the phrase "I'd rather not file an OCR complaint over this" gets records found the same week.

Then actually keep them

The point of the copies is the next appointment: the new specialist who needs the history, the ER visit where allergies matter, the insurance appeal that needs chart notes as evidence. Keep one folder (paper or digital) per person, add each visit's records as they arrive, and keep your own one-page summary on top: conditions, medications, surgeries, allergies, doctors.

How Kite handles this

Or let the folder build itself. Text records, results, and letters to Kite as they arrive and it keeps the whole story in one thread: every medication, diagnosis, and what the doctor said, ready to summarize for any new specialist. Kite also drafts the records-request letter for any provider, with the HIPAA language included. Text Kite to start.

Frequently asked questions

How long does a doctor have to give me my medical records?+

30 calendar days from your request under HIPAA, with one 30-day extension allowed only if they notify you in writing with the reason. State laws are often stricter, and portal-accessible records should be available immediately.

Can a provider refuse my records because I owe them money?+

No. HHS is explicit that unpaid bills for care are not grounds for withholding records. A provider can charge a reasonable copying fee for the records themselves, and that's the extent of it.

How much can I be charged for copies of my records?+

Only a reasonable, cost-based fee covering copying labor, supplies, and postage. Electronic copies typically cost little or nothing, viewing your records must be free, and many states cap fees below what offices ask for. Always request electronic delivery first.

Can I get records sent directly to my new doctor?+

Yes. A signed request directing your records to a named recipient obligates the provider to send them there. Send yourself a copy at the same time so you're never dependent on the transfer happening.

What if the office just ignores my request?+

Escalate in order: call for a ready date citing your request date, ask for the practice's privacy officer and mention the 30-day HIPAA deadline, then file a complaint with the HHS Office for Civil Rights at hhs.gov. OCR has an active enforcement initiative for access violations, and providers know it.

Sources

Keep reading

More in Understanding Your Care

Don't fight the paperwork alone.

Text Kite the bill, letter, or result and it does the reading, the drafting, and the remembering. Free to start, no app, no account.

Text Kite Here

This guide is general information drawn from public sources and real patient experiences. It is educational content, and it is neither medical, legal, nor financial advice. Kite is an AI assistant and never a doctor; it does not diagnose. For emergencies call 911. In a mental health crisis, call or text 988.