After a loved one dies, you may need copies of their medical records — to settle an estate, support a life-insurance claim, understand a cause of death, or learn about a hereditary condition that could affect your own health. It's an emotional time to be dealing with paperwork, and the rules can feel opaque. The good news is that HIPAA does provide a clear path for the right people to obtain these records. Knowing who qualifies and what to bring makes a hard task a little easier.
HIPAA still protects records after death
A common surprise is that privacy protections don't end when someone passes away. Under the HIPAA Privacy Rule, a deceased person's health information generally remains protected for 50 years after the date of death. During that period, providers must still safeguard the records and may release them only to those with a proper basis — they cannot simply hand them to any relative who asks.
Who can request the records
The person with the clearest right is the deceased individual's personal representative — someone with legal authority to act on behalf of the deceased or their estate. Depending on your state, this is typically:
- The executor named in the will
- The court-appointed administrator of the estate
- A person otherwise authorized under state law to act for the estate
A personal representative generally has the same right of access the deceased person would have had. Beyond that role, HIPAA also permits providers to share certain relevant information with family members and others who were involved in the person's care or payment before death — unless doing so is inconsistent with any known prior preference of the deceased.
What documents you'll likely need
Providers are allowed to ask for proof before releasing records. Gathering these in advance will save trips and delays:
| Document | Why it's needed |
|---|---|
| Death certificate | Confirms the death and its date |
| Letters testamentary or of administration | Proves you are the court-recognized executor or administrator |
| The will naming you executor | Supports your authority where applicable |
| Your government-issued photo ID | Verifies your identity |
How to make the request
- Identify which provider, hospital, or lab holds the records you need.
- Contact their Health Information Management or medical records department and ask about their process for a deceased patient.
- Submit a written request that identifies the deceased (full name, date of birth, and date of death) and the specific records you want.
- Include proof of your authority, such as letters testamentary, plus your photo ID.
- Keep a copy of everything you send and note the date.
Timelines and fees
The same general rules that apply to records requests apply here: a provider must usually act within 30 days, with one possible 30-day extension if they notify you in writing. They may charge a reasonable, cost-based fee for copies, but not for searching for or retrieving the file. If your request is for an electronic copy of records kept electronically, you can generally ask to receive them that way.
When you're not the personal representative
If no estate has been opened or you aren't the executor, you may still be able to obtain relevant information as someone who was involved in your loved one's care, or you may need to consult the probate process in your state to have a representative formally appointed. If a provider declines your request, ask them to explain the basis — often it comes down to needing documentation of your legal authority. For genetic or hereditary concerns that affect your own care, mention that to the provider, as it can help frame what information is relevant to you.
A gentle word
Handling a loved one's records is rarely just administrative. Take it one provider at a time, keep your documents organized in a single folder, and don't hesitate to ask each records department to walk you through their specific steps. The people who handle these requests do so regularly and can usually make the path clearer.