You have a legal right to request your parent's medical records from any provider — and with a HIPAA authorization form, every clinic must comply within 30 days. The hard part isn't the law; it's knowing where to start when your parent has seen dozens of providers across decades.
You need a signed HIPAA authorization form from your parent (or from their healthcare power of attorney if they can no longer sign). This form names you as the person authorized to receive their records. Most provider offices have their own version, or you can use a general HIPAA authorization template — but every form must include your parent's name, your name, a description of what records to release, and your parent's signature.
If your parent has a healthcare proxy or medical power of attorney naming you, bring that document too. Some offices want both.
Talk to your parent's doctor about the best way to handle authorization for their specific situation.
Start with the providers that hold the broadest picture, then fill gaps:
Your parent's primary care doctor usually has the longest history: annual checkups, referrals, medication changes, test results forwarded from specialists. Start here.
The pharmacy has a complete medication fill history — often going back years. This list shows what was prescribed, when, and by whom. Ask for a full medication history printout.
Hospital medical records departments handle requests separately from the doctors who treated your parent there. Contact the hospital's Health Information Management (HIM) or medical records office directly.
Each specialist holds records specific to their area. Prioritize the ones your parent sees regularly. If you're not sure who they've seen, the primary care doctor's referral history often reveals the full list.
Don't just ask for "all records" — that can produce thousands of pages with no context. Be specific:
Most offices can send records electronically — fax, secure email, or patient portal download. Ask for electronic copies whenever possible. Paper records get lost; digital ones can go straight into a timeline.
Federal law requires providers to respond within 30 days (with one optional 30-day extension if they notify you). In practice:
Follow up after two weeks if you haven't heard back. Offices lose requests. A polite phone call usually unsticks things.
Under HIPAA, providers may charge a "reasonable, cost-based fee" for copies — but many states cap this or prohibit charges for electronic copies sent directly to the patient. Some offices waive fees entirely. Ask before signing: "Is there a fee for electronic copies?" If the cost seems unreasonable, your state's health department or attorney general's office can tell you the allowable maximum.
The goal is one complete timeline — not another pile. Once you've gathered records from every provider, the question is how to keep it organized going forward.
With Family Stork, every person gets their own private email address. Give it to each doctor, specialist, pharmacy, and hospital. When they send records — visit summaries, lab results, medication changes — the timeline files them automatically. No portal logins, no uploading PDFs, nothing for the clinic to learn. They send an email; the record updates itself.
For the records you've already gathered, snap photos or forward the electronic copies. The AI reads them and files them into the right spot on the timeline.
If your parent lacks capacity to sign, the person named in their healthcare power of attorney (or court-appointed guardian) can sign on their behalf. Bring the power of attorney document to the provider's office. Talk to your parent's doctor about how to handle this in their specific situation.
Medical records must be retained for a minimum number of years (varies by state — typically 6–10 years after the last visit). When a practice closes, records are usually transferred to another provider, a storage company, or the state medical board. Contact your state's health department or medical licensing board to find out where retired doctors' records went.
Yes — as long as the retention period hasn't expired. Hospitals keep records for years (often 10+, sometimes indefinitely for certain records). Contact the hospital's Health Information Management department with a signed authorization. Older records may only be available on paper or microfiche.
Most providers accept a general HIPAA authorization, but some require their own form. Call ahead and ask: "Do you accept a general HIPAA authorization, or do you have your own form?" Having both ready saves a trip.
You probably won't — and that's okay. Start with the providers you know about, then ask the primary care doctor for their referral history. Over time, gaps fill themselves as new records come in and prompt questions about what's missing.
Your parents' records are scattered across every doctor they ever had. Bring them together in one timeline — one address every clinic already knows how to use.
$99/year — or about $10 a month.
Start your parent's record — free