Nursing Home Medical Records: What to Do if They Won’t Release

When a nursing home withholds medical records, families and residents may feel overwhelmed. Federal and state laws protect access to health information, but navigating the process can be confusing. This article explains rights, practical steps, and the actions that can move a records request forward while keeping residents’ care and privacy intact.

Understanding Your Rights Under HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) guarantees individuals the right to access their own medical records and to authorize releases to others. Nursing homes that receive federal funding must comply with HIPAA’s access provisions. In general, a request can be made for copies of medical records, including treatment notes, lab results, medication lists, and discharge summaries. Access should be provided in the form requested by the patient, if reasonable, and within a specific timeframe. If the facility denies access, it must provide a written explanation and information about how to appeal.

How to Request Records From a Nursing Home

Start with a written records request. Include: patient name, date of birth, the facility’s name and address, the specific records sought, preferred delivery method, and your contact information. Keep a copy and send it by certified mail or another trackable method. If the patient has a legal representative or power of attorney, attach proper documentation and identify who is authorized to receive the records. Clarify urgency if there are critical medical decisions pending.

What to expect after a request is submitted: facilities should acknowledge receipt and provide a timeline. Under HIPAA, disclosures are typically due within 30 days, with a possible one-time 30-day extension under certain circumstances. For emergency or sensitive requests, providers may offer sooner access. If the facility asks for authorization for release to a third party, the request should be limited to the scope needed for the purpose stated.

What If They Refuse to Release Records

A refusaI often cites missing authorizations, incomplete patient information, or concerns about privacy. It may also claim the records are part of the facility’s memory or internal policies. In some cases, the refusal is unlawful or incomplete. If access is denied, request a written explanation detailing the specific grounds for denial and the steps to appeal. Review the response for accuracy, including dates, patient identifiers, and the scope of records requested. If the reason seems improper, proceed with formal remedies.

Steps to Take If Records Are Denied or Delayed

Follow a structured escalation plan to address a denial or delay:

• Re-check the scope: Ensure the request is for the medical records covered by HIPAA and not for unrelated documents.
• Ask for a senior staff review: Request the facility’s privacy official or medical records manager to re-evaluate the denial, clarifying urgency and medical need.
• File a formal complaint: If the denial persists, file a complaint with the facility’s compliance department and the state health department. Include the request date, response, and all correspondence.
• Contact external oversight: File a complaint with the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) if HIPAA rights are believed to be violated. State attorneys general or consumer protection agencies can also help.

In many cases, a delay is a sign of miscommunication rather than a legal barrier. Persistent, documented follow-up and escalation can prompt a timely resolution.

What to Do If Records Are Delayed or Incomplete

If the records arrive late or incomplete, document what was received, what is missing, and when it was provided. Request the missing components explicitly and ask for a status update at set intervals. If portions are redacted, ask for the exact legal basis for redaction and confirm whether redactions relate to protected health information that should be disclosed under HIPAA with proper safeguards. If needed, request a copy of the facility’s policy on patient record access to understand operational timelines.

Costs and Fees

Under HIPAA, facilities may charge reasonable, cost-based fees for copying and mailing records, but not for the search or retrieval itself. Fees must be disclosed in advance, and a patient may request an itemized bill. If fees are excessive or hidden, challenge them with written requests for a fee breakdown and justification. Public hospitals and certain facilities may have different rules under state law, so consult your state health department for guidance on fees and compliance expectations.

Working With an Attorney or Advocate

When straightforward requests fail, seeking professional help can be effective. An attorney experienced in patient rights or elder law can draft formal demand letters, guide the appeal process, and represent the resident in disputes. Advocacy groups and senior-focused legal aid services can offer free or low-cost assistance. If pursuing legal action, document all communications, collect copies of the original request and responses, and outline how the lack of access has affected care decisions or safety.

Helpful Tips and Resources

• Keep a detailed timeline of all requests, responses, and deadlines.
• Use a clear, formal tone in all written communications and request confirmation of receipt.
• If the resident has a designated power of attorney or legal guardian, ensure the correct authority is cited in the request and that documentation is attached.
• Consider requesting the records in multiple formats (electronic, printed) to ensure accessibility.
• Include a brief statement of purpose to help staff prioritize the request when appropriate (e.g., ongoing medical evaluation, discharge planning).

Important resources include:

• HIPAA Privacy Rule information and guidance from the U.S. Department of Health and Human Services (HHS).
• State health department consumer protection or licensing boards for nursing homes and medical records policies.
• OCR complaint portal for potential HIPAA violations.
• State elder law or medical-legal partnerships for personalized assistance.