Medical Records Release Form: Requesting Your Own or a Relative's Records

Requesting your own chart versus authorizing a disclosure

When the goal instead is releasing information to someone else, such as an insurer or attorney, the correct document is usually the broader HIPAA authorization form, which carries the specific core elements the Privacy Rule requires for third-party disclosures.

Many practices use one combined release of information form for both purposes, so read the recipient field carefully before assuming which category your request falls into.

If a practice's own records-release process is the bottleneck, the HIPAA compliant consent form page covers the checklist the office's paperwork should satisfy.

Release of information form wording and letter alternatives

A release of information form template works for most routine requests, but a short medical records release letter template can substitute where a provider accepts written requests: name, date of birth, records wanted, delivery preference and a signature are usually enough.

Some offices also offer a release of information form generic enough to cover any recipient, which is convenient but weakens the Privacy Rule's specificity expectations — a named recipient and defined date range are always safer than an open-ended blanket release.

Whether you use the form above or a letter, keep a copy of the signed request and note the date it was sent, since that date starts the provider's response clock.

What to expect on fees

Providers can charge a reasonable, cost-based fee for copying and sending records, covering labor, supplies and postage. Fees vary by state and by practice, and electronic copies are often cheaper than paper.

A patient requesting their own records under HIPAA cannot be charged an unreasonable fee designed to discourage the request, and many practices waive the fee entirely for a first request sent electronically.

Ask for a written fee estimate before a large request, particularly for a lengthy chart spanning several years or a hospital stay involving imaging and lab results.

Realistic turnaround times

Under HIPAA, a covered entity generally must provide access to records within 30 days of the request, with one 30-day extension allowed if the patient is notified of the reason for delay in writing.

In practice, many practices turn around a straightforward records request in a matter of days when a portal or standard chart export is available, reserving the full 30-day window for complex, paper-based requests.

If you need records urgently — for a same-week appointment, for example — call ahead and ask whether an expedited or partial release is possible while the full request is processed.

When a patient portal replaces the paper form

Many US practices now offer a secure patient portal where recent labs, visit summaries and immunization records are available immediately without a signed medical records release form at all.

A portal typically only covers records generated after the practice adopted the system, so older paper charts, imaging on film, or records from a previous provider usually still need a formal request.

If your goal is simply your own recent results, checking the portal first can save the fee and turnaround time associated with a full medical release request.

Requesting records for a minor child or a relative

A parent or legal guardian can generally request a minor child's records by completing the form and confirming their relationship, though some adolescent records — such as reproductive or mental health care — may carry additional confidentiality protections depending on state law.

Requesting a deceased relative's records generally requires proof of authority, such as being named executor of the estate, since the deceased's privacy protections continue after death under HIPAA.

A spouse requesting a living partner's records without the patient's own authorization or documented legal authority should expect the request to be declined, since marriage alone does not grant automatic access rights.

United States, United Kingdom, Canada, Australia and New Zealand compared

The mechanics of requesting your own health records differ by country even though the underlying right is broadly similar everywhere in the tier-1 English-speaking world.

Using the free medical records release form

The template above includes fields for the requester's relationship to the patient, the specific records wanted, delivery preference, and a place for the office to log fees and turnaround — details that generic templates often skip.

If your actual need is authorizing disclosure to an insurer, attorney or employer, use the HIPAA authorization form instead, and see the HIPAA compliant consent form checklist if you are building either document from scratch for a practice.

For UK-specific subject access requests, see our NHS consent forms guide, or return to the HIPAA & Medical Release pillar for the full silo.