Most Americans can access their medical records online right now through their healthcare provider’s patient portal. If you’ve visited a doctor, hospital, or lab in the past several years, there’s a good chance your records are already sitting in a digital system waiting for you to log in. Federal law requires healthcare providers to give you electronic access to your health information without unnecessary delay, and the process usually takes just a few minutes to set up.
Start With Your Provider’s Patient Portal
The fastest way to get your medical records online is through the patient portal your doctor’s office or hospital already uses. The two most common systems are MyChart (used by health systems running Epic software) and FollowMyHealth, but many providers have their own branded portals. If you’re not sure whether your provider has one, check their website or call the front desk and ask for portal enrollment instructions.
To sign up, you’ll typically need your name, date of birth, and an email address. Some portals require an activation code that the office gives you at check-in or sends by email. Others let you verify your identity online by answering security questions tied to your personal information. Once you’re in, you can usually see lab results, visit summaries, medication lists, immunization records, and clinical notes from your appointments.
If you have records spread across multiple health systems, you’ll need to create accounts on each one. Many portals now let you link records from other institutions, pulling them into a single view. When you log in, look for a menu option like “Link My Accounts” or “Import Medical Records” to connect outside providers.
Use Your Smartphone to Pull Records Together
Apple’s Health app on iPhone can connect directly to hundreds of healthcare institutions and display your immunizations, lab results, medications, and vitals in one place. To set it up, open the Health app, tap Browse, then Health Records, and search for your provider by name. You’ll log in with the same credentials you use for their patient portal, and your data will sync to your phone.
Android users have a similar option through apps like CommonHealth or Google Health Connect, though support varies more by provider. The underlying technology that makes all of this work is a data-sharing standard called FHIR, which lets different medical software systems exchange information in a consistent format. You don’t need to understand the technical details. The practical result is that your records can flow between apps and health systems more easily than they could even a few years ago.
Your Legal Right to Access
Federal law is firmly on your side here. Under HIPAA, you have the right to obtain copies of nearly all your health information, and the 21st Century Cures Act made it illegal for providers to engage in “information blocking,” meaning they can’t create unnecessary barriers to your electronic access. If a provider drags their feet or refuses without a valid reason, they may be violating federal rules enforced by the Office of the National Coordinator for Health Information Technology.
When you request records electronically, providers can charge you a fee, but it’s limited to reasonable costs. The U.S. Department of Health and Human Services has clarified that providers who don’t want to calculate their actual costs can charge a flat fee of up to $6.50 for electronic copies. Some providers charge nothing for portal access and only apply fees if you request records to be sent to a third party or delivered in a specific format. If a provider quotes you hundreds of dollars for electronic records, push back and reference the HIPAA right of access fee limitations.
What You Won’t Find Online
One notable exception to your access rights involves psychotherapy notes. These are the personal notes a mental health professional writes during or after a private counseling session, kept separate from your main medical record. They contain the therapist’s analysis of your conversation and are treated differently because of their sensitivity. Providers are not required to give you access to these notes.
It’s worth knowing what psychotherapy notes are not: medication records, session dates and times, treatment plans, diagnoses, and progress summaries are all part of your regular medical record and must be made available to you. The exception is narrow, covering only the therapist’s private session-by-session notes.
If Your Provider’s Office Has Closed
Getting records from a doctor who has retired, moved, or closed their practice takes more legwork, but it’s doable. Medical boards generally require departing physicians to notify patients about how to access their records and to arrange for secure storage of those files. Your first step is to contact your state medical board, which may have information about where the records ended up.
If the practice was part of a larger health system or was acquired by another provider, the new entity usually takes custody of the old records. Call the health system that absorbed the practice and ask their medical records department. For solo practitioners who died or became incapacitated, the physician’s estate (executor or personal representative) is typically responsible for notifying patients where records are stored and how to request them.
When none of these leads pan out, check with your health insurance company. They maintain claims data that can serve as a partial medical history, including dates of service, procedures performed, and diagnoses. Your pharmacy also keeps prescription records that can fill in medication history gaps.
Filing a Formal Records Request
If your records aren’t available through a portal, you’ll need to submit a written request. Most providers have a medical records release form on their website or available at the front desk. You’ll fill in your personal details, specify what records you want (date ranges, types of records), choose your preferred format (electronic is almost always faster and cheaper), and sign an authorization.
Providers are required to respond within 30 days under HIPAA, with the possibility of a one-time 30-day extension if they notify you in writing. In practice, many fulfill requests much faster, especially for electronic delivery. If you need records urgently, say so in your request and follow up by phone.
Accessing Records for a Family Member
Parents and legal guardians can typically get proxy access to a child’s patient portal. You’ll need to provide proof of legal custody, and the process usually involves filling out a proxy access request form at the provider’s office. For younger children, you’ll generally see everything in their record. For adolescents, access gets more complicated because teens have independent privacy rights for certain types of care (like reproductive health or substance use treatment) that vary by state.
If you’re caring for an aging parent or another adult, you’ll need either a healthcare power of attorney or the patient’s written consent authorizing you as a proxy. Most patient portals allow a third party, such as a spouse, adult child, or caretaker, to view records and communicate with the care team once this documentation is on file. Bring the legal paperwork to the provider’s office and ask specifically about setting up proxy electronic access.
Third-Party Retrieval Services
If you need records gathered from many providers at once, particularly for legal, disability, or insurance purposes, third-party retrieval companies can handle the process for you. Companies like ChartRequest, American Retrieval, and Record Retrieval Solutions specialize in tracking down and organizing medical records from multiple sources. Most of these services were originally designed for law firms and insurance companies, but some work directly with patients.
Fees vary widely and are rarely published upfront. Some charge flat rates per request, others bill per page or per facility. For most people who just need their own records from a few providers, going directly through patient portals or submitting your own release forms is faster and free or nearly free. Third-party services make the most sense when you’re dealing with dozens of providers, closed practices, or tight legal deadlines.