A medical record can be changed when it contains a factual error, is incomplete, or includes information that doesn’t belong to you. Federal law gives you the right to request an amendment, and healthcare providers can also correct their own documentation when they identify mistakes. But changing a record doesn’t mean deleting it. The original entry must always be preserved, with the correction clearly marked alongside it.
Your Legal Right to Request Changes
Under the HIPAA Privacy Rule, you have the right to request an amendment to any medical record held by a healthcare provider, health plan, or other entity covered by the law. This applies to what’s called your “designated record set,” which includes your medical charts, billing records, enrollment information, and any other records used to make decisions about your care.
Your request must be in writing, and most providers have a specific form for this. You’ll need to explain which entry you want changed and why. Common reasons include a wrong diagnosis listed in your chart, an incorrect medication or allergy notation, test results attributed to the wrong patient, a procedure documented on the wrong date, or demographic details like a misspelled name or wrong birth date.
The provider has 60 calendar days to respond to your request. If they need more time (for example, if your records are stored offsite), they can extend that deadline by an additional 30 days, but they must notify you in writing within the first 30 days explaining the delay. Only one extension is allowed per request.
When a Provider Can Say No
Providers are not required to approve every amendment request. Under federal law, they can deny your request in four specific situations:
- The record is accurate and complete. If a provider stands by the original documentation, they can refuse to change it. This is the most common reason for denial. You might disagree with a clinician’s assessment or opinion, but opinions documented in good faith are generally considered part of the clinical record.
- The provider didn’t create the record. If a specialist wrote the note and you’re asking your primary care office to change it, they can decline. The exception is when the original author is no longer available to act on your request.
- The record isn’t part of your designated record set. Some internal notes or working documents fall outside the scope of records you’re entitled to amend.
- The record wouldn’t be available for you to inspect. Certain records, like psychotherapy notes kept separate from your main chart, have different access rules and may not be subject to amendment requests.
What Happens If Your Request Is Denied
A denial isn’t the end of the process. You have the right to file a written statement of disagreement, typically limited to about one page, explaining why you believe the record is wrong. This statement becomes a permanent part of your medical record. Every time the disputed information is shared with another provider, insurer, or organization, your statement of disagreement must be included.
The provider can attach their own rebuttal explaining why they denied the change, and you’ll receive a copy of it. If you choose not to file a statement of disagreement, you can still request that your original amendment request and the provider’s denial letter be included with any future disclosures of that record. Either way, your objection stays attached to the information you’re disputing.
How Corrections Actually Appear in Your Record
Whether a change comes from your request or a provider catching their own mistake, the correction process follows the same principle: the original entry is never erased. In paper records, the standard practice is a single-line strikethrough of the incorrect text, with the provider’s initials, the current date and time, and the corrected information written nearby. Whiting out text, removing pages, or obliterating sections are all considered signs of tampering and can raise serious legal red flags.
In electronic health records, the same transparency rules apply. The corrected information is displayed in a way that distinguishes it from the original, often through bold text, a different color, underlining, or strikethrough formatting. The system records who made the change, when, and why. Federal certification standards require that electronic health records maintain an audit log tracking every action taken on a record, and that log itself cannot be changed, overwritten, or deleted. The system must also be able to detect if anyone has tampered with the audit trail.
When an amendment is accepted in an electronic system, it’s either appended directly to the affected record or linked to it so anyone viewing the original can see the correction. Denied amendments are handled the same way: the request and the denial are both attached to the record.
Late Entries and Addendums
Sometimes a record needs to be changed not because something is wrong, but because something is missing. A provider might need to add information about a visit after the chart has already been closed. These are called late entries, and they follow specific rules to maintain the record’s integrity.
A late entry must be clearly labeled as such. It carries the current date and time, not the date of the original encounter. It should reference the specific date and incident it relates to, and if the information came from an outside source, the provider should note where they obtained it. According to guidelines from Yale School of Medicine, providers should never try to make a late entry look like it was written at an earlier time. The longer the gap between the original encounter and the late entry, the less weight that documentation carries, particularly in legal proceedings.
Addendums work similarly. They supplement an existing note with additional context or clarification, bear the current date and time, include the reason for the addition, and are electronically signed by the person adding them.
Who Gets Notified After a Change
Once a record is corrected, the provider is responsible for notifying anyone who previously received the incorrect information, as long as a record of that disclosure exists. This can include other healthcare providers who received referral notes, insurance companies that processed claims based on the inaccurate data, or any other organization the information was shared with. The provider must also notify anyone you specifically identify as having received the wrong information. These notifications must go out within 30 working days of the correction being made.