Patient Access

Can a Provider Withhold Your Records Over an Unpaid Bill?

No. A provider cannot withhold your medical records because you owe money for treatment. The federal right of access, 45 CFR 164.524, gives you the right to see and get copies of your records, and it lists the narrow grounds on which a provider can deny access. An unpaid bill is not on the list. HHS has said this plainly in its access guidance: records access cannot be conditioned on payment for the health care services themselves. What a provider can do is charge a reasonable, cost-based fee for making the copy. Those are two different bills, and keeping them separate is the whole game.

The answer

SituationCan they refuse your records?
You owe a balance for visits, procedures, or testsNo
Your account is with a collection agencyNo, the balance still cannot block access
You have not paid the copying fee for this records requestThey can require the copying fee before releasing copies
You are switching to a new doctor and owe the old one moneyNo, they must still provide your records
The practice closed or your provider retiredAccess rights continue; see below

Why the rule works this way

The right of access is written with a short, specific list of denial grounds, things like certain psychotherapy notes, records compiled for litigation, and a licensed professional's judgment that access is reasonably likely to endanger someone's life or physical safety. The structure matters: if a reason is not on the list, it is not a lawful reason. Money owed for care appears nowhere in it.

The regulators have also said the quiet part out loud. HHS's guidance on the right of access states that a covered entity may not withhold or deny individuals access to their PHI because an individual has failed to pay for services. The Office for Civil Rights has run an enforcement initiative on right-of-access failures since 2019 and has settled dozens of cases with providers, many of them small practices, over delayed or refused records.

Why providers get this wrong: holding the chart until the balance clears feels like an ordinary way to get paid, the way a mechanic keeps the car. Medical records are not the car. The law treats access to your own health information as a right, not a service the provider may withhold for nonpayment.

The one fee they can require

The confusion in almost every real dispute comes from one distinction:

  • Your treatment balance is what you owe for care. It cannot be used to block records access. The provider's remedy for an unpaid treatment bill is billing and collections, not your chart.
  • The copying fee is a reasonable, cost-based charge for fulfilling this records request, limited to a short list of allowed costs such as labor for copying, supplies, and postage. A provider can require this fee before handing over copies. Our guide to what you can be charged for medical records breaks down the allowed costs and the ways fees go wrong.

So a provider saying "there is a $20 copying fee for this request" is likely within the rules. A provider saying "clear your $800 balance and then we will send your records" is not.

Common versions of the problem

"Our policy is that accounts must be current before we release records." A policy cannot override the regulation. This sentence, said out loud or printed on a form, describes a practice OCR has penalized.

"Your account is in collections, talk to the agency." Collections changes who is chasing the balance. It does not change your access rights, and the records request still goes to the provider (or whoever now holds the records).

"We'll send them to your new doctor, but not to you." You are entitled to copies yourself, not only provider-to-provider transfer. Directing records to your new doctor is your option, not their loophole.

"The doctor retired / the practice closed." Retention obligations and access rights survive the practice. There is a successor or custodian holding the records; our guide to getting records from a closed practice walks through finding them.

What to do, step by step

  • Put the request in writing. Name yourself, the records you want, and how you want them delivered. Add one sentence: "I am requesting access to my records under the HIPAA right of access, 45 CFR 164.524." Keep a copy. A provider generally has 30 days to respond, with one 30-day extension if they tell you in writing why.
  • Separate the bills out loud. Offer to pay the copying fee if there is one, and say plainly that a treatment balance is not a lawful basis for withholding records. Many refusals evaporate at this sentence, because the front desk has never heard the distinction.
  • Escalate inside the organization. Ask for the privacy officer. Practices of any size are required to have one, and the privacy officer usually knows exactly what OCR enforcement looks like.
  • File with OCR. If refusal continues, file a complaint at the HHS Office for Civil Rights complaint portal. Right-of-access complaints are a stated enforcement priority, and the complaint itself frequently produces the records.
  • Consider state routes too. Your state health department or medical board takes complaints about records practices, and state law may give you additional, faster remedies.

Where state law fits

Federal law is the floor. Many states separately prohibit conditioning records release on payment for care, some cap copying fees below what HIPAA would allow, and some set response deadlines shorter than 30 days. When state law is more protective of your access, the more protective rule is the one the provider must follow. If a provider cites "state law" as the reason for withholding over a balance, ask them to name the statute; the answer is usually silence, because state laws in this area almost uniformly point the other way.

For the broader playbook when a provider stalls or refuses for any stated reason, see what to do if a provider won't release your records. The primary sources: the access rule at 45 CFR 164.524 and HHS's guidance on the right of access.