You can get your pharmacy records by requesting them directly from your pharmacy, either in person, through an online patient portal, or with a written request. Under federal law, pharmacies are required to provide you with copies of your prescription history, and the process is usually straightforward.
Your Legal Right to Pharmacy Records
The HIPAA Privacy Rule gives you a legal, enforceable right to see and receive copies of your health information from any covered health care provider, and that includes pharmacies. Your prescription history falls under what the law calls a “designated record set,” which covers medical records, billing records, and any other records a provider uses to make decisions about your care. This isn’t a courtesy or a favor. Pharmacies are legally obligated to hand over your records when you ask.
The pharmacy must respond to your request within 30 days. If they need more time, they can extend that window by an additional 30 days, but they have to notify you of the delay in writing. In practice, most pharmacies fulfill requests much faster, often within a few days for electronic records or while you wait if you’re at the counter.
What Pharmacy Records Include
A standard pharmacy record is more detailed than most people expect. It typically contains the name and dosage of each medication dispensed, the date it was filled, the quantity dispensed, the prescriber’s name, and which pharmacy location filled it. Many records also include refill history, showing first and last fill dates, how many times a prescription was dispensed, and the amount you paid or your insurance was billed.
If you’ve used the same pharmacy chain consistently, your records may go back years and give a comprehensive picture of your medication history. That makes them useful for a range of situations: switching to a new doctor, applying for insurance, resolving a billing dispute, or simply keeping track of what you’ve been prescribed.
How to Request Records From Major Pharmacies
The easiest route at most chain pharmacies is through their online portal or app. At CVS, for example, you sign in to your CVS.com account, go to the Pharmacy page, click Prescription Center, and select the Prescription History tab. From there you can view and print a detailed record that includes refill dates, last fill information, and amounts paid. You can filter by patient name (if you manage linked family accounts) and by month and year. Walgreens and Rite Aid offer similar functionality through their apps and websites.
If you don’t have an online account, or if you need a more formal or complete printout, you can request records in person at the pharmacy counter. Bring a valid photo ID. The pharmacist or technician can typically print your history on the spot. For records going further back, or for a certified copy, you may need to fill out a written request form. Independent pharmacies almost always handle requests at the counter or by phone, though they may ask you to submit something in writing for longer histories.
You can also submit a written request by mail or fax. Include your full name, date of birth, the date range you need, and a signature. Some pharmacies have their own request forms available on their websites or at the counter, but a simple signed letter with the right identifying details works too.
What It Costs
HIPAA allows pharmacies to charge a reasonable, cost-based fee for providing copies of your records. This fee can cover the cost of labor for copying, supplies like paper and postage, and preparation time. It cannot include charges for searching for or retrieving your information. In practice, many pharmacies, especially large chains, provide electronic access or basic printouts at no charge. If a pharmacy does charge, the fee is typically modest, often a flat rate or a per-page charge that varies by state. Some states set specific caps on what providers can charge for medical record copies, so your cost may depend on where you live.
If you request records in electronic form (such as a PDF sent by email or accessed through a portal), the fee should be lower than for paper copies, since there are no printing or mailing costs involved.
How Far Back Records Go
Federal law requires pharmacies to keep records of controlled substance prescriptions for at least two years. That includes all Schedule II through V medications, along with the associated inventory and ordering records. Most state pharmacy boards, however, require retention for longer periods, commonly five to ten years, and many states apply this requirement to all prescriptions, not just controlled substances.
Large chain pharmacies with centralized electronic systems often retain data well beyond the legal minimum, sometimes indefinitely. If you need records older than a few years, it’s worth asking. The pharmacy may still have them even if they’re not legally required to keep them. If the pharmacy has closed or changed ownership, your state board of pharmacy can often direct you to where the records were transferred.
Getting Records for Someone Else
If you need pharmacy records for another person, you’ll need a signed HIPAA authorization form from that individual. The authorization must include the patient’s name, a description of the information being requested, who is authorized to receive it, an expiration date, and the patient’s signature. Pharmacies will not release records to a third party, whether a family member, lawyer, or insurance company, without this documentation.
For a minor child, a parent or legal guardian can typically request records without a separate authorization, since they are considered the child’s personal representative under HIPAA. The same applies if you hold power of attorney for someone who is incapacitated.
If the person is deceased, HIPAA still protects their health information for 50 years after death. To access a deceased person’s pharmacy records, you need to be recognized as their personal representative. That generally means being the executor or administrator of their estate, with documentation such as letters testamentary or a court order. The pharmacy will ask for proof of your legal authority before releasing anything.
If the Pharmacy Refuses or Delays
Pharmacies can deny your request only in very limited circumstances, such as if a licensed health professional determines the information could endanger you or someone else. They cannot refuse simply because a request is inconvenient, because they’re busy, or because you have an outstanding balance. If a pharmacy denies your request, they must provide the reason in writing and explain how to file an appeal or complaint.
If you believe a pharmacy is wrongly withholding your records, you can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, which enforces HIPAA. You can also contact your state board of pharmacy, which licenses and regulates pharmacy operations in your state. Both agencies take access complaints seriously, and pharmacies that violate the right of access can face financial penalties.