Medical Record Access and Privacy Questions

What this guide is for

Medical records and billing records can raise practical questions before or after a conversation with a health care provider or health plan. This public education guide offers neutral question prompts about access, copies, communication, and privacy practices.

It does not decide what applies to you, interpret a record, provide legal advice, or replace information from the organization that holds the record or a qualified professional.

Start with the organization that holds the record

If you want information about a record, begin by asking the outside organization how it handles requests, identity verification, copies, formats, communication, and follow-up. Ask which office, portal, or process is appropriate without sharing your record with Nurture + Nourish.

• What types of records or copies can this organization explain or provide?
• How should I ask about the format of a copy?
• What information does the organization need to identify the correct record?
• How will the organization communicate about the request?
• Who should I contact if I have a question about the process?

Privacy and communication questions

You can ask how an organization handles privacy notices, communications, authorized representatives, and sending information to another person or organization. The answer may depend on the organization, the record type, the location, and the circumstances.

For U.S. context, HHS describes certain access and privacy rights under HIPAA for records held by covered health care providers and health plans. HIPAA does not apply in the same way to every organization or every record, and HHS guidance includes exceptions and qualifications.