Case guide

UPDATED FEB 2026

How to Obtain Your Medical Records

Part of the Medical Malpractice investigation

The short answer

Medical records are the foundation of every malpractice case — they are the objective, contemporaneous record of what the provider did, when they did it, and what they found. Patients have a federal right under HIPAA to access and obtain copies of their records.

Knowing how to request complete records — including imaging, pathology, operative reports, fetal heart rate tracings, and nursing notes — is the essential first step in any malpractice investigation.

People's Justice Research TeamUpdated February 20, 2026Fact-checked

Verified against court and regulatory records · No upfront fees · Your information is never sold

Free Case Review

Check your eligibility — free

Answer 2-3 quick questions to review your potential case.

Free · Confidential · About 2 minutes · A case specialist responds within 1 business day

Your answers are never sold or shared without your consent.

Your HIPAA Right to Access Medical Records

The HIPAA Privacy Rule (45 C.F.R. § 164.524) gives patients — and their personal representatives — the right to access and receive copies of their medical records held by any covered healthcare provider. This right covers medical records in any format — paper, electronic, or otherwise. Providers must respond to records requests within 30 days (extendable by 30 days with notice). They may charge a reasonable, cost-based fee for copying. They cannot deny access because of an outstanding balance on your account. If a provider denies your records request, you can file a complaint with the HHS Office for Civil Rights.

What Records to Request in a Malpractice Investigation

For hospital admissions: request all physician notes (admission H&P, daily progress notes, discharge summary), all nursing notes (which document vital signs, medications administered, and nursing assessments), all laboratory reports with the exact values and reference ranges, all radiology reports and the actual digital images (DICOM files), operative reports, anesthesia records, recovery room notes, and all consent forms. For birth injury cases, specifically request the fetal heart rate (FHR) monitoring strips — these are the continuous paper or digital tracings of the baby's heart rate during labor and are the central evidence in most birth injury cases. For cancer misdiagnosis cases, request all pathology reports and slides, all imaging studies, all biopsy reports, and all follow-up notes documenting what action (if any) was taken on each abnormal finding.

Key data

Data & Statistics

1 SOURCED FIGURE

HIPAA requires healthcare providers to respond to records requests within 30 days

45 C.F.R. § 164.524 — HIPAA Privacy Rule

FAQ

Frequently Asked Questions

12 QUESTIONS

Medical malpractice occurs when a healthcare provider — physician, surgeon, nurse, hospital, or other licensed provider — deviates from the accepted standard of care and that deviation causes preventable harm to a patient. The standard of care is defined as what a reasonably competent provider in the same specialty would have done under the same or similar circumstances. Malpractice is not simply a bad outcome — medicine involves inherent risks, and a patient can suffer a serious complication even with perfectly delivered care. To be malpractice, the provider must have acted negligently: doing something a competent provider would not have done, or failing to do something a competent provider would have done.

Dive deeper

Related Guides

24 GUIDES

The full investigation

Part of the Medical Malpractice Investigation