HIPAA requires health care providers, health plans, and health care clearinghouse to allow you access to your medical records. Notices you receive from providers and plans must include information about how you can obtain copies of your medical records.
In addition to HIPAA, about half the states have laws that allow patients or their designated representatives to access medical records. Laws usually allow health care facilities to charge a "reasonable" fee for copying records.
If you receive care in a federal medical facility, you have a right to obtain your records under the federal Privacy Act of 1974 (5 USC sec. 552a,
www.usdoj.gov/foia/privstat.htm)
We advise that you make your request in writing. If you are denied access, you can file a complaint with the U.S. Department of Health and Human Service's Office of Civil Rights. (Contact information is provided at the end of this guide). Your state's medical privacy law might also enable you to file a complaint with state regulators.
http://www.privacyrights.org/fs/fs8-med.htm#E
