When a personal injury or medical malpractice case involves a service member or veteran, the medical record retrieval process changes entirely. Federal custodians, the Privacy Act, and branch-specific routing rules replace the familiar provider-and-HIPAA-form workflow most legal teams rely on.
Knowing how to request medical records from military custodians means matching the correct office to the service member's status, securing proper authorization, and submitting the right form to the right portal. A misrouted request can cost weeks before case preparation even begins.
Custodianship, authorization, forms, portals, and turnaround times vary by service status and record location, and those choices affect intake on injury claims and case workflows.
Why Military Medical Records Follow Different Rules Than Civilian Records
Government custodians hold military medical records as federal property. The DoD Health Record is the property of the United States Government, which places the request process under federal statute.
Two legal frameworks govern these records simultaneously. The Privacy Act governs all military and veteran records held by DoD, the Defense Health Agency, the VA, and the National Personnel Records Center. HIPAA adds a second layer, but only for covered entities: the Military Health System and the Veterans Health Administration. Other DoD and VA components, such as the Veterans Benefits Administration, remain governed by the Privacy Act alone.
The single factor that drives the entire pathway is service status. Active-duty members, separated veterans, and deceased service members each route to different custodians with different forms and proof-of-authority requirements. Identifying status first prevents most misrouted requests.
Which Federal Custodian Holds the Records
Custodianship maps to separation date and branch. Resolve this routing before any form is drafted.
Three custodial tiers apply, keyed to when the service member separated:
- Recent separations and active members: Active-duty Service Treatment Records stay at the local military treatment facility until transfer, and current records sit in the MHS Genesis patient portal. For digital access through the DOD's milConnect portal, the branch cutoffs are Air Force separations after October 1, 2004; Army after October 1, 2002; Marine Corps after January 1, 1999; and Navy after January 1, 1995.
- Records retired to the VA: Beginning in the 1990s, the services stopped retiring health records to NPRC and sent them to the VA instead. The Army began in October 1992, the Air Force, Navy, and Marine Corps followed in 1994, and the Coast Guard in 1998. Records from this period are held at the VA Records Management Center, and the VA obtains them directly when a benefits claim is filed.
- Older separations: The NPRC holds the personnel and health records of members who separated before their branch began retiring health records to the VA. These remain restricted under the Privacy Act and FOIA until a record crosses the 62-year archival threshold, after which it opens to the public for a copying fee.
One practical caution applies to veterans pursuing VA disability claims: the VA obtains Service Treatment Records directly, so an independent request to NPRC can delay processing.
Who Is Authorized to Request Military Medical Records
Authorization depends on the requester's relationship to the service member and the supporting documentation provided. Three categories cover most legal-team scenarios, each with distinct proof requirements.
The service member or veteran may request their own records directly. The Privacy Act and DoD directives require a written request, signed and dated, submitted online through eVetRecs or by mail and fax using SF-180.
For deceased service members, next of kin may request records. The SF-180 defines next of kin as the unremarried surviving spouse, father, mother, son, daughter, brother, or sister. These requesters must supply proof of death.
Attorneys and third parties require a signed HIPAA-compliant authorization when requesting records from HIPAA-covered military or VA health systems. For VA-held records, the request must include a signed VA authorization when records are released to anyone other than the individual. Legal guardians must submit a court order proving guardianship, and agents acting under power of attorney must present a notarized POA that specifically addresses health-care matters.
A procedural point trips up many legal teams: for an NPRC legal demand to qualify, the court order or subpoena must be signed by a judge. Attorney-signed or clerk-signed subpoenas are rejected. Using a signed authorization for case preparation avoids this rejection entirely.
Required Forms and Submission Portals by Pathway
Each custodian accepts its own form set, and submitting the wrong form to the right office produces the same delay as misrouting entirely. The primary pathways correspond to the custodian and record type.
- SF 180 (Standard Form 180): Requests military service and medical records from NPRC. Submit online, by mail, or by fax to NPRC at 1 Archives Drive, St. Louis, MO 63138. Email submissions are not accepted. For NPRC requests focused on locating medical or clinical treatment records, NA Form 13042 is recommended for medical treatment records.
- VA Form 10-5345: Authorizes the VA to release health information to a third party, including an attorney. Send it to the Release of Information office at the VA facility where the veteran received care.
- VA Form 10-5345a: Used by individuals to request their own health information from a VA health facility.
- DD Form 2870: The DoD's HIPAA-compliant authorization for releasing records within the Military Health System. It is the standard DoD/MHS authorization for military treatment facility records, though civilian medical organizations may use their own release forms in lieu of DD Form 2870 where accepted.
- milConnect / DPRIS: The DoD portal where active duty, Reserve, Guard, retired members, and veterans request scanned OMPF documents. This pathway is useful for scanned Official Military Personnel File documents. Complete Service Treatment Records and VA/MTF medical records require separate requests.
VA Form 10-5345 covers VA health records released to third parties, VA Form 10-5345a covers individual self-requests, and DD Form 2870 covers military treatment facility records. A case involving both VA care and active-duty treatment requires submitting both form sets to their respective custodians.
45 C.F.R. § 164.508 requires six core elements and three required statements for a valid HIPAA authorization: a specific description of the information, the authorized discloser and recipient, the purpose, an expiration date or event, the signature and date, plus statements covering the right to revoke, conditioning, and redisclosure.
The Step-by-Step Request Process and What to Expect
A clean request follows a predictable sequence. Resolving each step in order prevents the back-and-forth that adds weeks to retrieval turnaround time.
- Identify the custodian. Map the service member's separation date and branch to NPRC, the VA Records Management Center, a military treatment facility, or the milConnect portal.
- Select the form. Use SF-180 for NPRC personnel and broad military record requests, NA Form 13042 for NPRC medical or clinical treatment record location requests, VA Form 10-5345 for VA records released to third parties, VA Form 10-5345a for an individual's own VA health-record request, or DD Form 2870 for MTF records where that form is required.
- Secure authorization. Obtain a signed, HIPAA-compliant authorization with all required elements, or a court order or subpoena signed by a judge.
- Submit in the required signature format. NPRC requests must be written, signed, and dated. Some MTF legal requests require wet-ink signatures submitted by mail; electronic or faxed signatures may be rejected under those facility rules.
- Include complete identifiers. Provide name, service number, treatment dates, and facility names to allow record location.
Turnaround varies by custodian. VA facilities target 20 business days, and pre-1998 paper records can take up to 60 calendar days, military treatment facilities typically respond within the 60-day HIPAA window, and NPRC has no fixed standard. Setting client expectations against these ranges keeps case timelines realistic.
Common rejection causes are procedural and avoidable: incomplete forms, missing or non-cursive signatures, requests dated more than a year prior, missing patient identifiers, and authorizations that fail HIPAA requirements. For older records, the 1973 NPRC fire destroyed large portions of affected Army and Air Force holdings, a gap that no form can recover.
Handling Deceased Service Members' Records
Records for a deceased service member follow the same custodian routing as living veterans, with one added requirement: proof of death. This documentation must accompany the request before any release occurs.
Next of kin may submit any of the following to establish proof of death:
- A copy of the death certificate
- A letter from the funeral home
- A published obituary or death notice
- A coroner's report of death
- A funeral director's signed statement of death
- A verdict of coroner's jury
- DD Form 1300: Casualty Report
For deceased individuals, HIPAA protects health information for 50 years after death, during which the personal representative, such as an executor or administrator, exercises the decedent's HIPAA rights. Legal teams handling wrongful death or deceased-client medical record requests should confirm the representative's authority before submitting.
The 62-year archival rule changes the analysis entirely. Once records cross that threshold, they become public, and no next-of-kin status or proof of death is required to order them for a copying fee.
How Retrieved Records Feed Case Preparation
Once records arrive from one or more custodians, the work shifts to assembling them into a usable narrative. A chronology of care is the structural backbone of personal injury and medical malpractice cases because it turns disconnected documents into a coherent sequence of events.
Military records require the same rigor as civilian matters, plus attention to system-specific gaps. Every entry should carry a direct citation to provider name, document type, and page number, and treatment gaps exceeding 30 days warrant flagging and investigation.
Coordinating Multi-Custodian Retrieval for Stronger Case Files
Military medical record retrieval rewards precision. Matching status to custodian, selecting the correct form, securing compliant authorization, and submitting in the required signature format determines whether records arrive in weeks or stall for months. The downstream chronology is only as complete as the records that feed it.
After retrieval, legal teams can organize returned records for medical record review and chronology development. Levine Benjamin, a personal injury firm managing 800–1,000 monthly medical record requests, achieved 3x faster turnaround with Tavrn. Routing requests correctly the first time and consolidating multi-custodian returns into a single workflow reduces the lag between intake and case preparation.
