Records access and correction basics

Medical records rights should be clear before the next request.

Patients should not have to guess whether they are asking for a copy, a clarification, an amendment, a correction review, or a statement of disagreement. This guide keeps the wording careful, sourced, and process-focused.

What this page can safely explain

This page explains general HIPAA records-access and amendment concepts from federal sources. It does not replace a lawyer, a provider's privacy office, a health plan's official process, or state-specific medical-records rules.

Use official portals, records departments, privacy offices, or health plan processes when possible.
Ask for the specific record, date range, format, and delivery method you need.
Keep correction requests factual and tied to the record item being disputed.
Do not send full records or private identifiers to places that do not need them.

Records access usually means existing records, not new explanations

HHS guidance describes a broad right to access protected health information in designated record sets held by covered health care providers and health plans, with limited exceptions. The same guidance also explains that a covered entity is not required to create new information, analysis, or explanatory material that does not already exist in the designated record set.

Correction and disagreement are separate steps

If a medical or billing record appears incorrect or incomplete, HHS says a patient can request a change or amendment. If the provider or plan disagrees, the patient may have the right to submit a statement of disagreement that is added to the record process.

Records access basics

Know the records issue before sending another message.

This guide keeps records-access and correction language careful, sourced, and practical for patients who need copies, clarification, an amendment request, or a statement of disagreement.

A broad records request can include more than an office note

HIPAA access guidance explains that designated record sets can include medical records, billing records, payment and claims records, enrollment records, case-management records, and other records used to make decisions about a patient.

A records request is different from asking for new analysis

The right of access is about existing protected health information in a designated record set. It does not require an office to create new explanations, summaries, or analysis that does not already exist.

Old or archived records may still matter

Federal guidance says the access right can apply to designated-record-set information maintained by a covered entity regardless of when it was created or whether it is onsite, remote, or archived.

Timing and fee questions to write down

HIPAA access requests generally must be acted on no later than 30 calendar days after receipt.
If more time is allowed under the rule, the covered entity should give a written reason for the delay and the date it expects to complete action.
A provider generally cannot deny a copy of records because the patient has not paid for services received.
A provider may charge reasonable copy or mailing costs, but HHS says it cannot charge a fee for searching for or retrieving records.

Correction and disagreement basics

A patient can request an amendment when medical or billing information appears incorrect or incomplete.
If the provider or plan created the information and agrees it is inaccurate or incomplete, HHS says it must amend it.
If the request is denied, the patient may have a right to submit a written statement of disagreement that becomes part of the record process.
This site should help patients organize the request, not promise a correction or replace legal advice.

Use the right tool

Records advocacy should stay factual, short, and process-focused.

The strongest records message usually identifies the record, the date range, what is missing or disputed, why it matters for care or review, and what written next step is requested. It should not include threats, accusations, full records, ID numbers, or unrelated private details.

Records organizer Request tracker Correction request Disagreement statement

Sources

References used for this page.

These links are provided for transparency. They support general education and advocacy content, not individualized medical or legal advice.

HHS — Individuals' Right under HIPAA to Access their Health InformationFederal guidance on access to PHI in designated record sets, timing, forms of access, and limits.HHS — Your Medical RecordsPatient-facing HHS explanation of medical records access, charges, psychotherapy notes, and corrections.HHS — HIPAA Privacy RuleGeneral Privacy Rule overview, including rights to examine, obtain copies, and request corrections.45 CFR § 164.524 — Access of individuals to protected health informationRegulatory text for the HIPAA access rule.45 CFR § 164.526 — Amendment of protected health informationRegulatory text for amendment requests, denials, statements of disagreement, and related record handling.

Need to write the actual records message?

Use the records organizer if you need a copy, clarification, amendment review, correction request, or written documentation follow-up.

Open records organizer