---
title: "Medical Records Access Index 2026"
description: "A dated, citable reference to public data on medical-record access: HIPAA deadlines, compliance studies, OCR Right-of-Access enforcement, and 50-state fee-cap and retention tables with CSV downloads."
canonical: https://www.tavrn.ai/research/medical-records-access-index-2026
updated: 2026-10-30
---

# Medical Records Access Index 2026

The federal deadline for patient record requests, what public studies found about provider compliance, every OCR Right-of-Access enforcement action, and 50-state tables of copy-fee caps and hospital retention periods. Public sources only, each with its citation and access date.

Published 2026-10-30 · Last updated 2026-10-30

[Download state fee and retention CSV](https://www.tavrn.ai/research/medical-records-access-index-2026-states.csv) · [Download OCR enforcement CSV](https://www.tavrn.ai/research/medical-records-access-index-2026-ocr-right-of-access.csv)

## Key findings

Four numbers from the public record, each linked to its source below.

- **30 days** HIPAA deadline to act on a patient’s access request, with one 30-day extension [1](https://www.tavrn.ai/research/medical-records-access-index-2026#source-1)
- **56** OCR Right-of-Access enforcement actions, 2019–2026, totaling $3,677,850 [8](https://www.tavrn.ai/research/medical-records-access-index-2026#source-8)
- **59%** of 82 top-ranked hospitals quoted a 200-page record above the $6.50 federal flat-fee option [6](https://www.tavrn.ai/research/medical-records-access-index-2026#source-6)
- **11–497 days** for OCR to close 437 patient-access complaints, February 2016 to June 2017 [5](https://www.tavrn.ai/research/medical-records-access-index-2026#source-5)

HIPAA gives a covered entity 30 days to act on a patient’s own request for records, with one 30-day extension. Requests sent with a patient’s authorization, such as from a law firm, carry no federal deadline; state law sets the terms.

OCR has announced 56 Right-of-Access enforcement actions between 2019-09-09 and 2026-10-08, totaling $3,677,850; 7 were civil money penalties and the rest settlements.

Of the 50 states, 33 fee-cap rows and 30 retention rows were confirmed against statute text or two independent sources. The others are marked Unverified rather than guessed.

## How long patients and third parties legally wait

The federal clock depends on who asks. A patient’s own request runs on HIPAA’s access rule; a request made with the patient’s authorization does not.

A covered entity must act on an access request no later than 30 days after receipt, and may extend once by no more than 30 days if it gives the individual a written statement of the reasons and the completion date within the first 30 days (45 CFR 164.524(b)(2)).

In Ciox Health, LLC v. Azar (D.D.C. January 23, 2020), the court vacated the third-party directive beyond requests for an electronic copy of an electronic health record. HHS states the fee limitation in 164.524(c)(4) now applies only to an individual’s request for their own records, not to a request to transmit records to a third party.

A disclosure made under a patient’s authorization (45 CFR 164.508) is permitted, not required, so HIPAA sets no response time for it. State statutes, below, set fee caps that often cover these requests.

| Request | Federal deadline | Fee rule | Source |
| - | - | - | - |
| Patient asks for their own records | 30 days after receipt; one extension of up to 30 days with written notice | Reasonable, cost-based fee (164.524(c)(4)); flat fee up to $6.50 is one option for electronic copies of electronic records | 45 CFR 164.524(b)(2), (c)(4); HHS FAQ 2030 |
| Patient directs an electronic copy of an EHR to a third party | 30 days, as an access request | 164.524(c)(4) fee limit does not apply after Ciox | 45 CFR 164.524(c)(3)(ii); HHS Ciox notice |
| Third party with the patient’s HIPAA authorization (for example, an attorney) | None under HIPAA | State law; see fee caps below | 45 CFR 164.508 |

## How often providers miss it

Two public studies measured the gap between the rule and what patients get.

Lye et al. (JAMA Network Open, 2018) called 83 top-ranked US hospitals in 29 states as simulated patients between August and December 2017. Only 44 (53%) of authorization forms let a patient request the entire record, though all 83 said by phone they could release it. Quoted costs for a 200-page record ranged from $0.00 to $541.50, and 48 of 82 hospitals (59%) quoted above the $6.50 federal flat-fee option for electronically maintained records. Paper release times ranged from same day to 60 days, and 6 hospitals (7%) were out of line with their state’s processing-time requirement (as corrected).

GAO-18-386 (May 2018) found OCR received 583 patient-access complaints from February 2016 to June 2017 and closed 437 in that period, taking 11 to 497 days; 63% closed within 200 days. OCR’s audit reviewed patient-access policies at 103 covered entities. Patients told GAO of fees above $500 for a single request.

Neither study measures current performance; both predate OCR’s Right-of-Access Initiative, which began in 2019.

## Medical-record copy fee caps by state

What a provider may charge for copies requested by the patient or the patient’s representative, as printed in the state statute or rule. Rows link to the statute text; CPI-adjusted amounts note the year.

Unverified rows could not be confirmed against statute text or two independent sources by the access date. They show the candidate citation for follow-up and no value. Federal limits apply on top of state caps for a patient’s own request.

| State | Cap (paper) | Electronic | Citation | Source |
| - | - | - | - | - |
| Alabama | Max $1.00/page for pages 1–25, $0.50/page after; $5 search fee; actual mailing and X-ray/special record costs extra | — | [Ala. Code § 12-21-6.1](https://law.onecle.com/alabama/title-12/12-21-6.1.html) | [law.onecle.com](https://law.onecle.com/alabama/title-12/12-21-6.1.html) (accessed 2026-10-30); [albme.gov](https://www.albme.gov/resources/licensees/medical-records) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/alabama/title-12/chapter-21/article-1/division-1/division-1/section-12-21-6-1) (accessed 2026-10-30) |
| Alaska | Not confirmed (Unverified) | — | [Alaska Stat. § 18.23.005](https://www.akleg.gov/basis/statutes.asp?media=print&secEnd=18.23.005&secStart=18.23.005) | [akleg.gov](https://www.akleg.gov/basis/statutes.asp?media=print&secEnd=18.23.005&secStart=18.23.005) (accessed 2026-10-30); [nosscr.org](https://nosscr.org/article/medical-records-payment-rates-2025/) (accessed 2026-10-30) |
| Arizona | No numeric cap; provider may charge a reasonable fee and require payment in advance | — | [Ariz. Rev. Stat. § 12-2295](https://www.azleg.gov/ars/12/02295.htm) | [azleg.gov](https://www.azleg.gov/ars/12/02295.htm) (accessed 2026-10-30); [bomex.org](https://bomex.org/FAQS/faq5.html) (accessed 2026-10-30); [nosscr.org](https://nosscr.org/article/updated-state-medical-records-payment-rates) (accessed 2026-10-30) |
| Arkansas | Not confirmed (Unverified) | — | [Ark. Code Ann. § 16-46-106(b), (c)(4)](https://law.justia.com/codes/arkansas/2024/title-16/subtitle-4/chapter-46/subchapter-1/section-16-46-106) | [law.justia.com](https://law.justia.com/codes/arkansas/2024/title-16/subtitle-4/chapter-46/subchapter-1/section-16-46-106) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/arkansas/2018/title-16/subtitle-4/chapter-46/subchapter-1/section-16-46-106/) (accessed 2026-10-30) |
| California | Reasonable cost-based fee (labor, supplies, postage, summary prep); max $0.25/page paper, $0.50/page microfilm | Electronic: same cost-based fee (labor, media, postage, summary); no separate per-page cap | [Cal. Health & Safety Code § 123110](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC&sectionNum=123110) | [leginfo.legislature.ca.gov](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC&sectionNum=123110) (accessed 2026-10-30); [mbc.ca.gov](https://www.mbc.ca.gov/Resources/Medical-Resources/Access-Records.aspx) (accessed 2026-10-30); [ptbc.ca.gov](https://ptbc.ca.gov/consumers/med_records_access.shtml) (accessed 2026-10-30) |
| Colorado | Not confirmed (Unverified) | — | [C.R.S. § 25-1-801 (health-care facilities)](https://colorado.public.law/statutes/crs_25-1-801) | [colorado.public.law](https://colorado.public.law/statutes/crs_25-1-801) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/colorado/2023/title-25/administration/article-1/part-8/section-25-1-801) (accessed 2026-10-30) |
| Connecticut | Max $0.65/page, including research, handling, related costs and first-class postage; plus materials cost for x-ray copies | — | [Conn. Gen. Stat. § 20-7c(b)](https://law.justia.com/codes/connecticut/2023/title-20/chapter-369/section-20-7c) | [law.justia.com](https://law.justia.com/codes/connecticut/2023/title-20/chapter-369/section-20-7c) (accessed 2026-10-30); [cga.ct.gov](https://www.cga.ct.gov/2023/pub/chap_369.htm) (accessed 2026-10-30); [portal.ct.gov](https://portal.ct.gov/dph/practitioner-licensing--investigations/plis/access-to-medical-records) (accessed 2026-10-30) |
| Delaware | $2.00/page pp. 1–10; $1.00 pp. 11–20; $0.90 pp. 21–60; $0.50 pp. 61+; plus postage; actual cost for films/strips | Same schedule for paper or electronic records; no separate electronic cap | [24 Del. Admin. Code § 1700-16.0; 24 Del. C. § 1761](https://www.law.cornell.edu/regulations/delaware/24-Del-Admin-Code-SS-1700-16.0) | [law.cornell.edu](https://www.law.cornell.edu/regulations/delaware/24-Del-Admin-Code-SS-1700-16.0) (accessed 2026-10-30); [regulations.delaware.gov](https://regulations.delaware.gov/register/november2025/final/29%20DE%20Reg%20418%2011-01-25) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/delaware/title-24/chapter-17/subchapter-v/section-1761) (accessed 2026-10-30) |
| Florida | $1/page paper copies + sales tax and actual postage; up to $1 per year of records requested; nonpaper max $2 | Nonpaper records (e.g., X-rays): $2 maximum; no separate electronic-copy cap | [Fla. Stat. § 395.3025(1)](https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0300-0399/0395/Sections/0395.3025.html) | [leg.state.fl.us](https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0300-0399/0395/Sections/0395.3025.html) (accessed 2026-10-30); [leg.state.fl.us](https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0400/Sections/0400.145.html) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/florida/Fla-Admin-Code-Ann-R-64B8-10-003) (accessed 2026-10-30) |
| Georgia | Up to $25.88 search/retrieval; $9.70 per certification; $0.97/page pp. 1–20, $0.83 pp. 21–100, $0.66 after; plus postage | Per-page caps apply to paper records; non-paper records: reasonable reproduction cost | [O.C.G.A. § 31-33-3(a)](https://law.justia.com/codes/georgia/title-31/chapter-33/section-31-33-3) | [law.justia.com](https://law.justia.com/codes/georgia/title-31/chapter-33/section-31-33-3) (accessed 2026-10-30) |
| Hawaii | No numeric cap; requester bears the provider's reasonable costs of making copies of medical records. | — | [Haw. Rev. Stat. § 622-57(g)](https://www.capitol.hawaii.gov/hrscurrent/Vol13_Ch0601-0676/HRS0622/HRS_0622-0057.htm) | [capitol.hawaii.gov](https://www.capitol.hawaii.gov/hrscurrent/Vol13_Ch0601-0676/HRS0622/HRS_0622-0057.htm) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/hawaii/title-33/chapter-622/section-622-57) (accessed 2026-10-30); [nosscr.org](https://nosscr.org/article/state-medical-records-payment-rates-2026) (accessed 2026-10-30) |
| Idaho | Not confirmed (Unverified) | — | [S.B. 1395, 67th Leg., 2d Reg. Sess. (Idaho 2024) (proposed 39-7301)](https://legislature.idaho.gov/sessioninfo/2024/legislation/) | [legislature.idaho.gov](https://legislature.idaho.gov/sessioninfo/2024/legislation/) (accessed 2026-10-30); [legislature.idaho.gov](https://legislature.idaho.gov/sessioninfo/2025/legislation/) (accessed 2026-10-30) |
| Illinois | Handling fee up to $36.68 + postage; per page $1.38 (1–25), $0.92 (26–50), $0.46 (51+); microfilm $2.29/page (2026) | Electronic records: 50% of paper per-page rate (media included); handling fee, postage still apply | [735 ILCS 5/8-2001(d), (d-5), (h); 5/8-2006](https://www.ilga.gov/Documents/legislation/ilcs/documents/073500050K8-2001.htm) | [ilga.gov](https://www.ilga.gov/Documents/legislation/ilcs/documents/073500050K8-2001.htm) (accessed 2026-10-30); [illinoiscomptroller.gov](https://illinoiscomptroller.gov/state-agencies/accounting/statutorily-required/copying-fees-adjustments) (accessed 2026-10-30) |
| Indiana | $1.00/page for pp. 1–10, $0.50 for pp. 11–50, $0.25 for 51+; or labor fee up to $20 (then no charge first 10 pp.); plus mailing | No fee for a digital copy or interoperability-platform access to an electronic health record | [IC 16-39-9-2, -4; 760 IAC 1-71-3](https://www.law.cornell.edu/regulations/indiana/760-IAC-1-71-3) | [law.cornell.edu](https://www.law.cornell.edu/regulations/indiana/760-IAC-1-71-3) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/indiana/title-760/article-1/rule-71/section-3) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/indiana/title-16/article-39/chapter-9/section-16-39-9-2) (accessed 2026-10-30) |
| Iowa | Not confirmed (Unverified) | — | [Iowa Code § 622.10(6)](https://law.justia.com/codes/iowa/title-xv/chapter-622/section-622-10) | [law.justia.com](https://law.justia.com/codes/iowa/title-xv/chapter-622/section-622-10) (accessed 2026-10-30); [legis.iowa.gov](https://www.legis.iowa.gov/docs/code/2026/622.pdf) (accessed 2026-10-30) |
| Kansas | Not confirmed (Unverified) | — | [K.S.A. 65-6836(b)](https://ksrevisor.gov/statutes/chapters/ch65/065_068_0036.html) | [ksrevisor.gov](https://ksrevisor.gov/statutes/chapters/ch65/065_068_0036.html) (accessed 2026-10-30) |
| Kentucky | First copy free on written request; second copy capped at $1.00/page (patient, attorney or authorized representative) | — | [KRS 422.317(1); KRS 342.035(7)](https://law.justia.com/codes/kentucky/chapter-422/section-422-317) | [law.justia.com](https://law.justia.com/codes/kentucky/chapter-422/section-422-317) (accessed 2026-10-30); [apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=51281) (accessed 2026-10-30); [kyopengov.org](https://kyopengov.org/law/ag/2009/oag-09-009) (accessed 2026-10-30) |
| Louisiana | Paper: $1.00/page for pp. 1–25, $0.50 for pp. 26–350, $0.25 after; handling fee max $25; plus actual postage | Digital: same per-page rates, total capped at $100 (digital imaging media $200), plus postage | [La. R.S. 40:1165.1(A)(2)(b)](https://legis.la.gov/Legis/law.aspx?d=964709) | [legis.la.gov](https://legis.la.gov/Legis/law.aspx?d=964709) (accessed 2026-10-30) |
| Maine | Not confirmed (Unverified) | — | [22 M.R.S. § 1711-A (health care practitioners)](https://legislature.maine.gov/statutes/22/title22sec1711-a.html) | [legislature.maine.gov](https://legislature.maine.gov/statutes/22/title22sec1711-a.html) (accessed 2026-10-30); [legislature.maine.gov](https://legislature.maine.gov/statutes/22/title22sec1711.html) (accessed 2026-10-30) |
| Maryland | Up to $0.76/page + prep fee up to $22.88 + actual postage/handling; per-page fee CPI-adjusted annually | Electronic: prep fee max $22.88; per-page 75% of paper fee (max $80); actual postage/handling | [Md. Code, Health-Gen. § 4-304(c)(3)-(5)](https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=ghg&section=4-304) | [mgaleg.maryland.gov](https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=ghg&section=4-304) (accessed 2026-10-30); [mgaleg.maryland.gov](https://mgaleg.maryland.gov/2026RS/Statute_Web/ghg/4-304.pdf) (accessed 2026-10-30) |
| Massachusetts | Base charge ≤$15/request, plus $0.50/page for pages 1–100 and $0.25/page after 100; CPI-adjustable | — | [M.G.L. c. 111, § 70](https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXVI/Chapter111/Section70) | [malegislature.gov](https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXVI/Chapter111/Section70) (accessed 2026-10-30); [malegislature.gov](https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXVI/Chapter112/Section12CC) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/massachusetts/243-CMR-2-07) (accessed 2026-10-30) |
| Michigan | Paper copies: $1.00/page for pages 1–20, $0.50/page for pages 21–50, $0.20/page for pages 51+; no initial fee charged to a patient. | Non-paper formats: actual cost of preparing the duplicate (no numeric cap). | [MCL 333.26269 (2004 PA 47, § 9)](https://www.legislature.mi.gov/Laws/MCL?objectName=MCL-333-26269) | [legislature.mi.gov](https://www.legislature.mi.gov/Laws/MCL?objectName=MCL-333-26269) (accessed 2026-10-30) |
| Minnesota | Not confirmed (Unverified) | — | [Minn. Stat. § 144.292, subd. 6](https://www.revisor.mn.gov/statutes/2026/cite/144.292/pdf) | [revisor.mn.gov](https://www.revisor.mn.gov/statutes/2026/cite/144.292/pdf) (accessed 2026-10-30); [revisor.mn.gov](https://www.revisor.mn.gov/statutes/2026/cite/144.292) (accessed 2026-10-30) |
| Mississippi | $20.00 for pages 1–20; $1.00/page for next 80 pages; $0.50/page thereafter; up to 10% of total charge for postage/handling | — | [Miss. Code Ann. § 11-1-52(1), (3)](https://codes.findlaw.com/ms/title-11-civil-practice-and-procedure/ms-code-sect-11-1-52) | [codes.findlaw.com](https://codes.findlaw.com/ms/title-11-civil-practice-and-procedure/ms-code-sect-11-1-52) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/mississippi/title-11/chapter-1/section-11-1-52) (accessed 2026-10-30) |
| Missouri | Max $30.32 search/retrieval + $0.70/page; up to $28.39 more if records are in contracted off-site storage | Electronic copies: $30.32 + $0.70/page, or $132.89 total, whichever is less | [Mo. Rev. Stat. § 191.227](https://health.mo.gov/providers/hospital-standards/fees-medical-records) | [health.mo.gov](https://health.mo.gov/providers/hospital-standards/fees-medical-records) (accessed 2026-10-30); [revisor.mo.gov](https://revisor.mo.gov/main/OneSection.aspx?section=191.227) (accessed 2026-10-30) |
| Montana | Reasonable fee, max $0.50/page for paper copy or photocopy; may include up to $15 administrative search/handling fee | — | [Mont. Code Ann. § 50-16-540](https://mca.legmt.gov/bills/mca/title_0500/chapter_0160/part_0050/section_0400/0500-0160-0050-0400.html) | [mca.legmt.gov](https://mca.legmt.gov/bills/mca/title_0500/chapter_0160/part_0050/section_0400/0500-0160-0050-0400.html) (accessed 2026-10-30); [mca.legmt.gov](https://mca.legmt.gov/bills/mca/title_0500/chapter_0160/part_0050/section_0410/0500-0160-0050-0410.html) (accessed 2026-10-30); [nosscr.org](https://nosscr.org/article/medical-records-payment-rates-2025/) (accessed 2026-10-30) |
| Nebraska | Max $20 handling fee + $0.50/page copying; reasonable cost if not routinely photocopied; labor/materials for X-rays | — | [Neb. Rev. Stat. § 71-8404](https://nebraskalegislature.gov/laws/statutes.php?statute=71-8404) | [nebraskalegislature.gov](https://nebraskalegislature.gov/laws/statutes.php?statute=71-8404) (accessed 2026-10-30); [nebraskalegislature.gov](https://nebraskalegislature.gov/laws/statutes.php?statute=71-8405) (accessed 2026-10-30); [dhhs.ne.gov](https://dhhs.ne.gov/licensure/Documents/Medical%20Records.pdf) (accessed 2026-10-30) |
| Nevada | Not confirmed (Unverified) | — | [Nev. Rev. Stat. §§ 629.061, 629.062](https://law.justia.com/codes/nevada/2024/chapter-629/statute-629-061) | [law.justia.com](https://law.justia.com/codes/nevada/2024/chapter-629/statute-629-061) (accessed 2026-10-30); [codes.findlaw.com](https://codes.findlaw.com/nv/title-54-professions-occupations-and-businesses/nv-rev-st-629-062) (accessed 2026-10-30) |
| New Hampshire | Paper: $5 first page; $0.41/page pp. 2–50; $0.30/page 51+, incl. related services; free if not provided in 30 days | Electronic copies and related services: reasonable rate, not to exceed $50.00 | [N.H. Rev. Stat. § 332-I:1, I(a)-(b)](https://law.justia.com/codes/new-hampshire/title-xxx/chapter-332-i/section-332-i-1) | [law.justia.com](https://law.justia.com/codes/new-hampshire/title-xxx/chapter-332-i/section-332-i-1) (accessed 2026-10-30); [gc.nh.gov](https://gc.nh.gov/rsa/html/XXX/332-I/332-I-1.htm) (accessed 2026-10-30) |
| New Jersey | Not confirmed (Unverified) | — | [N.J. Stat. § 45:9-22.27 (health care professionals)](https://codes.findlaw.com/nj/title-26-health-and-vital-statistics/nj-st-sect-26-2h-5n) | [codes.findlaw.com](https://codes.findlaw.com/nj/title-26-health-and-vital-statistics/nj-st-sect-26-2h-5n) (accessed 2026-10-30); [pub.njleg.gov](https://pub.njleg.gov/Bills/2022/PL22/114_.HTM) (accessed 2026-10-30) |
| New Mexico | Reasonable cost-based fee: not more than $30 for first 15 pages, $0.25/page after (paper); mailing may be charged | Electronic and non-paper formats (e.g., x-rays): actual cost of reproduction; no numeric cap | [N.M. Admin. Code 16.10.17.8(B) (16.10.17.8 NMAC)](https://www.srca.nm.gov/parts/title16/16.010.0017.html) | [srca.nm.gov](https://www.srca.nm.gov/parts/title16/16.010.0017.html) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/new-mexico/N-M-Admin-Code-SS-16.10.17.8) (accessed 2026-10-30) |
| New York | Paper copies: max $0.75/page, and charges may not exceed documented costs; no charge for government-benefit records | — | [N.Y. Pub. Health Law §§ 17, 18](https://www.nysenate.gov/legislation/laws/PBH/17) | [nysenate.gov](https://www.nysenate.gov/legislation/laws/PBH/17) (accessed 2026-10-30); [health.ny.gov](https://www.health.ny.gov/professionals/patients/patient_rights/docs/you_and_your_health_records.htm) (accessed 2026-10-30); [codes.findlaw.com](https://codes.findlaw.com/ny/public-health-law/pbh-sect-17) (accessed 2026-10-30) |
| North Carolina | 75¢/page for pages 1–25; 50¢/page for 26–100; 25¢/page over 100; minimum fee up to $10.00 incl. copying | No separate electronic-copy cap in statute | [N.C. Gen. Stat. § 90-411](https://www.ncleg.gov/EnactedLegislation/Statutes/HTML/BySection/Chapter_90/GS_90-411.html) | [ncleg.gov](https://www.ncleg.gov/EnactedLegislation/Statutes/HTML/BySection/Chapter_90/GS_90-411.html) (accessed 2026-10-30); [nosscr.org](https://nosscr.org/article/state-medical-records-payment-rates-2026) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/north-carolina/chapter-90/article-29/section-90-411) (accessed 2026-10-30) |
| North Dakota | Not confirmed (Unverified) | — | [N.D. Cent. Code § 23-12-14](https://codes.findlaw.com/nd/title-23-health-and-safety/nd-cent-code-sect-23-12-14) | [codes.findlaw.com](https://codes.findlaw.com/nd/title-23-health-and-safety/nd-cent-code-sect-23-12-14) (accessed 2026-10-30); [ndlegis.gov](https://ndlegis.gov/api/assembly/62-2011/regular/documents/11-0199-03000.pdf) (accessed 2026-10-30) |
| Ohio | Patient/rep: reasonable cost-based fee; ≤$1.11/pg 1–10, $0.57/pg 11–50, $0.23/pg 51+; $1.87/pg x-ray/MRI/CT | Electronic copy to patient/rep/POA: total cost for access or transmission and related services ≤ $50 | [Ohio Rev. Code § 3701.741(B); § 3701.742](https://codes.ohio.gov/ohio-revised-code/section-3701.741) | [codes.ohio.gov](https://codes.ohio.gov/ohio-revised-code/section-3701.741) (accessed 2026-10-30) |
| Oklahoma | Not confirmed (Unverified) | — | [Okla. Stat. tit. 76, § 19](https://oklahoma.gov/content/dam/ok/en/doc/documents/policy/section-14/op140108.pdf) | [oklahoma.gov](https://oklahoma.gov/content/dam/ok/en/doc/documents/policy/section-14/op140108.pdf) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/oklahoma/title-76/section-76-19) (accessed 2026-10-30) |
| Oregon | ≤$30 for 10 or fewer pages; ≤$0.50/page for pages 11–50; ≤$0.25/page after; optional $5 if mailed in 7 business days | — | [Or. Rev. Stat. § 192.563; Or. Admin. Code § 847-012-0000(6)](https://law.justia.com/codes/oregon/volume-05/chapter-192/section-192-563) | [law.justia.com](https://law.justia.com/codes/oregon/volume-05/chapter-192/section-192-563) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-847-012-0000) (accessed 2026-10-30); [oregon.gov](https://www.oregon.gov/oblpct/Documents/BLPCT_Statutes_Pertaining.pdf) (accessed 2026-10-30) |
| Pennsylvania | Patient/personal rep.: no numeric cap; reasonable cost-based fee. Others: $2/pg 1–20, $1.48 pp 21–60, $0.52 pp 61+ | Electronic copies: fee limited to labor costs, excluding search/retrieval; no numeric cap | [55 Pa.B. 8441; 42 Pa.C.S. §§ 6152, 6152.1; 45 CFR 164.524](https://www.pacodeandbulletin.gov/Display/pabull?file=%2Fsecure%2Fpabulletin%2Fdata%2Fvol55%2F55-50%2F1680.html) | [pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/Display/pabull?file=%2Fsecure%2Fpabulletin%2Fdata%2Fvol55%2F55-50%2F1680.html) (accessed 2026-10-30); [legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/CT/HTM/42/00.061.052.001..HTM) (accessed 2026-10-30) |
| Rhode Island | Not confirmed (Unverified) | — | [R.I. Gen. Laws § 23-1-48](https://webserver.rilegislature.gov/Statutes/TITLE23/23-1/23-1-48.htm) | [webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE23/23-1/23-1-48.htm) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/rhode-island/title-23/chapter-23-1/section-23-1-48/) (accessed 2026-10-30) |
| South Carolina | Paper: 65¢/page for first 30 pages, 50¢ after; clerical fee up to $25; $200 max per admission, plus postage and tax | Electronic: same per-page rates and clerical fee; $150 max per request, plus postage and tax | [S.C. Code Ann. § 44-7-325(A)(1)(a)-(b), (d)](https://law.justia.com/codes/south-carolina/title-44/chapter-7/section-44-7-325) | [law.justia.com](https://law.justia.com/codes/south-carolina/title-44/chapter-7/section-44-7-325) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/south-carolina/title-44/chapter-115/section-44-115-80) (accessed 2026-10-30) |
| South Dakota | Paper: max $10 for first 10 pages + $0.33/page after; imaging $10 print/$15 CD; up to $18 search fee if sent to third party | Electronic copy: max $0.25/page; imaging on CD/DVD/portable media max $15 | [S.D. Codified Laws §§ 36-2-16.4, 36-2-16.5](https://sdlegislature.gov/Statutes/36-2-16.4) | [sdlegislature.gov](https://sdlegislature.gov/Statutes/36-2-16.4) (accessed 2026-10-30); [sdlegislature.gov](https://www.sdlegislature.gov/Statutes/36-2-16.5) (accessed 2026-10-30); [sdlegislature.gov](https://sdlegislature.gov/Statutes/36-2) (accessed 2026-10-30) |
| Tennessee | Not confirmed (Unverified) | — | [Tenn. Code Ann. § 63-2-102(a)(1)-(2) (2025)](https://law.justia.com/codes/tennessee/title-63/chapter-2/section-63-2-102) | [law.justia.com](https://law.justia.com/codes/tennessee/title-63/chapter-2/section-63-2-102) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/tennessee/title-68/health/chapter-11/part-3/section-68-11-304/) (accessed 2026-10-30) |
| Texas | Not confirmed (Unverified) | — | [Tex. Health & Safety Code § 241.154 (hospitals)](https://www.hhs.texas.gov/sites/default/files/documents/hospital-medical-record-fees.pdf) | [hhs.texas.gov](https://www.hhs.texas.gov/sites/default/files/documents/hospital-medical-record-fees.pdf) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/texas/health-and-safety-code/title-4/subtitle-b/chapter-241/subchapter-g/section-241-154/) (accessed 2026-10-30) |
| Utah | Not confirmed (Unverified) | — | [Utah Code § 78B-5-618 (esp. subsections (4), (5)(a)(ii), (10))](https://www.utcourts.gov/en/court-records-publications/resources/interest-rates/medical-records.html) | [utcourts.gov](https://www.utcourts.gov/en/court-records-publications/resources/interest-rates/medical-records.html) (accessed 2026-10-30); [le.utah.gov](https://le.utah.gov/xcode/Title78B/Chapter5/C78B-5-S618_2025050720250507.pdf) (accessed 2026-10-30) |
| Vermont | Greater of $5.00 or $0.50/page; free if for Social Security Act or other federal/State needs-based benefit claim | Non-paper formats (X-rays, films, disks, tapes): fee reasonably related to cost; no numeric cap | [18 V.S.A. § 9419](https://legislature.vermont.gov/statutes/section/18/221/09419) | [legislature.vermont.gov](https://legislature.vermont.gov/statutes/section/18/221/09419) (accessed 2026-10-30); [chartrequest.com](https://www.chartrequest.com/articles/state-by-state-medical-record-copying-fees) (accessed 2026-10-30) |
| Virginia | Paper: $0.50/page up to 50 pages, $0.25/page after; $1/page microfilm; search/handling ≤$20; plus postage | Electronic: $0.37/page to 50, $0.18 after; ≤$20 search; $160 total cap (requests on/after 7/1/2021) | [Va. Code Ann. § 8.01-413(B2)–(B4), (B6), (G)](https://law.lis.virginia.gov/vacode/title2.2/chapter38/section8.01-413) | [law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title2.2/chapter38/section8.01-413) (accessed 2026-10-30); [law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title8.01/section8.01-413) (accessed 2026-10-30) |
| Washington | Not confirmed (Unverified) | — | [Wash. Rev. Code § 70.02.010 (definition of "reasonable fee")](https://apps.leg.wa.gov/WAC/default.aspx?cite=246-08-400) | [apps.leg.wa.gov](https://apps.leg.wa.gov/WAC/default.aspx?cite=246-08-400) (accessed 2026-10-30); [app.leg.wa.gov](https://app.leg.wa.gov/RCW/default.aspx?cite=70.02.010&pdf=true) (accessed 2026-10-30) |
| West Virginia | Patient/rep: no numeric cap (HIPAA-consistent fee). Others: $20 search/handling + $0.40/page + postage + tax | Electronic copy (third parties): $0.20/page max; $150 total cap incl. all fees, excl. taxes | [W. Va. Code § 16-29-2](https://code.wvlegislature.gov/16-29-2) | [code.wvlegislature.gov](https://code.wvlegislature.gov/16-29-2) (accessed 2026-10-30); [code.wvlegislature.gov](https://code.wvlegislature.gov/pdf/16-29-2) (accessed 2026-10-30); [code.wvlegislature.gov](https://code.wvlegislature.gov/pdf/16-29/) (accessed 2026-10-30) |
| Wisconsin | Paper: $1.48/pg pp.1–25, $1.10 pp.26–50, $0.72 pp.51–100, $0.42 pp.101+; microfilm $2.17/pg; X-ray $14.56/image | — | [Wis. Stat. § 146.83(3f); DHS fee schedule 7/1/26–6/30/27](https://docs.legis.wisconsin.gov/code/register/2026/847a1/register/public_notices/public_notice_annual_adjustment_to_fees/public_notice_annual_adjustment_to_fees) | [docs.legis.wisconsin.gov](https://docs.legis.wisconsin.gov/code/register/2026/847a1/register/public_notices/public_notice_annual_adjustment_to_fees/public_notice_annual_adjustment_to_fees) (accessed 2026-10-30); [dhs.wisconsin.gov](https://www.dhs.wisconsin.gov/health-care-coverage/records-fees.htm) (accessed 2026-10-30) |
| Wyoming | No numeric cap; physicians may charge reasonable actual costs (copying, clerical time, review/summary time) | — | [052-3 Wyo. Code R. § 3-4(e)](https://www.law.cornell.edu/regulations/wyoming/052-3-Wyo-Code-R-SS-3-4) | [law.cornell.edu](https://www.law.cornell.edu/regulations/wyoming/052-3-Wyo-Code-R-SS-3-4) (accessed 2026-10-30); [wyoleg.gov](https://wyoleg.gov/statutes/compress/title35.pdf) (accessed 2026-10-30) |

## Hospital-record retention periods by state

The minimum time a hospital must keep an adult patient’s record, and the rule for minors where the state sets one.

Where a state has no hospital-specific rule in statute or regulation that we could confirm, the row is marked Unverified. Retention floors are minimums; federal programs, litigation holds and accreditation can require longer.

| State | Hospitals | Minors | Citation | Source |
| - | - | - | - | - |
| Alabama | At least 5 years (original or legally reproduced form) | Minors: at least 5 years after reaching age of majority | [Ala. Admin. Code r. 420-5-7-.13(3)(a)](https://admincode.legislature.state.al.us/api/rule/420-5-7-.13) | [admincode.legislature.state.al.us](https://admincode.legislature.state.al.us/api/rule/420-5-7-.13) (accessed 2026-10-30) |
| Alaska | 7 years after discharge (unless department specifies otherwise); X-ray film 5 years. | Minors (under 19): until 2 years after age 19 or 7 years after discharge, whichever is longer. | [AS 18.20.085(a)](https://law.justia.com/codes/alaska/title-18/chapter-20/article-1/section-18-20-085) | [law.justia.com](https://law.justia.com/codes/alaska/title-18/chapter-20/article-1/section-18-20-085) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/alaska/2011/title18/chapter18-20/sec-18-20-085) (accessed 2026-10-30) |
| Arizona | Not confirmed (Unverified) | — | [A.R.S. § 12-2297(A)(1)-(2)](https://www.azleg.gov/ars/12/02297.htm) | [azleg.gov](https://www.azleg.gov/ars/12/02297.htm) (accessed 2026-10-30) |
| Arkansas | Not confirmed (Unverified) | — | [20 CAR § 41-113(a)(19) (also 20 CAR § 43-113(a)(19))](https://codeofarrules.arkansas.gov/Rules/Rule?chapterID=32&levelType=section&partID=1263&sectionID=50252&subChapterID=44&subPartID=7680&titleID=20) | [codeofarrules.arkansas.gov](https://codeofarrules.arkansas.gov/Rules/Rule?chapterID=32&levelType=section&partID=1263&sectionID=50252&subChapterID=44&subPartID=7680&titleID=20) (accessed 2026-10-30) |
| California | General acute care hospitals: keep patient records, incl. X-ray films, at least 7 years after discharge. | Unemancipated minors: until at least 1 year after age 18, and never less than 7 years. | [Cal. Code Regs. tit. 22, § 70751(c)](https://www.law.cornell.edu/regulations/california/22-CCR-70751) | [law.cornell.edu](https://www.law.cornell.edu/regulations/california/22-CCR-70751) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/california/22-CCR-71551) (accessed 2026-10-30) |
| Colorado | Not confirmed (Unverified) | — | [6 CCR 1011-1, Chapter 04 (Hospital Licensure), Part 10, §§ 10.6(A)-(B)](https://www.law.cornell.edu/regulations/colorado/title-6/agency-1011/division-1/chapter-04/part-10) | [law.cornell.edu](https://www.law.cornell.edu/regulations/colorado/title-6/agency-1011/division-1/chapter-04/part-10) (accessed 2026-10-30); [desertriversolutions.com](https://desertriversolutions.com/medical-records-custodian-in-colorado) (accessed 2026-10-30) |
| Connecticut | Minimum 10 years after discharge (short-term general and special hospitals); records must be filed accessibly | — | [Regs. Conn. State Agencies § 19-13-D3(d)(6)](https://eregulations.ct.gov/eRegsPortal/Browse/getDocument?guid=%7B7089F892-0000-C216-BC72-121CFECB1E18%7D) | [eregulations.ct.gov](https://eregulations.ct.gov/eRegsPortal/Browse/getDocument?guid=%7B7089F892-0000-C216-BC72-121CFECB1E18%7D) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/connecticut/Regs-Conn-State-Agencies-SS-19-13-D3) (accessed 2026-10-30) |
| Delaware | Not confirmed (Unverified) | — | [16 Del. Admin. Code § 3340-11.6](https://www.law.cornell.edu/regulations/delaware/16-Del-Admin-Code-SS-3340-11.0) | [law.cornell.edu](https://www.law.cornell.edu/regulations/delaware/16-Del-Admin-Code-SS-3340-11.0) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/delaware/16-Del-Admin-Code-SS-3355-11.0) (accessed 2026-10-30) |
| Florida | Not confirmed (Unverified) | — | [Fla. Admin. Code r. 64B8-10.002 (physicians, general provider rule)](https://flrules.elaws.us/fac/64b8-10.002) | [flrules.elaws.us](https://flrules.elaws.us/fac/64b8-10.002) (accessed 2026-10-30); [ecfr.gov](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24) (accessed 2026-10-30) |
| Georgia | Hospitals must retain records at least 5 years after the patient's discharge. | Minors: records retained at least 5 years past the age of majority. | [Ga. Comp. R. & Regs. 111-8-40-.18(1)(h)](https://rules.sos.ga.gov/GAC/111-8-40) | [rules.sos.ga.gov](https://rules.sos.ga.gov/GAC/111-8-40) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/georgia/title-31/chapter-33/section-31-33-2) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/georgia/Ga-Comp-R-Regs-R-111-8-40-.18) (accessed 2026-10-30) |
| Hawaii | Not confirmed (Unverified) | — | [Haw. Rev. Stat. § 622-58(a)](https://www.capitol.hawaii.gov/hrscurrent/Vol13_Ch0601-0676/HRS0622/HRS_0622-0058.htm) | [capitol.hawaii.gov](https://www.capitol.hawaii.gov/hrscurrent/Vol13_Ch0601-0676/HRS0622/HRS_0622-0058.htm) (accessed 2026-10-30); [codes.findlaw.com](https://codes.findlaw.com/hi/division-4-courts-and-judicial-proceedings/hi-rev-st-sect-622-58) (accessed 2026-10-30) |
| Idaho | Not confirmed (Unverified) | — | [Idaho Code § 39-1394(1)(b)-(d)](https://codes.findlaw.com/id/title-39-health-and-safety/id-st-sect-39-1394) | [codes.findlaw.com](https://codes.findlaw.com/id/title-39-health-and-safety/id-st-sect-39-1394) (accessed 2026-10-30); [legislature.idaho.gov](https://legislature.idaho.gov/statutesrules/idstat/title39/t39ch13/sect39-1394) (accessed 2026-10-30) |
| Illinois | At least 10 years; if timely attorney notice of litigation, until case-conclusion notice or 12 years, whichever first | No separate minors rule for hospitals; the 10-year minimum applies | [210 ILCS 85/6.17(c); 77 Ill. Adm. Code 250.1510](https://www.ilga.gov/Documents/legislation/ilcs/documents/021000850K6.17.htm) | [ilga.gov](https://www.ilga.gov/Documents/legislation/ilcs/documents/021000850K6.17.htm) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/illinois/chapter-210/act-210-ilcs-85) (accessed 2026-10-30); [ilga.gov](https://www.ilga.gov/commission/jcar/admincode/077/077002500L15100R.html) (accessed 2026-10-30) |
| Indiana | At least 7 years (original health records or microfilms); statute does not specify when the 7 years begin | — | [Ind. Code § 16-39-7-1(b)](https://iga.in.gov/ic/2026/Title_16/Article_39/Chapter_7.pdf) | [iga.in.gov](https://iga.in.gov/ic/2026/Title_16/Article_39/Chapter_7.pdf) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/indiana/410-IAC-15-1.5-4) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/indiana/title-16/article-39/chapter-7/section-16-39-7-1) (accessed 2026-10-30) |
| Iowa | Not confirmed (Unverified) | — | [Iowa Admin. Code r. 653—13.7(8)](https://www.legis.iowa.gov/docs/iac/chapter/04-01-2026.481.655.pdf) | [legis.iowa.gov](https://www.legis.iowa.gov/docs/iac/chapter/04-01-2026.481.655.pdf) (accessed 2026-10-30); [legis.iowa.gov](https://www.legis.iowa.gov/docs/iac/rule/02-05-2025.653.13.7.pdf) (accessed 2026-10-30) |
| Kansas | Hospitals must keep each medical record 10 years after the patient's last discharge. | Minors: until 1 year after reaching age of majority, or 10 years after last discharge, whichever is longer. | [K.A.R. 28-34-9a(d)(1)](https://www.law.cornell.edu/regulations/kansas/K-A-R-28-34-9a) | [law.cornell.edu](https://www.law.cornell.edu/regulations/kansas/K-A-R-28-34-9a) (accessed 2026-10-30); [kmsonline.org](https://kmsonline.org/resources/practice-operations/25-medical-records/129-requirements-for-retention-of-records) (accessed 2026-10-30) |
| Kentucky | Not confirmed (Unverified) | — | [902 KAR 20:016](https://apps.legislature.ky.gov/law/kar/titles/902/020/360) | [apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/kar/titles/902/020/360) (accessed 2026-10-30); [apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/kar/titles/902/020/016) (accessed 2026-10-30) |
| Louisiana | Not confirmed (Unverified) | — | [La. R.S. 40:2144(F)](https://www.law.cornell.edu/regulations/louisiana/La-Admin-Code-tit-48-SS-I-9395) | [law.cornell.edu](https://www.law.cornell.edu/regulations/louisiana/La-Admin-Code-tit-48-SS-I-9395) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/louisiana/title-48/part-i/subpart-3/chapter-45/subchapter-e/section-i-4569) (accessed 2026-10-30) |
| Maine | Hospital records must be retained for 7 years. | Minors: at least 6 years after reaching the age of majority. | [10-144 C.M.R. ch. 112, § 3.5.5](https://www.law.cornell.edu/regulations/maine/10-144-C-M-R-ch-112-SS-3) | [law.cornell.edu](https://www.law.cornell.edu/regulations/maine/10-144-C-M-R-ch-112-SS-3) (accessed 2026-10-30); [maine.gov](https://www.maine.gov/dhhs/sites/maine.gov.dhhs/files/rule-2026-09/10-144%20Ch%20112%20Proposed%20Rule.pdf) (accessed 2026-10-30); [healthinfolaw.org](https://www.healthinfolaw.org/state-topics/20%2C60) (accessed 2026-10-30) |
| Maryland | 7 years after the record is made, unless the patient is notified before destruction | Minors: retain until age 18 + 7 years (age 25), unless parent or guardian is notified | [Md. Code, Health-Gen. §4-403(a)(1), (b), (c)](https://health.maryland.gov/mbpme/Pages/records.aspx) | [health.maryland.gov](https://health.maryland.gov/mbpme/Pages/records.aspx) (accessed 2026-10-30); [mgaleg.maryland.gov](https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=ghg&section=4-403) (accessed 2026-10-30) |
| Massachusetts | 20 years after discharge or final treatment of the patient | — | [M.G.L. c. 111, § 70; 105 CMR 130.370](https://www.law.cornell.edu/regulations/massachusetts/105-CMR-130-370) | [law.cornell.edu](https://www.law.cornell.edu/regulations/massachusetts/105-CMR-130-370) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/massachusetts/105-cmr/title-105-cmr-140-000/subpart-c/administration/section-140-302) (accessed 2026-10-30); [mass.gov](https://www.mass.gov/info-details/medical-records-obligations) (accessed 2026-10-30) |
| Michigan | 7 years from date of service; 15 years if penetration services or sexual misconduct complaint | No separate minors rule; 7 years runs from date of service | [MCL 333.20175(2)(a)-(b); see MCL 333.16213](https://www.legislature.mi.gov/Laws/MCL?objectName=mcl-333-20175) | [legislature.mi.gov](https://www.legislature.mi.gov/Laws/MCL?objectName=mcl-333-20175) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/michigan/chapter-333/statute-act-368-of-1978/article-17/division-368-1978-17-201/section-333-20175) (accessed 2026-10-30) |
| Minnesota | 7 years; portions forming the permanent medical record must be retained as authorized in Minn. Stat. § 145.30 | Minors: all portions kept 7 years or until age of majority, whichever is later | [Minn. Stat. § 145.32, subd. 1](https://www.revisor.mn.gov/statutes/cite/145.32/pdf) | [revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/145.32/pdf) (accessed 2026-10-30); [revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/145.32) (accessed 2026-10-30); [codes.findlaw.com](https://codes.findlaw.com/mn/health-ch-144-159/mn-st-sect-145-32) (accessed 2026-10-30) |
| Mississippi | 10 years from patient discharge; images/X-ray films 3 years from discharge, longer if patient requests in writing | No separate minors retention period; parent/guardian may obtain unemancipated minor's (<18) records without minor's consent | [Miss. Code Ann. § 41-9-69 (Laws 2024, ch. 533)](https://billstatus.ls.state.ms.us/documents/2024/html/SB/2800-2899/SB2873SG.htm) | [billstatus.ls.state.ms.us](https://billstatus.ls.state.ms.us/documents/2024/html/SB/2800-2899/SB2873SG.htm) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/mississippi/title-41/chapter-9/hospital-records-preparation-preservation-and-destruction/section-41-9-69) (accessed 2026-10-30) |
| Missouri | Not confirmed (Unverified) | — | [19 CSR 30-20(17)](https://www.law.cornell.edu/regulations/missouri/19-CSR-30-20-015) | [law.cornell.edu](https://www.law.cornell.edu/regulations/missouri/19-CSR-30-20-015) (accessed 2026-10-30); [sos.mo.gov](https://www.sos.mo.gov/CMSImages/AdRules/csr/previous/19csr/19csr1023/19c30-20.pdf) (accessed 2026-10-30) |
| Montana | Minimum 10 years after discharge or death (entire record); imaging film and electrodiagnostic tracings 5 years | Minors: minimum 10 years after reaching age of majority or death, if earlier | [Mont. Admin. R. 37.106.402; §§ 50-5-103, 50-5-404, MCA](https://www.law.cornell.edu/regulations/montana/Mont-Admin-r-37.106.402) | [law.cornell.edu](https://www.law.cornell.edu/regulations/montana/Mont-Admin-r-37.106.402) (accessed 2026-10-30); [state-rules.com](https://state-rules.com/montana/arm/37.106.402) (accessed 2026-10-30); [dphhs.mt.gov](https://dphhs.mt.gov/assets/oig/HOSMin2025.pdf) (accessed 2026-10-30) |
| Nebraska | Not confirmed (Unverified) | — | [175 Neb. Admin. Code ch. 1, § 008.03](https://govdocs.nebraska.gov/epubs/H8310/R175.0001-2023.pdf) | [govdocs.nebraska.gov](https://govdocs.nebraska.gov/epubs/H8310/R175.0001-2023.pdf) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/nebraska/health-and-human-services-system/title-471/chapter-10/section-471-10-008) (accessed 2026-10-30) |
| Nevada | At least 5 years (original or legally reproduced form); medical staff may designate items for at least 10 years. | Records of patients under age 23 may not be destroyed; retain until age 23 and at least 5 years. | [Nev. Admin. Code § 449.379(4); Nev. Rev. Stat. § 629.051](https://regulations.justia.com/states/nevada/chapter-449/hospitals/policies-and-procedures-for-operation-of-hospital/section-449-379) | [regulations.justia.com](https://regulations.justia.com/states/nevada/chapter-449/hospitals/policies-and-procedures-for-operation-of-hospital/section-449-379) (accessed 2026-10-30); [leg.state.nv.us](https://www.leg.state.nv.us/nac/nac-449.html) (accessed 2026-10-30); [nevada.public.law](https://nevada.public.law/statutes/nrs_629.051) (accessed 2026-10-30) |
| New Hampshire | 7 years after patient discharge | Minors: until at least 1 year after age 18, but never less than 7 years after discharge | [N.H. Code Admin. R. He-P 802.20(g)](https://www.law.cornell.edu/regulations/new-hampshire/N-H-Admin-Code-SS-He-P-802.20) | [law.cornell.edu](https://www.law.cornell.edu/regulations/new-hampshire/N-H-Admin-Code-SS-He-P-802.20) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/new-hampshire/he/subtitle-he-p/chapter-he-p-800/part-he-p-802/section-he-p-802-20) (accessed 2026-10-30); [recordinglaw.com](https://www.recordinglaw.com/us-laws/medical-records-retention/new-hampshire-medical-records-retention-laws) (accessed 2026-10-30) |
| New Jersey | Retain 10 yrs after most recent discharge or until age 23, whichever is longer; discharge summary 20 yrs; X-rays 5 yrs | Minors: until age 23 or 10 yrs after most recent discharge, whichever is longer | [N.J.S.A. 26:8-5; N.J.A.C. 8:43G-15.2(h)](https://law.justia.com/codes/new-jersey/title-26/section-26-8-5) | [law.justia.com](https://law.justia.com/codes/new-jersey/title-26/section-26-8-5) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/new-jersey/title-8/chapter-43g/subchapter-15/section-8-43g-15-2) (accessed 2026-10-30) |
| New Mexico | 10 years after the patient's last discharge (hospital licensing rule: 10 years after last treatment date) | Minors: records kept until age of majority plus 1 year (hospital licensing rule) | [NMSA 1978 § 14-6-2(A); 8.370.12.30(B)(2) NMAC](https://law.justia.com/codes/new-mexico/chapter-14/article-6/section-14-6-2) | [law.justia.com](https://law.justia.com/codes/new-mexico/chapter-14/article-6/section-14-6-2) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/new-mexico/N-M-Admin-Code-SS-8.370.12.30) (accessed 2026-10-30); [srca.nm.gov](https://www.srca.nm.gov/parts/title16/16.010.0017.html) (accessed 2026-10-30) |
| New York | At least 6 years from discharge, or at least 6 years after the patient's death | Minors: 6 years from discharge or 3 years after reaching age 18 (age 21), whichever is longer | [10 NYCRR § 405.10(a)(4)](<https://govt.westlaw.com/nycrr/Document/I4fe3bd5bcd1711dda432a117e6e0f345?contextData=(sc.Default)&transitionType=Default>) | [govt.westlaw.com](<https://govt.westlaw.com/nycrr/Document/I4fe3bd5bcd1711dda432a117e6e0f345?contextData=(sc.Default)&transitionType=Default>) (accessed 2026-10-30); [archives.nysed.gov](https://www.archives.nysed.gov/records/laws-and-regulations-related-to-records) (accessed 2026-10-30); [regs.health.ny.gov](https://regs.health.ny.gov/content/section-40510-medical-records) (accessed 2026-10-30) |
| North Carolina | 11 years following discharge of an adult patient | Minors: until 30th birthday; if readmitted as an adult, the adult 11-year rule applies | [10A N.C. Admin. Code 13B .3903](http://ncrules.state.nc.us/ncac/title%2010a%20-%20health%20and%20human%20services/chapter%2013%20-%20nc%20medical%20care%20commission/subchapter%20b/10a%20ncac%2013b%20.3903.html) | [ncrules.state.nc.us](http://ncrules.state.nc.us/ncac/title%2010a%20-%20health%20and%20human%20services/chapter%2013%20-%20nc%20medical%20care%20commission/subchapter%20b/10a%20ncac%2013b%20.3903.html) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/north-carolina/10A-N-C-Admin-Code-13B-3903) (accessed 2026-10-30); [reports.oah.state.nc.us](http://reports.oah.state.nc.us/ncac/title%2010a%20-%20health%20and%20human%20services/chapter%2013%20-%20nc%20medical%20care%20commission/subchapter%20b/10a%20ncac%2013b%20.3903.pdf) (accessed 2026-10-30) |
| North Dakota | Not confirmed (Unverified) | — | [N.D. Cent. Code § 43-17-27.2(1)](https://ndlegis.gov/cencode/t43c17.pdf) | [ndlegis.gov](https://ndlegis.gov/cencode/t43c17.pdf) (accessed 2026-10-30); [ndlegis.gov](https://ndlegis.gov/prod/acdata/pdf/50-01-03.pdf) (accessed 2026-10-30) |
| Ohio | Not confirmed (Unverified) | — | [Ohio Admin. Code 3701-83-11(F)](http://codes.ohio.gov/ohio-administrative-code/rule-3701-83-11) | [codes.ohio.gov](http://codes.ohio.gov/ohio-administrative-code/rule-3701-83-11) (accessed 2026-10-30); [codes.ohio.gov](http://codes.ohio.gov/ohio-administrative-code/rule-3701-22-29) (accessed 2026-10-30) |
| Oklahoma | 7 years minimum (statute); Dept. of Health rule: 5 years after last seen, or 3 years after death | Newborns/minors: 3 years past age of majority (OAC 310:667-19-14(a)) | [Okla. Stat. tit. 63, § 1-739; OAC 310:667-19-14(a)](https://law.justia.com/codes/oklahoma/title-63/section-63-1-739) | [law.justia.com](https://law.justia.com/codes/oklahoma/title-63/section-63-1-739) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/oklahoma/OAC-310-667-19-14) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/oklahoma/2024/title-63/section-63-1-739) (accessed 2026-10-30) |
| Oregon | Hospital records must be retained at least 10 years after discharge | — | [OAR 333-505-0050(14)](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-333-505-0050) | [law.cornell.edu](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-333-505-0050) (accessed 2026-10-30); [secure.sos.state.or.us](https://secure.sos.state.or.us/oard/displayDivisionRules.action?selectedDivision=1365) (accessed 2026-10-30); [regulations.justia.com](https://regulations.justia.com/states/oregon/chapter-333/division-505/section-333-505-0050) (accessed 2026-10-30) |
| Pennsylvania | 7 years following patient discharge (original, reproduction or microfilm form) | Minors: until majority, then 7 more years or as long as adult records are maintained | [28 Pa. Code § 115.23](https://www.pacodeandbulletin.gov/Display/pacode?file=%2Fsecure%2Fpacode%2Fdata%2F028%2Fchapter115%2Fs115.23.html) | [pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/Display/pacode?file=%2Fsecure%2Fpacode%2Fdata%2F028%2Fchapter115%2Fs115.23.html) (accessed 2026-10-30); [recordinglaw.com](https://www.recordinglaw.com/us-laws/medical-records-retention/pennsylvania-medical-records-retention-laws) (accessed 2026-10-30) |
| Rhode Island | Hospital medical records: retain 5 years | Minors: retain until 5 years after the patient reaches age 18 | [216-RICR-40-10-4 § 4.6.10; R.I. Gen. Laws § 23-3-26](https://www.law.cornell.edu/regulations/rhode-island/216-RICR-40-10-4.6) | [law.cornell.edu](https://www.law.cornell.edu/regulations/rhode-island/216-RICR-40-10-4.6) (accessed 2026-10-30); [rules.sos.ri.gov](https://rules.sos.ri.gov/regulations/part/216-40-10-4) (accessed 2026-10-30) |
| South Carolina | Not confirmed (Unverified) | — | [S.C. Code Ann. § 44-115-120 (Physicians' Patient Records Act)](https://www.scstatehouse.gov/code/t44c115.php) | [scstatehouse.gov](https://www.scstatehouse.gov/code/t44c115.php) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/south-carolina/title-44/chapter-115/section-44-115-120) (accessed 2026-10-30) |
| South Dakota | 10 years from the actual visit date of service or patient care; later visits do not extend the period | Minors: until age 18 plus 2 years, but no less than 10 years from date of service or patient care | [ARSD 44:75:09:06; SDCL 34-12-13(10)](https://sdlegislature.gov/api/Rules/44:75:09:06.html) | [sdlegislature.gov](https://sdlegislature.gov/api/Rules/44:75:09:06.html) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/south-dakota/ARSD-44-75-09-06) (accessed 2026-10-30); [sdlegislature.gov](https://sdlegislature.gov/Rules/Administrative/44:75:09) (accessed 2026-10-30) |
| Tennessee | 10 years after patient's discharge or death during treatment, unless the board specifies otherwise | Minors/mentally disabled: minority or disability period +1 yr, or 10 yrs after discharge if longer | [Tenn. Code Ann. § 68-11-305(a)(1)-(2)](https://law.justia.com/codes/tennessee/title-68/health/chapter-11/part-3/section-68-11-305/) | [law.justia.com](https://law.justia.com/codes/tennessee/title-68/health/chapter-11/part-3/section-68-11-305/) (accessed 2026-10-30); [law.justia.com](https://law.justia.com/codes/tennessee/2024/title-68/health/chapter-11/part-3/section-68-11-305) (accessed 2026-10-30) |
| Texas | Hospitals may dispose of records on/after the 10th anniversary of last treatment; not while litigation is unresolved. | Minors: disposal allowed at 20th birthday or 10 years after last treatment, whichever is later | [Tex. Health & Safety Code § 241.103](https://codes.findlaw.com/tx/health-and-safety-code/health-safety-sect-241-103) | [codes.findlaw.com](https://codes.findlaw.com/tx/health-and-safety-code/health-safety-sect-241-103) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/texas/22-Tex-Admin-Code-SS-163-2) (accessed 2026-10-30) |
| Utah | Not confirmed (Unverified) | — | [Utah Admin. Code R432-100-34 (Medical Records), General Hospital Standards](https://rules.utah.gov/publicat/code/r432/r432-100.htm) | [rules.utah.gov](https://rules.utah.gov/publicat/code/r432/r432-100.htm) (accessed 2026-10-30) |
| Vermont | Not confirmed (Unverified) | — | [18 V.S.A. § 1905(8)](http://legislature.vermont.gov/Documents/2026/Docs/BILLS/S-0163/S-0163%20As%20Passed%20by%20the%20Senate%20Unofficial.pdf) | [legislature.vermont.gov](http://legislature.vermont.gov/Documents/2026/Docs/BILLS/S-0163/S-0163%20As%20Passed%20by%20the%20Senate%20Unofficial.pdf) (accessed 2026-10-30); [healthinfolaw.org](https://www.healthinfolaw.org/comparative-analysis/medical-record-retention-required-health-care-providers-50-state-comparison) (accessed 2026-10-30) |
| Virginia | At least 5 years after patient discharge (original or accurate reproduction); birth and death information 10 years | Minors: at least 5 years after reaching age 18 | [12VAC5-410-370(F); 12VAC5-410-1260(C)](https://www.law.cornell.edu/regulations/virginia/12VAC5-410-370) | [law.cornell.edu](https://www.law.cornell.edu/regulations/virginia/12VAC5-410-370) (accessed 2026-10-30); [law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section370) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/virginia/12VAC5-410-1260) (accessed 2026-10-30) |
| Washington | 26 years from date record created; applies to records held as of July 27, 2025, whenever created | Minors: no separate rule; 26-year period applies to all records | [RCW 70.41.190(1)](https://app.leg.wa.gov/RCW/default.aspx?Cite=70.41.190) | [app.leg.wa.gov](https://app.leg.wa.gov/RCW/default.aspx?Cite=70.41.190) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/washington/WAC-246-322-200) (accessed 2026-10-30) |
| West Virginia | Not confirmed (Unverified) | — | [W. Va. Code R. § 64-12-7.2.6](https://www.law.cornell.edu/regulations/west-virginia/W-Va-C-S-R-SS-64-12-7) | [law.cornell.edu](https://www.law.cornell.edu/regulations/west-virginia/W-Va-C-S-R-SS-64-12-7) (accessed 2026-10-30); [recordinglaw.com](https://www.recordinglaw.com/us-laws/medical-records-retention/west-virginia-medical-records-retention-laws) (accessed 2026-10-30) |
| Wisconsin | Not confirmed (Unverified) | — | [Wis. Admin. Code Med 21.03(1)](https://docs.legis.wisconsin.gov/code/admin_code/med/21/03/1) | [docs.legis.wisconsin.gov](https://docs.legis.wisconsin.gov/code/admin_code/med/21/03/1) (accessed 2026-10-30); [docs.legis.wisconsin.gov](https://docs.legis.wisconsin.gov/code/admin_code/med/21) (accessed 2026-10-30) |
| Wyoming | Not confirmed (Unverified) | — | [048-12 Wyo. Code R. § 12-23(c)](https://health.wyo.gov/wp-content/uploads/2023/03/FINAL-SOS-CH-12-21552.pdf) | [health.wyo.gov](https://health.wyo.gov/wp-content/uploads/2023/03/FINAL-SOS-CH-12-21552.pdf) (accessed 2026-10-30); [law.cornell.edu](https://www.law.cornell.edu/regulations/wyoming/048-3-Wyo-Code-R-SSSS-3-8) (accessed 2026-10-30) |

## OCR Right-of-Access enforcement actions

Every Right-of-Access action OCR announced from 2019-09-09 to 2026-10-08, by calendar year of announcement.

A settlement is a resolution agreement with a payment and a corrective action plan. A civil money penalty is imposed by OCR after the entity does not resolve the matter. Amounts are as stated in each HHS announcement; batch announcements are split into one row per entity.

| Year | Actions |
| - | - |
| 2019 | 2 |
| 2020 | 11 |
| 2021 | 12 |
| 2022 | 17 |
| 2023 | 4 |
| 2024 | 5 |
| 2025 | 3 |
| 2026 | 2 |

| Date | Entity | Amount | Kind | Source |
| - | - | - | - | - |
| 2019-09-09 | Bayfront Health St. Petersburg | $85,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/bayfront/index.html) |
| 2019-12-12 | Korunda Medical, LLC | $85,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/korunda/index.html) |
| 2020-09-15 | All Inclusive Medical Services, Inc. | $15,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/right-of-access-initiative/index.html) |
| 2020-09-15 | Beth Israel Lahey Health Behavioral Services | $70,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/right-of-access-initiative/index.html) |
| 2020-09-15 | Housing Works, Inc. | $38,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/right-of-access-initiative/index.html) |
| 2020-09-15 | King MD | $3,500 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/right-of-access-initiative/index.html) |
| 2020-09-15 | Wise Psychiatry, PC | $10,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/right-of-access-initiative/index.html) |
| 2020-10-07 | Dignity Health d/b/a St. Joseph's Hospital and Medical Center | $160,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/sjhmc/index.html) |
| 2020-10-09 | NY Spine Medicine | $100,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/nyspine/index.html) |
| 2020-11-06 | Riverside Psychiatric Medical Group | $25,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/riverside/index.html) |
| 2020-11-12 | Dr. Rajendra Bhayani | $15,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/bhayani/index.html) |
| 2020-11-19 | University of Cincinnati Medical Center, LLC | $65,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/ucmc/index.html) |
| 2020-12-22 | Peter Wrobel, M.D., P.C. d/b/a Elite Primary Care | $36,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/elite-primary-care/index.html) |
| 2021-01-12 | Banner Health | $200,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/banner/index.html) |
| 2021-02-10 | Renown Health, P.C. | $75,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/renown/index.html) |
| 2021-02-12 | Sharp HealthCare d/b/a Sharp Rees-Stealy Medical Centers | $70,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/sharp/index.html) |
| 2021-03-24 | The Arbour, Inc. d/b/a Arbour Hospital | $65,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/arbour/index.html) |
| 2021-03-26 | Village Plastic Surgery | $30,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/vps/index.html) |
| 2021-06-02 | Diabetes, Endocrinology & Lipidology Center, Inc. | $5,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/delc/index.html) |
| 2021-09-10 | Children's Hospital & Medical Center | $80,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/chmc/index.html) |
| 2021-11-30 | Advanced Spine & Pain Management | $32,150 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2021-right-of-access-initiative/index.html) |
| 2021-11-30 | Denver Retina Center | $30,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2021-right-of-access-initiative/index.html) |
| 2021-11-30 | Dr. Robert Glaser | $100,000 | civil money penalty | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2021-right-of-access-initiative/index.html) |
| 2021-11-30 | Rainrock Treatment Center, LLC d/b/a Monte Nido Rainrock | $160,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2021-right-of-access-initiative/index.html) |
| 2021-11-30 | Wake Health Medical Group | $10,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2021-right-of-access-initiative/index.html) |
| 2022-03-28 | Donald B. Brockley, D.M.D. | $30,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/march-2022-hipaa-enforcement/index.html) |
| 2022-03-28 | Jacob & Associates | $28,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/march-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | ACPM Podiatry | $100,000 | civil money penalty | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Associated Retina Specialists | $22,500 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Coastal Ear, Nose, and Throat | $20,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Danbury Psychiatric Consultants | $3,500 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Erie County Medical Center Corporation | $50,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Fallbrook Family Health Center | $30,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Hillcrest Nursing and Rehabilitation | $55,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Lawrence Bell, Jr., D.D.S. | $5,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | MelroseWakefield Healthcare | $55,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Memorial Hermann Health System | $240,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-07-15 | Southwest Surgical Associates | $65,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) |
| 2022-09-20 | B. Steven L. Hardy, D.D.S., LTD (Paradise Family Dental) | $25,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/september-2022-right-of-access-initiative/index.html) |
| 2022-09-20 | Family Dental Care, P.C. | $30,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/september-2022-right-of-access-initiative/index.html) |
| 2022-09-20 | Great Expressions Dental Center of Georgia, P.C. | $80,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/september-2022-right-of-access-initiative/index.html) |
| 2022-12-15 | Health Specialists of Central Florida, Inc. | $20,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/health-specialists-ra-cap/index.html) |
| 2023-01-03 | Life Hope Labs, LLC | $16,500 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/life-hopes-ra-cap/index.html) |
| 2023-05-08 | David Mente, MA, LPC | $15,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/mente-ra-cap/index.html) |
| 2023-08-24 | UnitedHealthcare Insurance Company | $80,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/uhc-ra-cap/index.html) |
| 2023-12-15 | Optum Medical Care of New Jersey, P.C. | $160,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/optum-medical-care.html) |
| 2024-03-29 | Phoenix Healthcare, LLC d/b/a Green Country Care Center | $35,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/phoenix-healthcare/index.html) |
| 2024-04-01 | Essex Residential Care, LLC d/b/a Hackensack Meridian Health West Caldwell Care Center | $100,000 | civil money penalty | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/hackensack-meridian-health-west-caldwell-care-center/index.html) |
| 2024-08-01 | American Medical Response | $115,200 | civil money penalty | [Source](https://www.hhs.gov/about/news/2024/08/01/hhs-ocr-imposes-civil-monetary-penalty-115200-against-american-medical-response-failure-provide-timely-access-patient-records.html) |
| 2024-10-17 | Gums Dental Care | $70,000 | civil money penalty | [Source](https://www.hhs.gov/about/news/2024/10/17/hhs-office-civil-rights-imposes-70000-civil-monetary-penalty-against-gums-dental-care-failure-provide-timely-access-patient-records.html) |
| 2024-11-19 | Rio Hondo Community Mental Health Center | $100,000 | civil money penalty | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/rio-hondo-nfd/index.html) |
| 2025-01-14 | South Broward Hospital District d/b/a Memorial Healthcare System | $60,000 | settlement | [Source](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/hitech-sa/index.html) |
| 2025-03-06 | Oregon Health & Science University | $200,000 | civil money penalty | [Source](https://www.hhs.gov/press-room/penalty-against-or-health-science-university.html) |
| 2025-12-16 | Concentra, Inc. | $112,500 | settlement | [Source](https://www.hhs.gov/press-room/ocr-settles-with-concentra.html) |
| 2026-08-27 | Azul Vision, Inc. | $50,000 | settlement | [Source](https://www.hhs.gov/press-room/hhs-ocr-settles-hipaa-investigation-with-azul-vision.html) |
| 2026-10-08 | Linda L. Shen d/b/a Shen Smiles, P.C. | $140,000 | settlement | [Source](https://www.hhs.gov/press-room/hhs-office-civil-rights-settles-hipaa-privacy-rule-investigation-shen-smiles.html) |

## Methodology

Public sources only. No Tavrn operating data is used anywhere in this index.

Federal rules come from the eCFR and HHS guidance. Studies are cited from the published papers and the GAO report. Enforcement actions come from the HHS OCR resolution-agreements index and each announcement page; every row links to its HHS page.

For each state, we searched public statute and regulation text with the Parallel Search API, extracted the rule, then checked it again in a separate pass against official code text (state legislature or agency sites, or code reproductions on Cornell LII, Justia, FindLaw or Casetext). A row is Verified when the statute text confirms it or two independent checks agree with a verbatim quote. Anything else is Unverified, and no value is shown.

This index is published yearly. Corrections and new enforcement actions are added with a dated change-log entry. Nothing here is legal advice; confirm the current statute before relying on a figure.

## Change log

- 2026-10-30 — First edition: federal rules, two studies, OCR Right-of-Access actions through October 2026, 50-state fee-cap and hospital retention tables.

## Sources

Every public source used in this index, with the date it was accessed.

1. [45 CFR 164.524, Access of individuals to protected health information (eCFR)](https://www.ecfr.gov/current/title-45/section-164.524) (accessed 2026-10-30)
2. [45 CFR 164.508, Uses and disclosures for which an authorization is required (eCFR)](https://www.ecfr.gov/current/title-45/section-164.508) (accessed 2026-10-30)
3. [HHS, Important Notice Regarding Individuals’ Right of Access to Health Records (Ciox Health, LLC v. Azar)](https://www.hhs.gov/hipaa/court-order-right-of-access/index.html) (accessed 2026-10-30)
4. [HHS FAQ 2030, Is $6.50 the maximum amount that can be charged?](https://www.hhs.gov/hipaa/for-professionals/faq/2030/is-650-the-maximum-amount-that-can-be-charged/index.html) (accessed 2026-10-30)
5. [GAO-18-386, Medical Records: Fees and Challenges Associated with Patients’ Access (May 2018)](https://www.gao.gov/products/gao-18-386) (accessed 2026-10-30)
6. [Lye CT et al., Assessment of US Hospital Compliance With Regulations for Patients’ Requests for Medical Records, JAMA Netw Open 2018;1(6):e183014](https://jamanetwork.com/journals/jamanetworkopen/fullarticle/2705850) (accessed 2026-10-30)
7. [Correction to Lye et al., JAMA Netw Open 2018;1(8):e186463](https://jamanetwork.com/journals/jamanetworkopen/fullarticle/2717551) (accessed 2026-10-30)
8. [HHS OCR, HIPAA Resolution Agreements and Civil Money Penalties](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/index.html) (accessed 2026-10-30)
9. [law.onecle.com](https://law.onecle.com/alabama/title-12/12-21-6.1.html) (accessed 2026-10-30)
10. [albme.gov](https://www.albme.gov/resources/licensees/medical-records) (accessed 2026-10-30)
11. [law.justia.com](https://law.justia.com/codes/alabama/title-12/chapter-21/article-1/division-1/division-1/section-12-21-6-1) (accessed 2026-10-30)
12. [akleg.gov](https://www.akleg.gov/basis/statutes.asp?media=print&secEnd=18.23.005&secStart=18.23.005) (accessed 2026-10-30)
13. [nosscr.org](https://nosscr.org/article/medical-records-payment-rates-2025/) (accessed 2026-10-30)
14. [azleg.gov](https://www.azleg.gov/ars/12/02295.htm) (accessed 2026-10-30)
15. [bomex.org](https://bomex.org/FAQS/faq5.html) (accessed 2026-10-30)
16. [nosscr.org](https://nosscr.org/article/updated-state-medical-records-payment-rates) (accessed 2026-10-30)
17. [law.justia.com](https://law.justia.com/codes/arkansas/2024/title-16/subtitle-4/chapter-46/subchapter-1/section-16-46-106) (accessed 2026-10-30)
18. [law.justia.com](https://law.justia.com/codes/arkansas/2018/title-16/subtitle-4/chapter-46/subchapter-1/section-16-46-106/) (accessed 2026-10-30)
19. [leginfo.legislature.ca.gov](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC&sectionNum=123110) (accessed 2026-10-30)
20. [mbc.ca.gov](https://www.mbc.ca.gov/Resources/Medical-Resources/Access-Records.aspx) (accessed 2026-10-30)
21. [ptbc.ca.gov](https://ptbc.ca.gov/consumers/med_records_access.shtml) (accessed 2026-10-30)
22. [colorado.public.law](https://colorado.public.law/statutes/crs_25-1-801) (accessed 2026-10-30)
23. [law.justia.com](https://law.justia.com/codes/colorado/2023/title-25/administration/article-1/part-8/section-25-1-801) (accessed 2026-10-30)
24. [law.justia.com](https://law.justia.com/codes/connecticut/2023/title-20/chapter-369/section-20-7c) (accessed 2026-10-30)
25. [cga.ct.gov](https://www.cga.ct.gov/2023/pub/chap_369.htm) (accessed 2026-10-30)
26. [portal.ct.gov](https://portal.ct.gov/dph/practitioner-licensing--investigations/plis/access-to-medical-records) (accessed 2026-10-30)
27. [law.cornell.edu](https://www.law.cornell.edu/regulations/delaware/24-Del-Admin-Code-SS-1700-16.0) (accessed 2026-10-30)
28. [regulations.delaware.gov](https://regulations.delaware.gov/register/november2025/final/29%20DE%20Reg%20418%2011-01-25) (accessed 2026-10-30)
29. [law.justia.com](https://law.justia.com/codes/delaware/title-24/chapter-17/subchapter-v/section-1761) (accessed 2026-10-30)
30. [leg.state.fl.us](https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0300-0399/0395/Sections/0395.3025.html) (accessed 2026-10-30)
31. [leg.state.fl.us](https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0400/Sections/0400.145.html) (accessed 2026-10-30)
32. [law.cornell.edu](https://www.law.cornell.edu/regulations/florida/Fla-Admin-Code-Ann-R-64B8-10-003) (accessed 2026-10-30)
33. [law.justia.com](https://law.justia.com/codes/georgia/title-31/chapter-33/section-31-33-3) (accessed 2026-10-30)
34. [capitol.hawaii.gov](https://www.capitol.hawaii.gov/hrscurrent/Vol13_Ch0601-0676/HRS0622/HRS_0622-0057.htm) (accessed 2026-10-30)
35. [law.justia.com](https://law.justia.com/codes/hawaii/title-33/chapter-622/section-622-57) (accessed 2026-10-30)
36. [nosscr.org](https://nosscr.org/article/state-medical-records-payment-rates-2026) (accessed 2026-10-30)
37. [legislature.idaho.gov](https://legislature.idaho.gov/sessioninfo/2024/legislation/) (accessed 2026-10-30)
38. [legislature.idaho.gov](https://legislature.idaho.gov/sessioninfo/2025/legislation/) (accessed 2026-10-30)
39. [ilga.gov](https://www.ilga.gov/Documents/legislation/ilcs/documents/073500050K8-2001.htm) (accessed 2026-10-30)
40. [illinoiscomptroller.gov](https://illinoiscomptroller.gov/state-agencies/accounting/statutorily-required/copying-fees-adjustments) (accessed 2026-10-30)
41. [law.cornell.edu](https://www.law.cornell.edu/regulations/indiana/760-IAC-1-71-3) (accessed 2026-10-30)
42. [regulations.justia.com](https://regulations.justia.com/states/indiana/title-760/article-1/rule-71/section-3) (accessed 2026-10-30)
43. [law.justia.com](https://law.justia.com/codes/indiana/title-16/article-39/chapter-9/section-16-39-9-2) (accessed 2026-10-30)
44. [law.justia.com](https://law.justia.com/codes/iowa/title-xv/chapter-622/section-622-10) (accessed 2026-10-30)
45. [legis.iowa.gov](https://www.legis.iowa.gov/docs/code/2026/622.pdf) (accessed 2026-10-30)
46. [ksrevisor.gov](https://ksrevisor.gov/statutes/chapters/ch65/065_068_0036.html) (accessed 2026-10-30)
47. [law.justia.com](https://law.justia.com/codes/kentucky/chapter-422/section-422-317) (accessed 2026-10-30)
48. [apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=51281) (accessed 2026-10-30)
49. [kyopengov.org](https://kyopengov.org/law/ag/2009/oag-09-009) (accessed 2026-10-30)
50. [legis.la.gov](https://legis.la.gov/Legis/law.aspx?d=964709) (accessed 2026-10-30)
51. [legislature.maine.gov](https://legislature.maine.gov/statutes/22/title22sec1711-a.html) (accessed 2026-10-30)
52. [legislature.maine.gov](https://legislature.maine.gov/statutes/22/title22sec1711.html) (accessed 2026-10-30)
53. [mgaleg.maryland.gov](https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=ghg&section=4-304) (accessed 2026-10-30)
54. [mgaleg.maryland.gov](https://mgaleg.maryland.gov/2026RS/Statute_Web/ghg/4-304.pdf) (accessed 2026-10-30)
55. [malegislature.gov](https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXVI/Chapter111/Section70) (accessed 2026-10-30)
56. [malegislature.gov](https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXVI/Chapter112/Section12CC) (accessed 2026-10-30)
57. [law.cornell.edu](https://www.law.cornell.edu/regulations/massachusetts/243-CMR-2-07) (accessed 2026-10-30)
58. [legislature.mi.gov](https://www.legislature.mi.gov/Laws/MCL?objectName=MCL-333-26269) (accessed 2026-10-30)
59. [revisor.mn.gov](https://www.revisor.mn.gov/statutes/2026/cite/144.292/pdf) (accessed 2026-10-30)
60. [revisor.mn.gov](https://www.revisor.mn.gov/statutes/2026/cite/144.292) (accessed 2026-10-30)
61. [codes.findlaw.com](https://codes.findlaw.com/ms/title-11-civil-practice-and-procedure/ms-code-sect-11-1-52) (accessed 2026-10-30)
62. [law.justia.com](https://law.justia.com/codes/mississippi/title-11/chapter-1/section-11-1-52) (accessed 2026-10-30)
63. [health.mo.gov](https://health.mo.gov/providers/hospital-standards/fees-medical-records) (accessed 2026-10-30)
64. [revisor.mo.gov](https://revisor.mo.gov/main/OneSection.aspx?section=191.227) (accessed 2026-10-30)
65. [mca.legmt.gov](https://mca.legmt.gov/bills/mca/title_0500/chapter_0160/part_0050/section_0400/0500-0160-0050-0400.html) (accessed 2026-10-30)
66. [mca.legmt.gov](https://mca.legmt.gov/bills/mca/title_0500/chapter_0160/part_0050/section_0410/0500-0160-0050-0410.html) (accessed 2026-10-30)
67. [nebraskalegislature.gov](https://nebraskalegislature.gov/laws/statutes.php?statute=71-8404) (accessed 2026-10-30)
68. [nebraskalegislature.gov](https://nebraskalegislature.gov/laws/statutes.php?statute=71-8405) (accessed 2026-10-30)
69. [dhhs.ne.gov](https://dhhs.ne.gov/licensure/Documents/Medical%20Records.pdf) (accessed 2026-10-30)
70. [law.justia.com](https://law.justia.com/codes/nevada/2024/chapter-629/statute-629-061) (accessed 2026-10-30)
71. [codes.findlaw.com](https://codes.findlaw.com/nv/title-54-professions-occupations-and-businesses/nv-rev-st-629-062) (accessed 2026-10-30)
72. [law.justia.com](https://law.justia.com/codes/new-hampshire/title-xxx/chapter-332-i/section-332-i-1) (accessed 2026-10-30)
73. [gc.nh.gov](https://gc.nh.gov/rsa/html/XXX/332-I/332-I-1.htm) (accessed 2026-10-30)
74. [codes.findlaw.com](https://codes.findlaw.com/nj/title-26-health-and-vital-statistics/nj-st-sect-26-2h-5n) (accessed 2026-10-30)
75. [pub.njleg.gov](https://pub.njleg.gov/Bills/2022/PL22/114_.HTM) (accessed 2026-10-30)
76. [srca.nm.gov](https://www.srca.nm.gov/parts/title16/16.010.0017.html) (accessed 2026-10-30)
77. [law.cornell.edu](https://www.law.cornell.edu/regulations/new-mexico/N-M-Admin-Code-SS-16.10.17.8) (accessed 2026-10-30)
78. [nysenate.gov](https://www.nysenate.gov/legislation/laws/PBH/17) (accessed 2026-10-30)
79. [health.ny.gov](https://www.health.ny.gov/professionals/patients/patient_rights/docs/you_and_your_health_records.htm) (accessed 2026-10-30)
80. [codes.findlaw.com](https://codes.findlaw.com/ny/public-health-law/pbh-sect-17) (accessed 2026-10-30)
81. [ncleg.gov](https://www.ncleg.gov/EnactedLegislation/Statutes/HTML/BySection/Chapter_90/GS_90-411.html) (accessed 2026-10-30)
82. [law.justia.com](https://law.justia.com/codes/north-carolina/chapter-90/article-29/section-90-411) (accessed 2026-10-30)
83. [codes.findlaw.com](https://codes.findlaw.com/nd/title-23-health-and-safety/nd-cent-code-sect-23-12-14) (accessed 2026-10-30)
84. [ndlegis.gov](https://ndlegis.gov/api/assembly/62-2011/regular/documents/11-0199-03000.pdf) (accessed 2026-10-30)
85. [codes.ohio.gov](https://codes.ohio.gov/ohio-revised-code/section-3701.741) (accessed 2026-10-30)
86. [oklahoma.gov](https://oklahoma.gov/content/dam/ok/en/doc/documents/policy/section-14/op140108.pdf) (accessed 2026-10-30)
87. [law.justia.com](https://law.justia.com/codes/oklahoma/title-76/section-76-19) (accessed 2026-10-30)
88. [law.justia.com](https://law.justia.com/codes/oregon/volume-05/chapter-192/section-192-563) (accessed 2026-10-30)
89. [law.cornell.edu](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-847-012-0000) (accessed 2026-10-30)
90. [oregon.gov](https://www.oregon.gov/oblpct/Documents/BLPCT_Statutes_Pertaining.pdf) (accessed 2026-10-30)
91. [pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/Display/pabull?file=%2Fsecure%2Fpabulletin%2Fdata%2Fvol55%2F55-50%2F1680.html) (accessed 2026-10-30)
92. [legis.state.pa.us](https://www.legis.state.pa.us/WU01/LI/LI/CT/HTM/42/00.061.052.001..HTM) (accessed 2026-10-30)
93. [webserver.rilegislature.gov](https://webserver.rilegislature.gov/Statutes/TITLE23/23-1/23-1-48.htm) (accessed 2026-10-30)
94. [law.justia.com](https://law.justia.com/codes/rhode-island/title-23/chapter-23-1/section-23-1-48/) (accessed 2026-10-30)
95. [law.justia.com](https://law.justia.com/codes/south-carolina/title-44/chapter-7/section-44-7-325) (accessed 2026-10-30)
96. [law.justia.com](https://law.justia.com/codes/south-carolina/title-44/chapter-115/section-44-115-80) (accessed 2026-10-30)
97. [sdlegislature.gov](https://sdlegislature.gov/Statutes/36-2-16.4) (accessed 2026-10-30)
98. [sdlegislature.gov](https://www.sdlegislature.gov/Statutes/36-2-16.5) (accessed 2026-10-30)
99. [sdlegislature.gov](https://sdlegislature.gov/Statutes/36-2) (accessed 2026-10-30)
100. [law.justia.com](https://law.justia.com/codes/tennessee/title-63/chapter-2/section-63-2-102) (accessed 2026-10-30)
101. [law.justia.com](https://law.justia.com/codes/tennessee/title-68/health/chapter-11/part-3/section-68-11-304/) (accessed 2026-10-30)
102. [hhs.texas.gov](https://www.hhs.texas.gov/sites/default/files/documents/hospital-medical-record-fees.pdf) (accessed 2026-10-30)
103. [law.justia.com](https://law.justia.com/codes/texas/health-and-safety-code/title-4/subtitle-b/chapter-241/subchapter-g/section-241-154/) (accessed 2026-10-30)
104. [utcourts.gov](https://www.utcourts.gov/en/court-records-publications/resources/interest-rates/medical-records.html) (accessed 2026-10-30)
105. [le.utah.gov](https://le.utah.gov/xcode/Title78B/Chapter5/C78B-5-S618_2025050720250507.pdf) (accessed 2026-10-30)
106. [legislature.vermont.gov](https://legislature.vermont.gov/statutes/section/18/221/09419) (accessed 2026-10-30)
107. [chartrequest.com](https://www.chartrequest.com/articles/state-by-state-medical-record-copying-fees) (accessed 2026-10-30)
108. [law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title2.2/chapter38/section8.01-413) (accessed 2026-10-30)
109. [law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title8.01/section8.01-413) (accessed 2026-10-30)
110. [apps.leg.wa.gov](https://apps.leg.wa.gov/WAC/default.aspx?cite=246-08-400) (accessed 2026-10-30)
111. [app.leg.wa.gov](https://app.leg.wa.gov/RCW/default.aspx?cite=70.02.010&pdf=true) (accessed 2026-10-30)
112. [code.wvlegislature.gov](https://code.wvlegislature.gov/16-29-2) (accessed 2026-10-30)
113. [code.wvlegislature.gov](https://code.wvlegislature.gov/pdf/16-29-2) (accessed 2026-10-30)
114. [code.wvlegislature.gov](https://code.wvlegislature.gov/pdf/16-29/) (accessed 2026-10-30)
115. [docs.legis.wisconsin.gov](https://docs.legis.wisconsin.gov/code/register/2026/847a1/register/public_notices/public_notice_annual_adjustment_to_fees/public_notice_annual_adjustment_to_fees) (accessed 2026-10-30)
116. [dhs.wisconsin.gov](https://www.dhs.wisconsin.gov/health-care-coverage/records-fees.htm) (accessed 2026-10-30)
117. [law.cornell.edu](https://www.law.cornell.edu/regulations/wyoming/052-3-Wyo-Code-R-SS-3-4) (accessed 2026-10-30)
118. [wyoleg.gov](https://wyoleg.gov/statutes/compress/title35.pdf) (accessed 2026-10-30)
119. [admincode.legislature.state.al.us](https://admincode.legislature.state.al.us/api/rule/420-5-7-.13) (accessed 2026-10-30)
120. [law.justia.com](https://law.justia.com/codes/alaska/title-18/chapter-20/article-1/section-18-20-085) (accessed 2026-10-30)
121. [law.justia.com](https://law.justia.com/codes/alaska/2011/title18/chapter18-20/sec-18-20-085) (accessed 2026-10-30)
122. [azleg.gov](https://www.azleg.gov/ars/12/02297.htm) (accessed 2026-10-30)
123. [codeofarrules.arkansas.gov](https://codeofarrules.arkansas.gov/Rules/Rule?chapterID=32&levelType=section&partID=1263&sectionID=50252&subChapterID=44&subPartID=7680&titleID=20) (accessed 2026-10-30)
124. [law.cornell.edu](https://www.law.cornell.edu/regulations/california/22-CCR-70751) (accessed 2026-10-30)
125. [law.cornell.edu](https://www.law.cornell.edu/regulations/california/22-CCR-71551) (accessed 2026-10-30)
126. [law.cornell.edu](https://www.law.cornell.edu/regulations/colorado/title-6/agency-1011/division-1/chapter-04/part-10) (accessed 2026-10-30)
127. [desertriversolutions.com](https://desertriversolutions.com/medical-records-custodian-in-colorado) (accessed 2026-10-30)
128. [eregulations.ct.gov](https://eregulations.ct.gov/eRegsPortal/Browse/getDocument?guid=%7B7089F892-0000-C216-BC72-121CFECB1E18%7D) (accessed 2026-10-30)
129. [law.cornell.edu](https://www.law.cornell.edu/regulations/connecticut/Regs-Conn-State-Agencies-SS-19-13-D3) (accessed 2026-10-30)
130. [law.cornell.edu](https://www.law.cornell.edu/regulations/delaware/16-Del-Admin-Code-SS-3340-11.0) (accessed 2026-10-30)
131. [law.cornell.edu](https://www.law.cornell.edu/regulations/delaware/16-Del-Admin-Code-SS-3355-11.0) (accessed 2026-10-30)
132. [flrules.elaws.us](https://flrules.elaws.us/fac/64b8-10.002) (accessed 2026-10-30)
133. [ecfr.gov](https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24) (accessed 2026-10-30)
134. [rules.sos.ga.gov](https://rules.sos.ga.gov/GAC/111-8-40) (accessed 2026-10-30)
135. [law.justia.com](https://law.justia.com/codes/georgia/title-31/chapter-33/section-31-33-2) (accessed 2026-10-30)
136. [law.cornell.edu](https://www.law.cornell.edu/regulations/georgia/Ga-Comp-R-Regs-R-111-8-40-.18) (accessed 2026-10-30)
137. [capitol.hawaii.gov](https://www.capitol.hawaii.gov/hrscurrent/Vol13_Ch0601-0676/HRS0622/HRS_0622-0058.htm) (accessed 2026-10-30)
138. [codes.findlaw.com](https://codes.findlaw.com/hi/division-4-courts-and-judicial-proceedings/hi-rev-st-sect-622-58) (accessed 2026-10-30)
139. [codes.findlaw.com](https://codes.findlaw.com/id/title-39-health-and-safety/id-st-sect-39-1394) (accessed 2026-10-30)
140. [legislature.idaho.gov](https://legislature.idaho.gov/statutesrules/idstat/title39/t39ch13/sect39-1394) (accessed 2026-10-30)
141. [ilga.gov](https://www.ilga.gov/Documents/legislation/ilcs/documents/021000850K6.17.htm) (accessed 2026-10-30)
142. [law.justia.com](https://law.justia.com/codes/illinois/chapter-210/act-210-ilcs-85) (accessed 2026-10-30)
143. [ilga.gov](https://www.ilga.gov/commission/jcar/admincode/077/077002500L15100R.html) (accessed 2026-10-30)
144. [iga.in.gov](https://iga.in.gov/ic/2026/Title_16/Article_39/Chapter_7.pdf) (accessed 2026-10-30)
145. [law.cornell.edu](https://www.law.cornell.edu/regulations/indiana/410-IAC-15-1.5-4) (accessed 2026-10-30)
146. [law.justia.com](https://law.justia.com/codes/indiana/title-16/article-39/chapter-7/section-16-39-7-1) (accessed 2026-10-30)
147. [legis.iowa.gov](https://www.legis.iowa.gov/docs/iac/chapter/04-01-2026.481.655.pdf) (accessed 2026-10-30)
148. [legis.iowa.gov](https://www.legis.iowa.gov/docs/iac/rule/02-05-2025.653.13.7.pdf) (accessed 2026-10-30)
149. [law.cornell.edu](https://www.law.cornell.edu/regulations/kansas/K-A-R-28-34-9a) (accessed 2026-10-30)
150. [kmsonline.org](https://kmsonline.org/resources/practice-operations/25-medical-records/129-requirements-for-retention-of-records) (accessed 2026-10-30)
151. [apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/kar/titles/902/020/360) (accessed 2026-10-30)
152. [apps.legislature.ky.gov](https://apps.legislature.ky.gov/law/kar/titles/902/020/016) (accessed 2026-10-30)
153. [law.cornell.edu](https://www.law.cornell.edu/regulations/louisiana/La-Admin-Code-tit-48-SS-I-9395) (accessed 2026-10-30)
154. [regulations.justia.com](https://regulations.justia.com/states/louisiana/title-48/part-i/subpart-3/chapter-45/subchapter-e/section-i-4569) (accessed 2026-10-30)
155. [law.cornell.edu](https://www.law.cornell.edu/regulations/maine/10-144-C-M-R-ch-112-SS-3) (accessed 2026-10-30)
156. [maine.gov](https://www.maine.gov/dhhs/sites/maine.gov.dhhs/files/rule-2026-09/10-144%20Ch%20112%20Proposed%20Rule.pdf) (accessed 2026-10-30)
157. [healthinfolaw.org](https://www.healthinfolaw.org/state-topics/20%2C60) (accessed 2026-10-30)
158. [health.maryland.gov](https://health.maryland.gov/mbpme/Pages/records.aspx) (accessed 2026-10-30)
159. [mgaleg.maryland.gov](https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=ghg&section=4-403) (accessed 2026-10-30)
160. [law.cornell.edu](https://www.law.cornell.edu/regulations/massachusetts/105-CMR-130-370) (accessed 2026-10-30)
161. [regulations.justia.com](https://regulations.justia.com/states/massachusetts/105-cmr/title-105-cmr-140-000/subpart-c/administration/section-140-302) (accessed 2026-10-30)
162. [mass.gov](https://www.mass.gov/info-details/medical-records-obligations) (accessed 2026-10-30)
163. [legislature.mi.gov](https://www.legislature.mi.gov/Laws/MCL?objectName=mcl-333-20175) (accessed 2026-10-30)
164. [law.justia.com](https://law.justia.com/codes/michigan/chapter-333/statute-act-368-of-1978/article-17/division-368-1978-17-201/section-333-20175) (accessed 2026-10-30)
165. [revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/145.32/pdf) (accessed 2026-10-30)
166. [revisor.mn.gov](https://www.revisor.mn.gov/statutes/cite/145.32) (accessed 2026-10-30)
167. [codes.findlaw.com](https://codes.findlaw.com/mn/health-ch-144-159/mn-st-sect-145-32) (accessed 2026-10-30)
168. [billstatus.ls.state.ms.us](https://billstatus.ls.state.ms.us/documents/2024/html/SB/2800-2899/SB2873SG.htm) (accessed 2026-10-30)
169. [law.justia.com](https://law.justia.com/codes/mississippi/title-41/chapter-9/hospital-records-preparation-preservation-and-destruction/section-41-9-69) (accessed 2026-10-30)
170. [law.cornell.edu](https://www.law.cornell.edu/regulations/missouri/19-CSR-30-20-015) (accessed 2026-10-30)
171. [sos.mo.gov](https://www.sos.mo.gov/CMSImages/AdRules/csr/previous/19csr/19csr1023/19c30-20.pdf) (accessed 2026-10-30)
172. [law.cornell.edu](https://www.law.cornell.edu/regulations/montana/Mont-Admin-r-37.106.402) (accessed 2026-10-30)
173. [state-rules.com](https://state-rules.com/montana/arm/37.106.402) (accessed 2026-10-30)
174. [dphhs.mt.gov](https://dphhs.mt.gov/assets/oig/HOSMin2025.pdf) (accessed 2026-10-30)
175. [govdocs.nebraska.gov](https://govdocs.nebraska.gov/epubs/H8310/R175.0001-2023.pdf) (accessed 2026-10-30)
176. [regulations.justia.com](https://regulations.justia.com/states/nebraska/health-and-human-services-system/title-471/chapter-10/section-471-10-008) (accessed 2026-10-30)
177. [regulations.justia.com](https://regulations.justia.com/states/nevada/chapter-449/hospitals/policies-and-procedures-for-operation-of-hospital/section-449-379) (accessed 2026-10-30)
178. [leg.state.nv.us](https://www.leg.state.nv.us/nac/nac-449.html) (accessed 2026-10-30)
179. [nevada.public.law](https://nevada.public.law/statutes/nrs_629.051) (accessed 2026-10-30)
180. [law.cornell.edu](https://www.law.cornell.edu/regulations/new-hampshire/N-H-Admin-Code-SS-He-P-802.20) (accessed 2026-10-30)
181. [regulations.justia.com](https://regulations.justia.com/states/new-hampshire/he/subtitle-he-p/chapter-he-p-800/part-he-p-802/section-he-p-802-20) (accessed 2026-10-30)
182. [recordinglaw.com](https://www.recordinglaw.com/us-laws/medical-records-retention/new-hampshire-medical-records-retention-laws) (accessed 2026-10-30)
183. [law.justia.com](https://law.justia.com/codes/new-jersey/title-26/section-26-8-5) (accessed 2026-10-30)
184. [regulations.justia.com](https://regulations.justia.com/states/new-jersey/title-8/chapter-43g/subchapter-15/section-8-43g-15-2) (accessed 2026-10-30)
185. [law.justia.com](https://law.justia.com/codes/new-mexico/chapter-14/article-6/section-14-6-2) (accessed 2026-10-30)
186. [law.cornell.edu](https://www.law.cornell.edu/regulations/new-mexico/N-M-Admin-Code-SS-8.370.12.30) (accessed 2026-10-30)
187. [govt.westlaw.com](<https://govt.westlaw.com/nycrr/Document/I4fe3bd5bcd1711dda432a117e6e0f345?contextData=(sc.Default)&transitionType=Default>) (accessed 2026-10-30)
188. [archives.nysed.gov](https://www.archives.nysed.gov/records/laws-and-regulations-related-to-records) (accessed 2026-10-30)
189. [regs.health.ny.gov](https://regs.health.ny.gov/content/section-40510-medical-records) (accessed 2026-10-30)
190. [ncrules.state.nc.us](http://ncrules.state.nc.us/ncac/title%2010a%20-%20health%20and%20human%20services/chapter%2013%20-%20nc%20medical%20care%20commission/subchapter%20b/10a%20ncac%2013b%20.3903.html) (accessed 2026-10-30)
191. [law.cornell.edu](https://www.law.cornell.edu/regulations/north-carolina/10A-N-C-Admin-Code-13B-3903) (accessed 2026-10-30)
192. [reports.oah.state.nc.us](http://reports.oah.state.nc.us/ncac/title%2010a%20-%20health%20and%20human%20services/chapter%2013%20-%20nc%20medical%20care%20commission/subchapter%20b/10a%20ncac%2013b%20.3903.pdf) (accessed 2026-10-30)
193. [ndlegis.gov](https://ndlegis.gov/cencode/t43c17.pdf) (accessed 2026-10-30)
194. [ndlegis.gov](https://ndlegis.gov/prod/acdata/pdf/50-01-03.pdf) (accessed 2026-10-30)
195. [codes.ohio.gov](http://codes.ohio.gov/ohio-administrative-code/rule-3701-83-11) (accessed 2026-10-30)
196. [codes.ohio.gov](http://codes.ohio.gov/ohio-administrative-code/rule-3701-22-29) (accessed 2026-10-30)
197. [law.justia.com](https://law.justia.com/codes/oklahoma/title-63/section-63-1-739) (accessed 2026-10-30)
198. [law.cornell.edu](https://www.law.cornell.edu/regulations/oklahoma/OAC-310-667-19-14) (accessed 2026-10-30)
199. [law.justia.com](https://law.justia.com/codes/oklahoma/2024/title-63/section-63-1-739) (accessed 2026-10-30)
200. [law.cornell.edu](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-333-505-0050) (accessed 2026-10-30)
201. [secure.sos.state.or.us](https://secure.sos.state.or.us/oard/displayDivisionRules.action?selectedDivision=1365) (accessed 2026-10-30)
202. [regulations.justia.com](https://regulations.justia.com/states/oregon/chapter-333/division-505/section-333-505-0050) (accessed 2026-10-30)
203. [pacodeandbulletin.gov](https://www.pacodeandbulletin.gov/Display/pacode?file=%2Fsecure%2Fpacode%2Fdata%2F028%2Fchapter115%2Fs115.23.html) (accessed 2026-10-30)
204. [recordinglaw.com](https://www.recordinglaw.com/us-laws/medical-records-retention/pennsylvania-medical-records-retention-laws) (accessed 2026-10-30)
205. [law.cornell.edu](https://www.law.cornell.edu/regulations/rhode-island/216-RICR-40-10-4.6) (accessed 2026-10-30)
206. [rules.sos.ri.gov](https://rules.sos.ri.gov/regulations/part/216-40-10-4) (accessed 2026-10-30)
207. [scstatehouse.gov](https://www.scstatehouse.gov/code/t44c115.php) (accessed 2026-10-30)
208. [law.justia.com](https://law.justia.com/codes/south-carolina/title-44/chapter-115/section-44-115-120) (accessed 2026-10-30)
209. [sdlegislature.gov](https://sdlegislature.gov/api/Rules/44:75:09:06.html) (accessed 2026-10-30)
210. [law.cornell.edu](https://www.law.cornell.edu/regulations/south-dakota/ARSD-44-75-09-06) (accessed 2026-10-30)
211. [sdlegislature.gov](https://sdlegislature.gov/Rules/Administrative/44:75:09) (accessed 2026-10-30)
212. [law.justia.com](https://law.justia.com/codes/tennessee/title-68/health/chapter-11/part-3/section-68-11-305/) (accessed 2026-10-30)
213. [law.justia.com](https://law.justia.com/codes/tennessee/2024/title-68/health/chapter-11/part-3/section-68-11-305) (accessed 2026-10-30)
214. [codes.findlaw.com](https://codes.findlaw.com/tx/health-and-safety-code/health-safety-sect-241-103) (accessed 2026-10-30)
215. [law.cornell.edu](https://www.law.cornell.edu/regulations/texas/22-Tex-Admin-Code-SS-163-2) (accessed 2026-10-30)
216. [rules.utah.gov](https://rules.utah.gov/publicat/code/r432/r432-100.htm) (accessed 2026-10-30)
217. [legislature.vermont.gov](http://legislature.vermont.gov/Documents/2026/Docs/BILLS/S-0163/S-0163%20As%20Passed%20by%20the%20Senate%20Unofficial.pdf) (accessed 2026-10-30)
218. [healthinfolaw.org](https://www.healthinfolaw.org/comparative-analysis/medical-record-retention-required-health-care-providers-50-state-comparison) (accessed 2026-10-30)
219. [law.cornell.edu](https://www.law.cornell.edu/regulations/virginia/12VAC5-410-370) (accessed 2026-10-30)
220. [law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section370) (accessed 2026-10-30)
221. [law.cornell.edu](https://www.law.cornell.edu/regulations/virginia/12VAC5-410-1260) (accessed 2026-10-30)
222. [app.leg.wa.gov](https://app.leg.wa.gov/RCW/default.aspx?Cite=70.41.190) (accessed 2026-10-30)
223. [law.cornell.edu](https://www.law.cornell.edu/regulations/washington/WAC-246-322-200) (accessed 2026-10-30)
224. [law.cornell.edu](https://www.law.cornell.edu/regulations/west-virginia/W-Va-C-S-R-SS-64-12-7) (accessed 2026-10-30)
225. [recordinglaw.com](https://www.recordinglaw.com/us-laws/medical-records-retention/west-virginia-medical-records-retention-laws) (accessed 2026-10-30)
226. [docs.legis.wisconsin.gov](https://docs.legis.wisconsin.gov/code/admin_code/med/21/03/1) (accessed 2026-10-30)
227. [docs.legis.wisconsin.gov](https://docs.legis.wisconsin.gov/code/admin_code/med/21) (accessed 2026-10-30)
228. [health.wyo.gov](https://health.wyo.gov/wp-content/uploads/2023/03/FINAL-SOS-CH-12-21552.pdf) (accessed 2026-10-30)
229. [law.cornell.edu](https://www.law.cornell.edu/regulations/wyoming/048-3-Wyo-Code-R-SSSS-3-8) (accessed 2026-10-30)
230. [HHS OCR: Bayfront Health St. Petersburg (2019-09-09)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/bayfront/index.html) (accessed 2026-10-30)
231. [HHS OCR: Korunda Medical, LLC (2019-12-12)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/korunda/index.html) (accessed 2026-10-30)
232. [HHS OCR: Wise Psychiatry, PC (2020-09-15)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/right-of-access-initiative/index.html) (accessed 2026-10-30)
233. [HHS OCR: Dignity Health d/b/a St. Joseph's Hospital and Medical Center (2020-10-07)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/sjhmc/index.html) (accessed 2026-10-30)
234. [HHS OCR: NY Spine Medicine (2020-10-09)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/nyspine/index.html) (accessed 2026-10-30)
235. [HHS OCR: Riverside Psychiatric Medical Group (2020-11-06)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/riverside/index.html) (accessed 2026-10-30)
236. [HHS OCR: Dr. Rajendra Bhayani (2020-11-12)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/bhayani/index.html) (accessed 2026-10-30)
237. [HHS OCR: University of Cincinnati Medical Center, LLC (2020-11-19)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/ucmc/index.html) (accessed 2026-10-30)
238. [HHS OCR: Peter Wrobel, M.D., P.C. d/b/a Elite Primary Care (2020-12-22)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/elite-primary-care/index.html) (accessed 2026-10-30)
239. [HHS OCR: Banner Health (2021-01-12)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/banner/index.html) (accessed 2026-10-30)
240. [HHS OCR: Renown Health, P.C. (2021-02-10)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/renown/index.html) (accessed 2026-10-30)
241. [HHS OCR: Sharp HealthCare d/b/a Sharp Rees-Stealy Medical Centers (2021-02-12)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/sharp/index.html) (accessed 2026-10-30)
242. [HHS OCR: The Arbour, Inc. d/b/a Arbour Hospital (2021-03-24)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/arbour/index.html) (accessed 2026-10-30)
243. [HHS OCR: Village Plastic Surgery (2021-03-26)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/vps/index.html) (accessed 2026-10-30)
244. [HHS OCR: Diabetes, Endocrinology & Lipidology Center, Inc. (2021-06-02)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/delc/index.html) (accessed 2026-10-30)
245. [HHS OCR: Children's Hospital & Medical Center (2021-09-10)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/chmc/index.html) (accessed 2026-10-30)
246. [HHS OCR: Wake Health Medical Group (2021-11-30)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2021-right-of-access-initiative/index.html) (accessed 2026-10-30)
247. [HHS OCR: Jacob & Associates (2022-03-28)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/march-2022-hipaa-enforcement/index.html) (accessed 2026-10-30)
248. [HHS OCR: Southwest Surgical Associates (2022-07-15)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/july-2022-hipaa-enforcement/index.html) (accessed 2026-10-30)
249. [HHS OCR: Great Expressions Dental Center of Georgia, P.C. (2022-09-20)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/september-2022-right-of-access-initiative/index.html) (accessed 2026-10-30)
250. [HHS OCR: Health Specialists of Central Florida, Inc. (2022-12-15)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/health-specialists-ra-cap/index.html) (accessed 2026-10-30)
251. [HHS OCR: Life Hope Labs, LLC (2023-01-03)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/life-hopes-ra-cap/index.html) (accessed 2026-10-30)
252. [HHS OCR: David Mente, MA, LPC (2023-05-08)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/mente-ra-cap/index.html) (accessed 2026-10-30)
253. [HHS OCR: UnitedHealthcare Insurance Company (2023-08-24)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/uhc-ra-cap/index.html) (accessed 2026-10-30)
254. [HHS OCR: Optum Medical Care of New Jersey, P.C. (2023-12-15)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/optum-medical-care.html) (accessed 2026-10-30)
255. [HHS OCR: Phoenix Healthcare, LLC d/b/a Green Country Care Center (2024-03-29)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/phoenix-healthcare/index.html) (accessed 2026-10-30)
256. [HHS OCR: Essex Residential Care, LLC d/b/a Hackensack Meridian Health West Caldwell Care Center (2024-04-01)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/hackensack-meridian-health-west-caldwell-care-center/index.html) (accessed 2026-10-30)
257. [HHS OCR: American Medical Response (2024-08-01)](https://www.hhs.gov/about/news/2024/08/01/hhs-ocr-imposes-civil-monetary-penalty-115200-against-american-medical-response-failure-provide-timely-access-patient-records.html) (accessed 2026-10-30)
258. [HHS OCR: Gums Dental Care (2024-10-17)](https://www.hhs.gov/about/news/2024/10/17/hhs-office-civil-rights-imposes-70000-civil-monetary-penalty-against-gums-dental-care-failure-provide-timely-access-patient-records.html) (accessed 2026-10-30)
259. [HHS OCR: Rio Hondo Community Mental Health Center (2024-11-19)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/rio-hondo-nfd/index.html) (accessed 2026-10-30)
260. [HHS OCR: South Broward Hospital District d/b/a Memorial Healthcare System (2025-01-14)](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/hitech-sa/index.html) (accessed 2026-10-30)
261. [HHS OCR: Oregon Health & Science University (2025-03-06)](https://www.hhs.gov/press-room/penalty-against-or-health-science-university.html) (accessed 2026-10-30)
262. [HHS OCR: Concentra, Inc. (2025-12-16)](https://www.hhs.gov/press-room/ocr-settles-with-concentra.html) (accessed 2026-10-30)
263. [HHS OCR: Azul Vision, Inc. (2026-08-27)](https://www.hhs.gov/press-room/hhs-ocr-settles-hipaa-investigation-with-azul-vision.html) (accessed 2026-10-30)
264. [HHS OCR: Linda L. Shen d/b/a Shen Smiles, P.C. (2026-10-08)](https://www.hhs.gov/press-room/hhs-office-civil-rights-settles-hipaa-privacy-rule-investigation-shen-smiles.html) (accessed 2026-10-30)

Total OCR enforcement amount: $3,677,850. Source access date: 2026-10-30.