What’s Included in Medical Records and What’s Not

A medical record contains virtually everything a healthcare provider documents about you: your personal details, diagnoses, test results, medications, treatment plans, billing information, and legal paperwork like consent forms. Whether stored on paper or in an electronic health record (EHR), your chart is a running account of every interaction you have with the healthcare system. Here’s what’s actually in it.

Personal and Demographic Information

Your medical record starts with the basics that identify you and help coordinate your care. Under the latest federal data standards for electronic records, the demographic section can be surprisingly detailed. It includes your full legal name (first, middle, last, suffix, and any previous names), date of birth, sex, race, ethnicity, tribal affiliation, and preferred language. Contact information covers your current and previous addresses, phone numbers, email, and whether you need an interpreter.

The record also lists related persons, such as an emergency contact or legal guardian, along with their relationship to you. Occupation and industry may be documented when relevant to your health. If you’ve been assigned a patient identifier number by a hospital or clinic, that lives here too.

Medical History and Diagnoses

This is the backbone of any medical record. It captures your past illnesses, surgeries, chronic conditions, and active diagnoses. Providers update this section over time so that anyone treating you can quickly see what you’ve dealt with before, from a childhood tonsillectomy to a recent diabetes diagnosis.

Family health history is tracked separately. Your record may note conditions that run in your family, like heart disease, certain cancers, or autoimmune disorders, because these influence screening decisions and risk assessments. Goals and preferences, including advance directives or care preferences you’ve discussed with a provider, can also be documented here.

Progress Notes and Clinical Documentation

Every time you see a provider, they write a progress note. These notes typically follow a structured format that covers what you reported (your symptoms and concerns), what the provider observed during the exam, their assessment of what’s going on, and the plan for next steps. Vital signs recorded at each visit, such as blood pressure, heart rate, temperature, respiratory rate, and weight, are part of this section.

Clinical notes go beyond office visits. They include hospital admission and discharge summaries, surgical reports, consultation notes from specialists, and nursing assessments. If you were seen in an emergency department, those encounter notes are in your record as well. Each entry is time-stamped and attributed to the provider who wrote it.

Lab Results and Diagnostic Imaging

Your record stores every lab test ordered on your behalf, along with the results. Blood work, urine tests, biopsies, pathology reports, and genetic testing all fall into this category. The results typically include reference ranges so providers can see at a glance whether your values are normal or abnormal.

Diagnostic imaging is also part of the record. X-rays, CT scans, MRIs, ultrasounds, and mammograms are stored as digital image files (in a standard format called DICOM), along with the radiologist’s written interpretation. Some records also include results from clinical tests like EKGs, pulmonary function tests, or hearing screenings.

Medications, Allergies, and Immunizations

A medication list tracks every prescription you’re currently taking, including the drug name, strength, dose, and how often you take it. When a medication is started or stopped, those dates are recorded. In hospitals and care facilities, a more detailed medication administration record logs each individual dose given, who administered it, and the exact time.

Your allergy list is one of the most safety-critical parts of the record. It documents known drug allergies (like penicillin), food allergies, and other sensitivities, along with the type of reaction you experienced. Providers check this list before prescribing anything new.

Immunization history is tracked as well. This includes childhood vaccinations, annual flu shots, COVID-19 doses, and any travel-related vaccines you’ve received. These records are sometimes shared with state immunization registries.

Treatment Plans and Care Team

Your record documents active treatment plans, which outline what your provider recommends and what you’ve agreed to. For a chronic condition like high blood pressure, for example, the plan might note lifestyle changes, a target blood pressure, and a follow-up schedule. For a surgical procedure, it would include pre-operative instructions and post-operative care steps.

The care team section lists every provider involved in your care: your primary care physician, specialists, therapists, and any other clinicians. If you’re using a medical device like an insulin pump, CPAP machine, or implanted pacemaker, that’s documented too.

Insurance and Billing Records

Medical records aren’t purely clinical. They also contain administrative and financial information. Your health insurance details, including your plan, group number, and coverage type, are stored alongside billing codes for every diagnosis and procedure. These codes are what your provider submits to get paid by your insurer, and they become a permanent part of your chart.

Consent forms, HIPAA privacy acknowledgments, and authorization forms for releasing your information are also filed in the record. If your care was subject to a utilization review (where an insurer evaluates whether a treatment was medically necessary), documentation from that review may be included as well.

What’s Not in Your Standard Record

One notable exclusion: psychotherapy notes. Under HIPAA, notes that document or analyze the contents of a therapy session are held to a higher level of confidentiality than the rest of your medical record. They must be stored separately and cannot be released to insurers for payment audits or reviews without your specific authorization.

It’s worth understanding what counts as a psychotherapy note and what doesn’t. Medication prescriptions, session start and stop times, treatment frequency, clinical test results, and summaries of your diagnosis, symptoms, prognosis, and progress are all considered part of the regular medical record, even if they come from a mental health provider. Only the detailed, session-by-session analysis written by your therapist qualifies for that extra layer of protection.

Your Right to Access Your Records

Under HIPAA, you have a legal right to access what’s called your “designated record set.” This includes any medical and billing information your provider uses to make decisions about your care. If your provider participates in a health information exchange network that links records across hospitals and clinics, only the information they’ve actually imported into their own system becomes part of the record set they’re obligated to share with you. You can’t demand that one provider hand over another provider’s records simply because they’re connected through the same network.

Federal regulations require providers to maintain your medical records for at least seven years from the date of service. State laws sometimes require longer retention, particularly for minors or specific types of records. After the retention period expires, records may be destroyed, but most large health systems keep electronic records indefinitely because digital storage is inexpensive.

The Expanding Scope of Digital Records

Modern EHRs contain far more data than paper charts ever did. The federal government maintains a standard called the United States Core Data for Interoperability (USCDI) that defines what electronic health records should be able to share across systems. The latest draft includes 24 data classes covering everything from adverse events and health status assessments to encounter information and facility details. Each class breaks down into dozens of specific data elements.

In practical terms, this means your digital record increasingly captures not just what happened during a visit, but the context around it: why a test was ordered, why a treatment wasn’t performed, when exactly a procedure took place, and which facility handled it. The goal is to make your health information portable and useful no matter where you seek care.