Home / Commons / Session kits / Your health records / Handout: United States

Reach · Handout

Your health records: United States.

A take-home sheet for people at the session. Other countries: United Kingdom · Canada · Australia.

Moraph for Good · Reach

Your health records: United States

Handout · moraph.org/commons/sessions/reach/your-health-records

In many countries you have a right to see your own health records and get a copy. This sheet sets out the steps, with the rules for where you live in the box below.

Asking for your records

  • Check the patient portal first; some records may already be there.
  • Ask the provider how they take requests: a form, email, letter or in person.
  • Say what you want, for which dates, and how you want it: paper, electronic or to view.
  • Keep a copy of your request and note the date.

What to expect

  • You may be asked to prove who you are.
  • Ask about any cost before they start.
  • If they refuse any part, ask for the reason in writing.

Checking and correcting

  • Check medicines, allergies, conditions and contact details.
  • Ask in writing for a correction, with a copy of the page.
  • If they disagree, ask for your own statement to be added.

Keeping records safe

  • Store copies somewhere private and think before sharing them.
  • Use a strong, unique password for any online account with your records.
  • Sign out fully on a shared or public computer.

In the United States

  • Your right to your records. A federal law, the HIPAA Privacy Rule, gives you the right to see and get a copy of your health record. Health plans and most providers, including doctors’ offices, clinics, hospitals, pharmacies, labs and nursing homes, must follow it, and you can ask for paper, electronic or other media copies.
  • Cost. Getting records electronically, such as through a patient portal, will likely be free. A provider may charge a reasonable fee covering only the cost of making or mailing copies. You are entitled to your record even if you haven’t paid your medical bills.
  • Timing. Under the HIPAA Privacy Rule a provider can take up to 30 days to provide your record, and up to 30 more days if they give you a reason and a new date. Some state laws set shorter timelines.
  • Corrections. Ask your provider how to correct your record; they have 60 days to respond unless they ask for more time. If they refuse, you can send a statement of disagreement to be attached to your record.
  • Complaints. If you think a provider wrongly refused your request, you can file a complaint with the US Department of Health and Human Services.

Official places to check:

  • Office of the National Coordinator for Health IT (HHS): healthit.gov/get-it-check-it-use-it
  • Office of the National Coordinator for Health IT (HHS): healthit.gov/get-it-check-it-use-it/get-it
  • Office of the National Coordinator for Health IT (HHS): healthit.gov/get-it-check-it-use-it/check-it

General information, not advice about your own situation. Checked 19 October 2026. If an official source says something different, it is right. Free to copy and adapt. moraph.org/commons/sessions/reach/your-health-records