01

List each source of records

Create a provider list with facility names, clinicians, dates of service, patient or account numbers, and contact details. Include imaging centers, pharmacies, therapists, emergency transport, and health plans where relevant. Records and billing may use different departments.

02

Ask for the material you need

HHS explains that the HIPAA Privacy Rule generally gives individuals a right to inspect and receive copies of medical and billing records held by covered providers and health plans, with limited exceptions. A request can identify a date range and record types. Providers may verify identity and use a request form.

03

Track the request

Record the date sent, delivery method, recipient, scope, quoted fee, response, and follow-up. Keep the request and any denial. Do not assume a patient portal contains the complete designated record set; ask what is available if something appears missing.

04

Check and store the response

Confirm the name, date range, and files received. Keep medical records separate from bills and insurance explanations. If information appears inaccurate or incomplete, HHS describes a right to request an amendment; the provider or plan must respond, although it may disagree.

05

Share through a confirmed channel

Medical records contain sensitive information. Confirm the firm, recipient, and secure intake process before sending them. Ask whether the firm wants you to request records or prefers to handle authorizations after representation begins.