HIPAA and Your Medical Records

The federal privacy rules for health information - including a right to get a copy of your own records, which is narrower and more practical than the privacy rule people usually mean.

Looking for a lawyer rather than a definition? Skip to the state-by-state list of Health Care law firms.

What it means

The federal health privacy rules apply to health plans, health care clearinghouses and most health care providers, together with the contractors that handle protected health information for them. They restrict use and disclosure of that information without authorization, subject to defined exceptions such as treatment, payment and health care operations.

The provision individuals use most is the right of access: a person may inspect and obtain a copy of their own records held in a designated record set, in the form and format requested where the records are readily producible that way, within a defined period and for no more than a cost-based fee. A request may not be conditioned on explaining why the records are wanted.

A point of frequent confusion is that these rules do not give an individual a private lawsuit against a provider for a breach. Enforcement runs through a complaint to the federal regulator, which can impose penalties. That is why a privacy problem is often pursued instead under state law - as negligence, breach of confidence, or under a state health-privacy or data-breach statute - with the federal rule supplying the standard rather than the cause of action.

Where this comes from

When people hire a lawyer for this

Records requests that are refused, delayed well past the required period, or answered with a fee that looks unrelated to the cost of copying are worth raising - and getting the complete record is usually the first practical step in any medical claim, well before anyone decides whether there is one. Where information has actually been disclosed improperly, the useful advice is about state-law routes, because the federal statute is enforced by the regulator rather than by the individual.

Worried about the cost? A lawyer can be hired for one part of a case only (limited-scope representation), may be paid from what a claim recovers (contingency fee), or may be free through a pro bono program or legal aid; a court can also waive its own filing fees.

Find Health Care law firms in your state

Choose your state to see law firms for this in the city where we list the most; your city may be under “other cities”, A to Z.

• Alabama (Montgomery)
  +1 other city

  • Birmingham
• Alaska (Anchorage)
• Arizona (Mesa)
  +6 other cities

  • Chandler
  • Gilbert
  • Glendale
  • Phoenix
  • Scottsdale
  • Tucson
• Arkansas (Little Rock)
• California (Long Beach)
  +21 other cities

  • Anaheim
  • Fontana
  • Fremont
  • Irvine
  • Los Angeles
  • Oakland
  • Riverside
  • Sacramento
  • San Bernardino
  • San Francisco
  • San Jose
  • Santa Ana
  • and 9 more with fewer listed firms
• Colorado (Aurora)
  +2 other cities

  • Colorado Springs
  • Denver
• Connecticut (Bridgeport)
• Delaware (Wilmington)
• District of Columbia (Washington)
• Florida (Orlando)
  +5 other cities

  • Hialeah
  • Jacksonville
  • Miami
  • St Petersburg
  • Tampa
• Georgia (Atlanta)
• Hawaii (Honolulu)
• Idaho (Boise)
• Illinois (Chicago)
  +1 other city

  • Aurora
• Indiana (Indianapolis)
  +1 other city

  • Fort Wayne
• Iowa (Des Moines)
• Kansas (Kansas City)
  +1 other city

  • Wichita
• Kentucky (Lexington)
  +1 other city

  • Louisville
• Louisiana (Baton Rouge)
  +2 other cities

  • New Orleans
  • Shreveport
• Maine (Portland)
• Maryland (Baltimore)
• Massachusetts (Boston)
• Michigan (Detroit)
• Minnesota (Minneapolis)
  +1 other city

  • Saint Paul
• Mississippi (Jackson)
• Missouri (Kansas City)
  +1 other city

  • St. Louis
• Montana (Billings)
• Nebraska (Lincoln)
  +1 other city

  • Omaha
• Nevada (Las Vegas)
  +3 other cities

  • Henderson
  • North Las Vegas
  • Reno
• New Hampshire (Manchester)
• New Jersey (Newark)
  +1 other city

  • Jersey City
• New Mexico (Albuquerque)
• New York (New York City)
  +2 other cities

  • Buffalo
  • Rochester
• North Carolina (Raleigh)
  +5 other cities

  • Charlotte
  • Durham
  • Fayetteville
  • Greensboro
  • Winston-Salem
• North Dakota (Fargo)
• Ohio (Columbus)
  +3 other cities

  • Cincinnati
  • Cleveland
  • Toledo
• Oklahoma (Tulsa)
  +1 other city

  • Oklahoma City
• Oregon (Portland)
• Pennsylvania (Philadelphia)
  +1 other city

  • Pittsburgh
• Rhode Island (Providence)
• South Carolina (Columbia)
• South Dakota (Sioux Falls)
• Tennessee (Nashville)
  +1 other city

  • Memphis
• Texas (Austin)
  +12 other cities

  • Arlington
  • Corpus Christi
  • Dallas
  • El Paso
  • Fort Worth
  • Garland
  • Houston
  • Irving
  • Laredo
  • Lubbock
  • Plano
  • San Antonio
• Utah (Salt Lake City)
• Vermont (Burlington)
• Virginia (Richmond)
  +3 other cities

  • Chesapeake
  • Norfolk
  • Virginia Beach
• Washington (Tacoma)
  +2 other cities

  • Seattle
  • Spokane
• West Virginia (Charleston)
• Wisconsin (Madison)
  +1 other city

  • Milwaukee
• Wyoming (Cheyenne)

Related terms

Other entries in the same area of law, each written from the same primary sources.

• Advance Directive and Living WillDocuments recording medical treatment wishes, and naming who decides, if a person becomes unable to decide for themselves.
• Civil Commitment (Involuntary Psychiatric Hospitalization)The state-law process by which a person can be held and treated in a psychiatric facility against their will - the emergency hold, the court hearing, the standard of dangerousness, and the constitutional limits on all three.
• COBRA Continuation CoverageThe federal right to stay on an employer's group health plan after leaving the job, losing hours, divorcing, or a covered employee's death - at the full premium, for a limited period, if elected in time.
• Elder Abuse and Adult Protective ServicesWhat the law counts as abuse, neglect or exploitation of an older or dependent adult, who must report it, what Adult Protective Services can and cannot do, and the civil and criminal remedies that follow.
• EMTALA (Emergency Medical Treatment and Labor Act)The federal law that requires a hospital emergency department to screen and stabilize anyone who comes through the door, regardless of insurance or ability to pay, before it may transfer or discharge them.
• Fair Hearing (Public Benefits)The hearing you are entitled to before benefits such as Medicaid or SNAP are cut off or denied - a constitutional right, not an agency courtesy.
• False Claims Act and Health Care Whistleblowers (Qui Tam)The federal statute under which false billing to Medicare or Medicaid carries treble damages and per-claim penalties, and the qui tam procedure that lets a private person sue in the government's name and share the recovery.
• Health Plan Claim Denial and AppealThe structured process for challenging a refusal to cover treatment - internal appeal first, then in most cases an independent external review.
• Hospital Financial Assistance and Medical DebtThe federal rules that make a nonprofit hospital publish a financial assistance policy, limit what it may charge eligible patients, and restrict how it collects - and what a patient with a medical bill can do with them.
• Informed ConsentA patient's agreement to treatment after being told the risks and alternatives - and a signed form is evidence that the conversation happened, not proof that it was adequate.
• Life Insurance Claim DenialThe common reasons life insurers deny or delay death benefits, how the rules differ for employer group policies under ERISA, and what beneficiaries can do about disputes over who gets paid.
• Medicaid Estate RecoveryThe federal requirement that a state recover the cost of long-term care Medicaid paid for from the estate of the person who received it after they die - the reason the family home is at stake, and the exemptions and hardship rules that limit it.
• Medical Malpractice and the Standard of CareA negligence claim against a healthcare provider, judged against what a reasonably competent practitioner in the same field would have done.
• Medicare AppealsThe five-level process for challenging a Medicare denial - of a claim, a service, a hospital discharge, or a nursing-home stay - with a different deadline at each level and a fast track when the care is about to stop.
• Mental Health ParityThe federal requirement that a health plan covering mental-health or substance-use treatment cover it on terms no more restrictive than its medical and surgical coverage - in dollars, in visit limits, and in the prior-authorization and network rules that are harder to see.
• Nursing Home Residents' RightsThe federal bill of rights every Medicare- or Medicaid-certified nursing home must honor - dignity, choice, freedom from restraints and abuse, notice before transfer or discharge - and the inspection and complaint system that enforces it.
• Patient AbandonmentWhen a physician or provider may end a relationship with a patient, what notice and transition care they must give, and when ending it - or refusing to start it - becomes actionable.
• Psychotherapist-Patient PrivilegeThe rule that keeps what a patient tells a therapist out of court - who it covers, who holds it, how it is waived, and the duty-to-warn and child-abuse exceptions that override it.
• Refusing Medical TreatmentThe right of a competent adult to refuse any treatment, including one that keeps them alive; what happens when the patient cannot decide; and the limits the law places on it.
• Social Security Disability Appeal (SSDI and SSI)The four-step process for challenging a denied disability claim - and most claims are denied at the first step.
• Stark Law and the Anti-Kickback StatuteThe two federal laws that govern financial relationships in health care - the strict-liability ban on physician self-referral and the criminal ban on paying for referrals - and why nearly every practice arrangement has to fit an exception or a safe harbor.
• SubrogationThe right of an insurer or health plan that paid your bills to be repaid out of your settlement - the reason a recovery is often smaller than it looks.
• Supplemental Security Income (SSI)The federal needs-based benefit for people who are aged, blind or disabled and have little income or savings: how it differs from Social Security disability, what counts against it, and how to appeal.
• Surprise Medical Billing (No Surprises Act)The federal protection, since 2022, against a bill from an out-of-network provider the patient did not choose - the emergency room, the anesthesiologist at an in-network hospital, the air ambulance - and the good-faith estimate an uninsured patient can hold a provider to.
• Surrogate Decision-Maker (Default Surrogate Laws)Who makes medical decisions for a patient who cannot and who never named anyone - the ranked list most state laws supply, the standard the surrogate must apply, and what a surrogate cannot do.
• Veterans Disability CompensationThe tax-free monthly VA benefit for disabilities connected to military service: what service connection means, how ratings work, and the three ways to challenge a VA decision.

« All glossary terms