You can be charged for a copy of your medical records — but only a reasonable, cost-based fee, and only for a short, specific list of costs. The federal privacy rule that gives you the right to your records (45 CFR 164.524) allows a provider or health plan to charge you for the labor of copying the records, the supplies used, postage if you ask for them to be mailed, and the work of preparing a summary if you agreed to one in advance. That is the entire list. Anything else — including the time staff spend hunting down your chart — is not something you can be billed for.
What the rule actually says
The wording matters, so here it is in plain terms. If you ask for a copy of your health information, the provider may impose a fee, but the fee must be reasonable and cost-based. "Cost-based" means it has to reflect what it actually costs them to fulfill your request — not what the information is worth, not what a records-retrieval company would charge a law firm, and not a flat "administrative fee" invented at the front desk.
They are also not required to charge you anything. Many practices provide records through a patient portal at no cost, because it costs them almost nothing to do so. If a fee appears, it is a choice the organization made, and it has to fit inside the rule.
The four costs they can charge for
The rule spells out the only cost categories that can go into your fee:
- Labor for copying the information you asked for — whether the copy is on paper or electronic.
- Supplies for creating a paper copy, or the physical media (like a USB drive or CD) if you asked for the electronic copy on portable media.
- Postage, if you asked for the copy to be mailed to you.
- Preparing an explanation or summary of your information — but only if you agreed in advance both to receive a summary instead of the full records and to the fee for it.
What they cannot charge you for
Because the list is closed, a number of costs that organizations would love to pass along simply cannot be:
- Search and retrieval. The time it takes staff to locate your chart, pull it from archive, or find the right records is not a permitted cost.
- Storage and maintenance. What it costs them to keep a records system running is a cost of doing business, not a cost of your request.
- Reviewing the request. Time spent verifying who you are or deciding whether to release the records is not a chargeable copying cost.
- Per-page fees that ignore reality. A per-page rate is only defensible if it reflects actual copying costs. Charging a paper-era per-page rate for a file exported with a few clicks is hard to call "cost-based."
| Charge | Allowed? |
|---|---|
| Labor to make the copy | Yes |
| Paper, CD, or USB drive | Yes |
| Postage (if you asked for mail) | Yes |
| Summary you agreed to in advance | Yes |
| Searching for and retrieving the records | No |
| Storing or maintaining the record system | No |
| "Administrative" or "processing" fee | No, unless it is really one of the four above |
Looking at your record is not a copy
The fee in the rule attaches to copies (and to agreed summaries). It does not attach to simply inspecting your information. If you go in and ask to sit down and read your chart, or view it on a screen, there is no copying to charge for. This is a genuinely useful option when a full copy would be expensive: look first, identify exactly what you need, and then request a copy of only that.
Electronic copies should cost less
If your records are kept electronically and you ask for an electronic copy, the provider has to give you one in the electronic form and format you asked for if they can readily produce it — and if they can't, in a readable electronic format you both agree on. In practice that usually means a portal download, a secure email, or a PDF.
This is where fees most often fall apart. There is very little labor in exporting a file, and no paper or postage at all. A large fee for an electronic copy delivered electronically deserves an itemized explanation.
When you send records to someone else
You have the right to direct a provider to send a copy of your records straight to a person or organization you choose — another doctor, a family member, an attorney, an insurer. The request has to be in writing, signed by you, and clearly say who should receive it and where to send it.
One important wrinkle: the fee limits described above are the ones that apply when you request a copy for yourself. A 2020 federal court decision (Ciox Health, LLC v. Azar) struck down part of the federal agency's guidance that had extended those same fee limits to records you direct to a third party. So when records go to a third party at your direction, the charge may be higher, and state law becomes the main constraint. If cost is the issue, ask for the copy to be sent to you, and forward it yourself.
State law can lower the fee further
HIPAA sets a ceiling, not a floor. Many states have their own medical-records fee laws, and where a state rule is more protective of you — a lower cap, a free first copy, no charge for records sent to a subsequent treating provider — that state rule applies. It is always worth a search for your state's medical records fee statute, or a call to your state health department, before you pay a large invoice.
How to question or lower a fee
A few practical moves, in order of how often they work:
- Get the fee in advance, in writing, itemized. You are entitled to know what you'll be charged before you commit. An itemized figure is also much easier to challenge than a lump sum.
- Narrow the request. Ask for the specific visits, dates, or reports you actually need instead of the entire chart.
- Ask for it electronically. No paper, no postage, minimal labor.
- Point to the four categories. Politely ask which of the permitted cost categories a disputed line item falls under. Records staff generally know the rule.
- Ask about a hardship or fee waiver. Many organizations have one and simply don't advertise it.
If a fee is blocking your access
A fee that is so high it effectively prevents you from getting your own records is not consistent with the purpose of the right of access. Neither is refusing to release records because you have an unpaid bill with the practice — your right to a copy of your health information does not depend on your account balance.
Remember the timing rules as well: a provider generally has 30 days to act on your request, and can take one extension of up to 30 more days only if they tell you in writing why and when they will finish. If you're being stalled, overcharged, or refused, you can file a complaint with the HHS Office for Civil Rights at no cost, and you are protected from retaliation for doing so. Patient access has long been an enforcement priority, and complaints are taken seriously.
The short version
You can be charged — modestly, for real costs, and nothing more. Ask for the number in writing before you agree, ask for it electronically, and don't assume a big invoice is the price of getting your own information.
Common questions
Can a provider charge me just to look at my own record?
No. The fee in the federal rule applies to copies, and to summaries you agreed to in advance. Inspecting your record in person or on screen involves no copying, so there is no copy fee for looking.
Can I be charged a search or retrieval fee?
No. The permitted cost categories in 45 CFR 164.524 are labor for copying, supplies, postage, and an agreed summary. Time spent searching for and retrieving your records is not among them.
Can a practice refuse to release my records because I owe them money?
Your right to get a copy of your health information does not depend on your account balance. An unpaid bill is not a permitted reason to deny you access to your own records.
How long does a provider have to respond to my request?
Generally 30 days. They may take one extension of up to 30 additional days, but only if they give you a written statement of the reason for the delay and the date they will complete the request.