Medical record retrieval costs are governed by two overlapping frameworks: federal HIPAA fee limits that apply when an individual requests their own records, and state fee schedules that apply to attorney and third-party requests. The amount a provider may charge depends primarily on who initiates the request and the format in which records are delivered. Federal enforcement through early 2026 has narrowed what providers may charge patients, while state schedules, many adjusted annually for inflation, set the rates for authorization- and subpoena-based requests.
This article reviews current retrieval costs across all 50 states and the District of Columbia, the federal baseline under HIPAA, recent enforcement activity, and the request-structuring distinctions most relevant to multi-jurisdictional record collection. Cost is only one part of retrieving records for lawyers, but it is the variable that shifts most from one jurisdiction to the next.
What Medical Record Retrieval Costs Cover
Medical record retrieval costs are the fees a healthcare provider charges to copy and deliver a patient's records. These charges arise under both federal and state law, and the governing rule depends on who is requesting the records.
When an individual requests their own records, federal HIPAA rules under 45 C.F.R. § 164.524 control:
- Fees must be reasonable and cost-based.
- Only labor for copying, supplies, and postage may be included.
- Search and retrieval charges are prohibited.
- A flat fee of up to $6.50 may be used for electronic copies, as an option rather than a cap.
When an attorney or other third party requests records under an authorization, subpoena, or court order, state fee schedules generally govern:
- Per-page, clerical, or retrieval fees may be permitted.
- Certification costs may be added.
- Some states impose maximum caps or shorter delivery deadlines.
Because these rules differ widely, retrieval costs can range from nominal electronic fees to several hundred dollars per request.
State-By-State Medical Record Fee Reference
The following table summarizes statutory medical record fee structures for all 50 states and the District of Columbia. Many states adjust per-page rates and caps annually for inflation, so figures should be confirmed against the cited authority before a request is budgeted. Where a state sets no fixed schedule, providers default to a reasonable or actual-cost standard.
In states marked "actual costs only," fees must reflect the provider's true, itemized cost of copying and delivering the records. In states marked "reasonable costs," fees must be generally proportional to the labor and materials required, without exceeding federal or state limits.
States With the Lowest Retrieval Costs
Several states impose notably lower costs, faster turnaround requirements, or clearer electronic delivery standards that make record retrieval more efficient. The benchmarks below move with each state's annual inflation adjustment.
Lowest cost:
- California: $0.25/page maximum with public-benefit exemptions.
- Maine: $150 electronic cap with a retrieval-fee prohibition.
Fastest response times:
- Colorado: roughly 10 days, among the shortest standard windows.
- New York: about 10 days, with fee waivers for benefits applications.
- California: 15 days, alongside the lowest per-page rate.
Best electronic delivery terms:
- Maryland: 75% of the paper rate, with an $80 maximum.
- Arkansas: flat $75 electronic fee in place of a higher per-page paper structure.
Federal Enforcement of HIPAA Access Fees
Federal enforcement has sharpened the line between permissible and prohibited charges. As of early 2026, the HHS Office for Civil Rights has resolved more than 50 HIPAA Right of Access matters through settlements or civil monetary penalties, with amounts ranging from $20,000 to $200,000. Nearly all turn on a provider's failure to give patients timely access at a permissible cost.
Recent matters illustrate the pattern. Oregon Health & Science University received a $200,000 civil monetary penalty, finalized in December 2024 and announced in March 2025, for failing to provide a patient's representative with timely access over a 16-month period. A New York cardiologist, Dr. Robert Glaser, was assessed a $100,000 penalty for willful neglect after failing to provide records and declining to cooperate with the investigation. In January 2025, the Florida health system Memorial Healthcare System settled a single-patient access matter for $60,000 after a roughly nine-month delay.
The governing standard is narrow. Under 45 C.F.R. § 164.524(c)(4), covered entities may recover only reasonable, cost-based fees, and labor costs may not include time spent reviewing requests or searching for and retrieving records. These limits apply to patient-initiated requests, not to third-party attorney authorizations governed by state schedules.
Patient-Initiated Versus Attorney-Initiated Requests
Because the federal and state rules above attach to the requester, who initiates a request is the single largest cost variable, and the gap is wide: an attorney-initiated request routinely runs $40 to $75 per provider, and complex matters spanning several facilities climb into the hundreds, while the same records obtained through a patient-directed request priced under the HIPAA standard often cost a fraction of that. Directing a patient request to counsel, where appropriate, can therefore convert a state-schedule charge into a cost-based one for identical records. The trade-off is procedural: patient-directed requests require the patient's signature and direction, while a subpoena or authorization gives counsel more direct control over scope and timing.
Recent State Fee Developments
State fee rules are shifting, generally toward tighter cost limits or clearer electronic-delivery standards. Maryland's 2024 amendment capped paper copies at $0.76 per page, set electronic fees at 75% of that rate with an $80 maximum, and waived fees for Social Security disability claims when records are requested by the patient or a nonprofit legal services representative.
Pennsylvania bars search and retrieval fees for patient-access requests, aligning with the federal standard, and adjusts its schedule annually for inflation; the most recent adjustment, effective January 1, 2026, reflected a 3.0% Consumer Price Index change. Texas and Missouri also recalculate their statutory hospital and copying fees each year, so figures for those states age quickly between annual schedules.
Multi-State Practice Considerations
For practices handling records across multiple jurisdictions, the mix of federal access rights and divergent state schedules is both a compliance question and a budgeting one. The current environment favors patient access while exposing providers to financial risk for non-compliant fee structures, which shapes how requests are most efficiently routed.
For multi-state practice:
- Develop jurisdiction-specific request templates.
- Budget for meaningful cost variance based on whether a request is patient- or attorney-initiated.
- Plan for delivery timelines ranging from roughly 10 days to several weeks by jurisdiction.
Fee-management approaches:
- Structure requests as patient-initiated where appropriate.
- Request electronic format to invoke favorable caps.
- Identify public-benefit exemption opportunities.
- Challenge search or retrieval fees billed on patient-access requests under the federal standard.
Cost recovery is the other half of the budgeting picture. In most jurisdictions, the provider's copying fee, third-party retrieval charges, and certification costs are recoverable as case expenses, while internal staff time, storage, and overhead are not. Under ABA Model Rule 1.5, the fee agreement should state how these expenses are handled, and a per-request log of provider, date, page count, and fee charged supports both recovery and settlement accounting. A handful of states limit recovery at trial to amounts actually paid rather than amounts billed, so what a firm advances for records is not always what it recoups.
Reducing Medical Record Retrieval Costs
Medical record retrieval costs come down to two questions: who is requesting the records, and in what format. Patient-initiated requests invoke HIPAA's cost-based limits and the optional $6.50 electronic fee, while attorney requests follow state schedules that vary widely and adjust annually. Accurate budgeting depends on confirming the current rule in each jurisdiction where records are held.
As case preparation grows more dependent on complete records, organized medical record retrieval across jurisdictions has become central to litigation readiness and to building an accurate case timeline. Legal AI tools standardize requests, apply the correct fee rules by jurisdiction, and consolidate compliant records into a single review-ready set for personal injury and medical malpractice practices.
To learn more, book a demo.
