Your Medical Records: The 30-Day Rule, the One Extension They Get, and Day 61

You cannot fight a bill you cannot see behind. The itemized bill shows what they charged; the medical record shows what actually happened. When the two disagree — a test on the bill that is not in the chart, a level of visit the notes do not support — the record is the evidence.

So the first move in many bill fights is a records request, and the request runs on a federal clock. The HIPAA privacy rule (45 C.F.R. § 164.524) gives you a right to see and copy your own records, and it tells the provider exactly how long it has to act.

Exhibit A: The right, and the 30-day clock

The rule says you have "a right of access to inspect and obtain a copy" of your health information in what the law calls a designated record set — the medical records and billing records a provider or health plan keeps about you. Billing records are named in it, so one request can cover the chart and the billing file.

Then the clock. The regulation says the provider "must act on a request for access no later than 30 days after receipt of the request" (45 C.F.R. § 164.524(b)(2)(i)). Three things:

1. The 30 days count from the day they receive the request, not the day you mailed it. Send it a way that proves the receipt date, or use the portal and keep the confirmation.
2. "Act on" means grant or deny in writing; silence is not an option.
3. A provider may require the request in writing, as long as it told you so. Put it in writing anyway: the paper is your proof.

If the records are kept electronically, the rule says an electronic copy must come in the form you asked for if they can readily produce it. Ask for electronic; it is usually faster and cheaper.

Exhibit B: The one extension they get

A provider that cannot meet the 30 days gets exactly one lifeline. The rule lets it extend "by no more than 30 days," but only if, within the first 30 days, it gives you "a written statement of the reasons for the delay and the date by which the covered entity will complete its action," and it "may have only one such extension" (45 C.F.R. § 164.524(b)(2)(ii)).

Read it as a checklist: valid only if written, inside the original 30 days, with a reason and a completion date. A phone call saying "we're backed up" is not an extension. And there is no second one: the longest lawful wait is 60 days from receipt.

Exhibit C: What they can charge, and what they cannot hold over you

The rule allows "a reasonable, cost-based fee" for a copy, and lists what it may include: labor for copying, supplies, postage if you asked for mail, and a summary you agreed to (45 C.F.R. § 164.524(c)(4)). A flat "retrieval fee" or a charge for searching the file is not on the list. In some states, state law caps copying fees lower than that; the lower number wins.

Just as important is what is not a reason to refuse. The rule's list of grounds for denying access is short — psychotherapy notes and a few narrow situations — and an unpaid bill is not on it. A provider cannot hold your records hostage over a balance, including the balance you requested the records to fight.

Exhibit D: Day 61

Say day 30 passes with nothing, or day 60 passes after a proper extension letter, or the promised date comes and goes. The records are now late under federal law, and the complaint path is federal too.

Complaints go to the Office for Civil Rights at the U.S. Department of Health and Human Services, the agency that enforces this rule — online or by mail. The deadline is real: a complaint "must be filed within 180 days of when the complainant knew or should have known that the act or omission complained of occurred," unless the office waives the limit for good cause (45 C.F.R. § 160.306(b)(3)). Include your request, proof of the receipt date, and any extension letter. Send the provider's privacy officer a copy too — late records often appear once a complaint exists.

Your Move

1. Ask in writing. Name what you want: visit notes, test results, and the billing records with codes. Ask for an electronic copy.
2. Mark day 30 from the date they received it.
3. If an extension letter arrives in time, mark the completion date it names. That letter is their only extension.
4. On day 61, or the day after a promised date passes, file with the Office for Civil Rights — within 180 days.

The request to pair with this one is the itemized bill — how to ask for it, and the letter.

Upload your bill and BillFighter shows which letter fits your situation, and what to do next. Check my bill, free → — the analysis is free. Personalized letters need the Fight Kit or In Your Corner.

Citations are to 45 C.F.R. § 164.524 and § 160.306. State copying-fee caps vary; check yours. BillFighter is a tool that helps you understand and fight medical bills. We're a tool, not a law firm, and this isn't legal advice.