Category: Medical Records & Expert Witnesses

Patients can request copies of records through the provider’s designated records process and preserve them in their original form for independent review. Under the federal HIPAA access rule, individuals generally have a right to inspect or obtain copies of protected health information in a designated record set, subject to exceptions. An organized record collection helps clinicians, billing specialists and legal reviewers identify what is known—and what remains uncertain.

Start with a precise written request

Identify the patient, dates of service and facilities involved. Request progress notes, physician orders, nursing documentation, laboratory results, imaging reports, discharge summaries and relevant billing records. Ask separately how to obtain the underlying imaging files, which may not arrive with a PDF chart. If the records are held by several organizations, send a request to each appropriate custodian.

Understand access rights and limits

The federal HIPAA access rule generally requires covered entities to act on an access request within 30 calendar days, with a permitted extension under specified conditions and notice requirements. State law may provide additional rights or shorter periods. Some information is excluded from the access right, including certain psychotherapy notes and materials prepared for litigation. If a request is denied, ask for the specific basis and applicable review rights rather than assuming every withheld document is unlawful.

Preserve originals and a record of the process

Save the files exactly as received. Record the date requested, the receiving office, confirmation number, delivery date and format. Make working copies for annotation rather than marking up originals. If a portal changes over time, download available documents and preserve relevant messages. Do not attempt to access another person’s account or alter metadata. For paper copies, scan legibly and retain the originals.

Build a chronology without jumping to conclusions

Create a timeline with separate columns for the documented event, source document, time and unanswered question. Distinguish a clinician’s contemporaneous note from a later recollection. A missing note does not automatically establish that care was not provided; it may warrant asking whether a separate system contains the record. Record discrepancies neutrally and seek clarification from the provider.

What an expert needs

A qualified reviewer needs enough context to assess the clinical circumstances, alternatives, expected risks and causal relationship to harm. Do not ask an expert merely whether the outcome was bad. Ask what standard applied at the time, what evidence supports a deviation, whether the injury could have occurred despite appropriate care, and what additional records would change the analysis. The reviewer should disclose relevant limitations.

Medical records and insurance disputes

Records can also support an appeal of a treatment denial or an unpaid provider claim. The question is different: a payer dispute asks whether a benefit or payment is owed under governing rules; a malpractice review asks whether care fell below a professional standard and caused compensable injury. Do not conflate the two.

Frequently asked questions

Can I request an electronic copy? Often yes, when the information is readily producible in that form. Can a provider charge a fee? Certain reasonable, cost-based fees may be permitted under HIPAA; rules vary. What if records are incomplete? Ask the records office to identify the scope searched and whether other custodians maintain missing components.

Further reading

See how malpractice differs from a poor outcome. The HHS guide to obtaining medical records explains patient access, and the HHS right-of-access guidance provides detailed rules.

An independent expert needs more than a discharge summary or a single disputed note. The useful record usually includes the clinical timeline, orders, test results, medication administration, consultations, handoffs, and subsequent treatment. The goal is to determine what clinicians knew or reasonably should have known at each decision point—not to assume that a bad outcome automatically establishes negligence.

Build a chronology before forming a conclusion

Start with the first symptom or encounter relevant to the allegation. Record who assessed the patient, the time of each order, when a result became available, when it was reviewed, and what happened next. Separate contemporaneous chart entries from later recollections. A timeline can reveal whether a delay was clinical, administrative, or caused by a missing handoff. It can also show that a provider responded appropriately to the information then available.

Request more than the physician’s progress notes

Potentially relevant materials include nursing notes, medication administration records, laboratory and imaging reports, referral communications, operative and anesthesia records, consent forms, discharge instructions, and follow-up messages. Ask whether the facility maintains audit logs, amended entries, telephone records, or separate portals. Not every item will be obtainable through an ordinary HIPAA access request, and litigation discovery rules differ. Keep a log of what was requested, received, and missing.

How HIPAA access works

The federal HIPAA right of access generally covers protected health information in designated record sets maintained by covered providers and plans, subject to limited exceptions. It can include billing and claims information as well as clinical records. The rule does not require an organization to create an explanation that does not already exist. Requests should identify the date range, providers, record types, preferred format, and delivery method. If access is denied, request the written basis and available review process.

What the expert must actually answer

An appropriate specialist should identify the applicable standard of care, the specific departure alleged, and whether that departure more likely caused the claimed injury under the jurisdiction’s evidentiary standard. Experts should consider competing diagnoses, baseline risk, patient decisions, and what treatment alternatives were realistically available. An expert’s credentials, specialty match, and opinions may be subject to state statutes and court evidence rules. Ask for the assumptions and documents underlying each conclusion.

Protect the integrity of evidence

Do not annotate original medical records or alter metadata. Store a read-only copy, keep source filenames, and note the date of download. A patient’s own symptom diary can be valuable if it distinguishes firsthand observations from what others said. Providers should follow record-retention policies and preserve relevant system data when a dispute is reasonably anticipated. Incomplete records are not automatically proof of concealment; identify the missing item and ask how the system stores it.

Frequently asked questions

Can a family member request records? Authority depends on the patient’s authorization, legal representative status, and applicable law. Can an expert decide liability by themselves? No; experts provide opinions, while courts and fact-finders apply legal standards. Are billing records relevant? Sometimes, especially when timing, services rendered, or payer communications are disputed. Medical malpractice analysis and a health-insurance appeal remain legally distinct.

Further reading

For related context, read this Did They Pay? investigation and practical guide. Consult HHS guidance on information available through HIPAA access and HHS guidance on family access to records for primary guidance.