CareCandor Honest answers about your health data

How to get copies of your medical records

Most people believe their medical records belong to their doctor. In the United States, the information belongs to you in every way that matters: federal law gives you the right to see it, copy it, and take it anywhere. Here's how to actually exercise that right.

The right, in one paragraph

Under HIPAA's right of access, you can request the records any covered provider or health plan holds about you — visit notes, lab results, imaging reports, medication lists, billing records. They generally must respond within 30 days (one 30-day extension is allowed, and they have to tell you why). They may charge a reasonable, cost-based fee for copies — not a search fee, not a per-page markup designed to discourage you. And if you ask for an electronic copy of records they hold electronically, they have to provide one.

More recent federal information-blocking rules push further: providers are generally required to make clinical notes and results available electronically without delay — which is why lab results now often land in your portal before your doctor has commented on them (we wrote about handling that in the lab results guide).

The practical playbook

Start with the portal. Most health systems expose visit summaries, labs, and notes through their patient portal, and most portals have a "download" or "export" function buried somewhere. This is the zero-friction path for recent history.

For the full chart, ask medical records directly. Every hospital and most practices have a medical records (sometimes "health information management") department. Ask for a copy of your designated record set, say you'd like it electronically, and name a date range. A short written request keeps everyone honest: who you are, date of birth, what you want, how you want it delivered.

Being specific gets faster results. "All records" from a large hospital system can mean thousands of pages and a longer wait. "All visit notes, labs, imaging reports, and medication lists from 2020 to present" gets you the useful chart.

If you hit a wall: a provider who ignores the clock or quotes an absurd fee is out of compliance, and saying — politely — "I'm making this request under the HIPAA right of access" changes tone remarkably fast. Persistent stonewalling can be reported to the HHS Office for Civil Rights.

What nobody tells you: getting them is the easy half

The records arrive as a stack of PDFs, portal exports in three formats, and maybe a CD from the imaging center (still, in 2026). Every provider's export covers only their slice, in their layout, for as far back as their system goes. Nothing merges it. Portals get shut down when systems migrate; access often ends when you change insurers or move away.

The candid advice: treat every export as raw material for a record you maintain yourself. One place that holds your conditions, medications, allergies, immunizations, results, and history — accumulating across every provider you'll ever see, owned by nobody's IT department but yours.

That's the exact problem we built MedQuilt for: a self-hosted health record that lives on your own machine, holds every patch of your history in one chart, and runs safety checks over the whole picture — because a complete record is the one that catches problems.

A note on families

You can generally exercise the same right on behalf of your minor children and, with the right paperwork (healthcare proxy, power of attorney), for adults you care for. Aging parents with records scattered across a dozen specialists are the single strongest case for consolidating a chart while everyone's healthy enough to do the paperwork calmly.

This guide is general information about US federal rules, not legal advice; state laws add details (especially for minors and mental-health records), and rules differ outside the US. For disputes about access, the HHS Office for Civil Rights is the relevant regulator.