Medical Records Request Letter

Why a plain phone call usually does not work

Under HIPAA, patients have a right to their own medical records, but providers are not required to hand them over on a verbal request. Most require a written authorization that identifies the patient, the records requested, and where they should be sent. Calling the front desk and asking someone to "send over the file" is the most common reason a records request stalls for weeks.

A written authorization also creates a paper trail. If a provider is slow or a request goes missing, having a dated, signed copy makes it possible to follow up with specifics instead of starting over.

What the authorization has to identify

• The patient — full legal name, date of birth, and any identifying number the provider uses (patient or account number).
• The specific records — a HIPAA authorization should name what is being requested: office visit notes, imaging, lab results, billing records, or the full chart. A vague request is more likely to come back incomplete.
• The date range — from the date of the accident forward, or a specific window if you only need certain visits.
• Where the records should go — mailing address, fax, or a secure patient portal, plus who is authorized to receive them if it is not the patient directly.
• A signature and date — most providers will not process an authorization that is not signed and dated by the patient (or their legal representative).

Providers generally have a response window

Under HIPAA, providers are generally required to respond to a patient's records request within 30 days, with one 30-day extension allowed if the provider gives written notice of the delay and the reason for it. That window is a ceiling, not a guarantee of speed — some offices process requests in days, others take the full window plus the extension.

State law can shorten that window for specific providers, and how a request is delivered (fax, portal, mail) can also affect turnaround. If a request goes unanswered past the deadline, a documented follow-up referencing the original authorization date is usually more effective than starting a new request.

Why a partial record is a problem later

An incomplete chart creates gaps that are hard to explain after the fact. If a records request only captures the emergency room visit and misses the follow-up physical therapy notes, it can look like treatment stopped — even if it did not. Insurers reviewing a claim generally work from what is in the file, not what actually happened.

Requesting the complete chart, including nursing notes, imaging reports, and billing records, up front tends to avoid a second request later, when the provider's office may be slower to respond to a follow-up.