How to Retrieve Medical Records: Personal Injury Medical Record Retrieval

Medical record retrieval is the process a personal injury firm uses to request, track, receive, and verify a client’s medical records and bills from every provider who treated them. It starts with a signed HIPAA authorization, runs through a request and follow-up with each provider, and ends with a complete, certified set of records the firm can build a medical chronology and a demand on.

Retrieval is the longest wait in most pre-litigation cases. Providers answer on their own schedule, requests get lost, and the record you receive is often incomplete. Every missing record is a gap the adjuster can use, so the speed and completeness of retrieval shape how fast a demand goes out and how well it holds up.

This guide covers what to request, what an authorization needs, how long retrieval takes, what it costs, a five-step process, where retrieval breaks down, and how to choose between handling it in-house, using a retrieval service, or automating the follow-up.

What Is Medical Record Retrieval?

Medical record retrieval is obtaining complete medical documentation from healthcare providers for use in a legal claim. In personal injury, that means two separate sets of documents from each provider: the medical records, which describe the care, and the billing records, which price it.

A complete request for an injury case usually covers seven kinds of documents:

1. Emergency and hospital records, including EMS run reports, ER notes, admission records, and discharge summaries.
2. Physician and specialist notes, including office visits, consultations, and referrals.
3. Diagnostic imaging, the radiologist’s reports and, where they matter, the images themselves.
4. Lab and test results.
5. Therapy records, such as physical therapy, chiropractic, and occupational therapy notes.
6. Pharmacy records and prescription histories.
7. Itemized bills, usually a UB-04 for facility charges and a CMS-1500 for professional services, plus payment and adjustment records.

Records and bills come from different departments, often on different timelines. A provider can send a full chart and no bill, or a bill with no chart. Request both explicitly and track them separately.

What Do Lawyers Need to Request Medical Records?

Before suit, a firm requests records under a HIPAA authorization signed by the client. Under 45 CFR 164.508, a valid authorization has six core elements:

1. A specific description of the information to be disclosed.
2. The provider or class of providers authorized to disclose it.
3. The recipient, usually the firm.
4. The purpose of the disclosure. “At the request of the individual” is enough when the client initiates it.
5. An expiration date or event.
6. The client’s signature and date, or a representative’s signature with a description of their authority.

The form also has to tell the client they can revoke it, whether treatment depends on signing it, and that disclosed information may be redisclosed. It has to be in plain language, and the client gets a copy. Once a case is in suit, records can also come through a subpoena or court order. HIPAA allows that disclosure under 45 CFR 164.512(e), with conditions on notice or a protective order.

How Long Does It Take to Get Medical Records?

It depends on who asks. When a patient requests their own records, HIPAA gives the provider 30 days to respond, with one 30-day extension if the provider explains the delay in writing (45 CFR 164.524). Many states set shorter deadlines.

Requests a firm sends under a client’s authorization follow the provider’s own process and state law, and in practice they often take longer. A request can sit for weeks before anyone opens it, then come back incomplete. The firms that get records fastest don’t have special access. They follow up on a fixed schedule from the day the request goes out.

Records for a client still in treatment also keep changing. A set pulled in month two is out of date by month six, so plan for at least one update request before the demand.

What Does Medical Record Retrieval Cost?

Copy fees depend on who makes the request:

1. The patient’s own request. HIPAA limits the fee to a reasonable, cost-based amount for labor, supplies, and postage. HHS also allows a flat fee of up to $6.50 for electronic copies of electronically kept records.
2. A request under the client’s authorization. Since Ciox Health v. Azar (D.D.C. 2020), the HIPAA patient-rate limits don’t extend to requests from third parties such as law firms. State copy-fee laws govern these requests, and they vary widely.
3. A retrieval service. Services charge their own per-request fee on top of the provider’s copy and certification fees.

Some firms have the client request their own records to get the patient rate. If you do, make sure the client understands the request and the records reach the firm intact.

The fee is rarely the biggest cost. Staff time spent following up, and the weeks a case sits waiting for one missing provider, usually cost more.

Step-by-Step Medical Record Retrieval Process

1. Identify Every Provider

Start from intake, then keep looking. Clients forget providers, especially one-time visits like an urgent care stop or an imaging center. Cross-check the client’s list against EMS reports, referral notes, pharmacy records, and every bill that comes in. A provider found during demand drafting costs far more time than one found at intake.

2. Get Signed Authorizations

Have the client sign a HIPAA-compliant authorization at intake that covers every provider for the incident, plus separate forms for psychotherapy notes or substance use records when they apply. Check expiration dates, because a long case can outlive its authorization.

3. Send Complete Requests

Send each provider a request that names the client, the date range, and the records you need. Ask for itemized bills and medical records in the same request, state the format you want, and ask for a records custodian’s certification if you might need the records in court. Large health systems usually route requests through a central records department or an outside release-of-information vendor. Smaller practices often handle them through the office manager.

4. Track and Follow Up on Every Request

This is where most retrieval fails. Log each request with the date sent, the expected response date, and the contact at the provider. Follow up on a fixed schedule, not when someone remembers. Escalate to the records supervisor or compliance officer when a request stalls, and re-send lost requests the same day you learn they’re lost.

5. Check Completeness and Certify

When records arrive, check them before filing them away. Confirm the date range matches the request, every visit on the bill has a matching record, images and results are legible, and nothing is cut off. Records that come with a custodian’s certification can qualify as business records under Federal Rule of Evidence 803(6) and be self-authenticating under 902(11), and most states have an equivalent rule. Request what’s missing right away, while the client is still treating with that provider.

Where Does Medical Record Retrieval Break Down?

Five problems account for most retrieval delays:

1. Missing providers. A provider nobody requested from can’t send anything, and it often surfaces only when a bill or referral turns up mid-draft.
2. Partial productions. The provider sends some visits, or records with no bills.
3. Lost requests. The provider says it never received the request, and the clock starts over.
4. No follow-up cadence. Requests get chased when someone has time, so quiet files wait longest.
5. Stale records. The client keeps treating after the first pull, and nobody requests the update.

Each one widens the gap between the care the client received and the care the file documents. Gaps like that read to an adjuster as treatment gaps, even when the client never missed an appointment.

How Do PI Firms Handle Medical Record Retrieval?

Firms use five approaches, and most combine two or three.

Approach	Strength	Weakness	Best fit
In-house staff	Full control and direct provider relationships	Follow-up competes with every other task on a busy caseload	Lower-volume firms with dedicated records staff
Medical record retrieval services	Nationwide coverage, provider relationships, and certified copies	A per-request fee, and the records still need review when they arrive	Out-of-state providers, hard-to-reach facilities, and certified copies for litigation
Provider portals and direct electronic delivery	Fast where available	Coverage is uneven, and portal exports are often incomplete for legal use	Large health systems with established release processes
AI agents for follow-up	Every open request gets chased on schedule, and status logs to the case file	Agents follow up on requests; a person still handles exceptions and escalations	Firms whose bottleneck is follow-up volume
Managed pre-litigation service	Specialists run records work as part of the full pre-litigation process	Scope covers pre-litigation	Firms that want to hand off pre-litigation volume

How to Choose a Medical Record Retrieval Service

Ask five questions before you sign with a retrieval company:

1. What does a request cost all in? Get the service fee, the pass-through copy and certification fees, and any rush or re-request charges.
2. What’s the typical turnaround, and how is it measured? Ask for turnaround by provider type, from request sent to records received.
3. Do you request records and bills together? A service that returns charts without bills leaves you a second request to make.
4. How do you report status? You should see every open request and its last contact without having to ask.
5. How do records reach the case file? A PDF in an inbox still has to be filed, checked, and indexed by someone at your firm.

What Happens After the Records Arrive?

Retrieval delivers paper. The case needs a usable record.

1. Link every bill to a date of service. Every charge in the damages calculation should match a documented visit, and every visit should have a bill. A mismatch usually means a missing record or an unidentified provider.
2. Build the chronology. A medical chronology puts every visit, diagnosis, and treatment in date order so gaps and patterns show up.
3. Summarize for the demand. A medical summary distills the chronology into what the demand needs: the injury, the causation evidence, the treatment, and the ongoing care.
4. Mark the causation evidence. ER records written right after the incident, together with specialist findings, connect the injury to the incident.
5. Note future care. Treating providers’ notes on ongoing limitations and recommended care support projections of future medical costs.

Software can now summarize thousands of pages of medical records and flag what’s missing. For how firms compare those tools with review services, see the guide to medical record review services.

Where EvenUp Fits in Medical Record Retrieval

EvenUp works on the two parts of retrieval that take the most staff time: chasing requests and checking what came back.

1. Follow-up. The Chase Medical Records agent, one of EvenUp’s Communication Agents, calls providers about outstanding requests and logs each status to the case. EvenUp reports saving four or more hours per case on records follow-up.
2. Completeness. Medical Management organizes records and bills as they’re uploaded and flags which records and bills are still missing.
3. Chronology. MedChrons builds a chronology from the records automatically and updates it as new records arrive.

Firms that want the whole pre-litigation process handled, records work included, can use Pre-Litigation as a Service.

Every Missing Record Is a Discount the Adjuster Takes

An adjuster can only credit the care the file documents. A missing provider, a chart without its bill, or a records set that stopped three months before treatment ended all shrink the documented case, and none of them shows up until someone looks for it.

Firms that retrieve records well don’t have better access to providers. They identify every provider early, request records and bills together, follow up on a schedule, and check every production for completeness the day it arrives.

Frequently Asked Questions