Rights, in real situations
Healthcare & services
161 stored questions · 17 topics · No account needed
Choose where it happened. Read the rule, the exceptions and what you can do next. No chat needed.
Choose a state for local guides. The guides below cover specific federal rules.
Healthcare & services
Can I get a copy of my medical records?Background reading
Background reading
HIPAA generally lets you access health information held in designated records by covered providers and health plans. This can include medical, billing, lab and X-ray records.
Ask the provider’s records office how to request your information and the format you need.
This is background information, not a state-specific answer. Legal review pending.
Does that include every note a therapist keeps?Background reading
Background reading
No. Separately kept psychotherapy notes are excluded from HIPAA’s access right. Other mental-health records can still be accessible.
This is background information, not a state-specific answer. Legal review pending.
Can I ask to correct information in my medical record?Background reading
Background reading
HIPAA gives you the right to request corrections from covered organizations. Point out the entry, explain what is wrong and ask about their amendment process.
This is background information, not a state-specific answer. Legal review pending.
I am paying without insurance. Can I request a written estimate before booking care?Federal rule · specific setting
Federal rule · specific setting
For this situationA person not using health insurance to pay for planned US health care who asks the provider or facility for expected charges.
Usually, an uninsured or self-pay patient can request a good faith estimate of expected charges before scheduling. The provider or facility generally must supply it within three business days of that request.
What to do next
- Tell the billing office that you will not use insurance and request a written good faith estimate for the specific service.
- Ask which providers and facilities will bill separately and request their estimates too. Save dated copies before care.
- If a required estimate is missing, use CMS’s patient-rights guidance or call the No Surprises Help Desk at 800-985-3059.
What could change this answer?
- Scheduling at least three business days ahead triggers separate estimate timing rules; last-minute scheduling differs.
- Separately scheduled care and another provider’s services may not appear on the same estimate. Ask what the document includes.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
My self-pay bill is $500 above the written estimate. Can I challenge it through CMS?Federal rule · specific setting
Federal rule · specific setting
For this situationAn uninsured or self-pay patient who informed the provider before care, has the required advance good faith estimate, and received care on or after January 1, 2022.
You may qualify for patient-provider dispute resolution when one provider or facility bills at least $400 more than its good faith estimate and the other eligibility conditions are met.
What to do next
- Compare each provider’s billed amount with that provider’s estimate. Save both documents and mark the initial bill date.
- Review CMS’s eligibility checklist, including its advance-estimate requirement, then start the patient-provider dispute process before the deadline.
- Submit the documents and pay the administrative fee through the official process. Keep the case confirmation and respond to requests.
What could change this answer?
- Bills paid through insurance and bills without a qualifying estimate use different complaint or appeal routes.
- Unexpected necessary services that could not reasonably be anticipated can affect the decision; a $400 difference alone does not guarantee a reduction.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
Can a hospital emergency room require payment before screening me for an emergency?Federal rule · specific setting
Federal rule · specific setting
For this situationSomeone seeking emergency evaluation at a hospital emergency department subject to EMTALA, including most US hospital emergency departments.
A Medicare-participating hospital emergency department must offer an appropriate medical screening examination regardless of insurance or ability to pay. Payment inquiries must not delay required emergency screening or treatment.
What to do next
- Tell clinical staff your symptoms and that you are requesting an emergency screening exam. Seek immediate emergency help if needed.
- If payment is demanded first, ask for the charge nurse or supervisor and explain that you need screening regardless of ability to pay.
- After urgent care needs are addressed, record the hospital, time, symptoms, people involved, and demand. Use CMS’s EMTALA complaint instructions if screening was refused or delayed.
What could change this answer?
- A non-emergency office or clinic may not be covered by this hospital rule.
- If an emergency condition exists, available capabilities determine stabilization and appropriate-transfer duties; later billing is a separate issue.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
My doctor refuses to release my records until I pay an old treatment bill. Is that allowed?Federal rule · specific setting
Federal rule · specific setting
For this situationA patient requesting their own accessible health information from a HIPAA-covered provider, rather than a third party demanding records.
A HIPAA-covered provider cannot deny your right of access to your health information because you owe money for medical treatment. A permissible copying fee is a separate issue.
What to do next
- Send the records office a dated request identifying the records and format. Follow its reasonable identity-verification process.
- If the treatment balance is cited, ask the privacy officer to separate your access request from collection of the bill. Save the refusal.
- Use HHS OCR’s HIPAA complaint process if access remains denied. Include your request, delivery proof, and the provider’s stated reason.
What could change this answer?
- A reasonable, cost-based copy charge may still be allowed; it differs from an unpaid treatment bill.
- HIPAA coverage, whether you are the patient or authorized representative, and any access exception can change the outcome.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
It has been more than 30 days since my medical-records request. Can the provider keep delaying?Federal rule · specific setting
Federal rule · specific setting
For this situationAn individual requesting access to their protected health information held by a HIPAA-covered provider or health plan.
Under HIPAA, a covered entity must act within 30 calendar days after receiving an access request. It may take one additional period of up to 30 days with a timely written explanation and completion date.
What to do next
- Find the date the organization received the request, using portal confirmation, delivery proof, or its acknowledgement. Keep the original request.
- Ask its privacy officer whether an extension notice was issued and request the specific reason and promised completion date.
- If the deadline passes without proper action, file through HHS OCR’s HIPAA complaint route and include the timeline and correspondence.
What could change this answer?
- The deadline concerns action on an access request; a legally permitted denial may carry separate review rights.
- State access rules may be faster. Requests for amendment, rather than access, have different response rules and should be identified separately.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
I discovered an improper disclosure of my medical records months later. When does the HIPAA complaint clock start?Federal rule · specific setting
Federal rule · specific setting
For this situationA suspected HIPAA Privacy, Security, or Breach Notification Rule violation by a covered entity or a business associate subject to those rules.
An HHS OCR complaint generally must be filed within 180 days of when you knew or should have known about the alleged violation. OCR can extend that period for good cause.
What to do next
- Write down what happened, when it happened, and when and how you discovered it. Save notices and relevant messages.
- Use the HHS OCR complaint portal or its official complaint forms, identifying the organization and the conduct you believe violated HIPAA.
- Keep confirmation. If filing late, explain the specific facts supporting good cause rather than assuming the deadline will be excused.
What could change this answer?
- When you reasonably should have known can matter even if you personally noticed the issue later.
- A disclosure allowed by HIPAA or conduct by an entity outside its coverage may need a different route.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
My provider refused to amend an inaccurate record. Can my disagreement become part of the record?Federal rule · specific setting
Federal rule · specific setting
For this situationA patient whose request to amend health or billing information was denied by a provider or health plan covered by HIPAA.
If a HIPAA-covered provider or plan denies your amendment request, you can submit a statement of disagreement that must be added to the record under the amendment process.
What to do next
- Keep your original amendment request and the written denial. Identify the exact entry, date, and factual disagreement.
- Ask the privacy officer for the process to submit a statement of disagreement and any reasonable length limit. Provide a concise statement with supporting facts.
- Request confirmation that the statement was added. If the organization refuses the required process, preserve its response and contact HHS OCR.
What could change this answer?
- Requesting access to records is different from asking to amend them; access has its own rules.
- Who created the entry, whether it belongs in the designated record set, and whether it is accurate and complete affect amendment rights.
Links open the named service. REYETS does not send or file anything.
Federal rule. State or local protections may add to it. Legal review pending.
How do I document being denied access to a service?Background reading
Background reading
Start with requests and written responses; organization and date; only the sensitive details needed for your chosen route.
Keep your own observations separate from what someone told you. These are preparation steps, not a finding about your rights or eligibility.
This is background information, not a state-specific answer. Legal review pending.
No detailed guide matches yet. Try another topic or include background questions. We will not substitute another state’s rule.
These guides cover the situations they name. They are source-checked drafts, not a complete state law library or a lawyer’s review. County rules are not inferred from your state.
See sources and coverage →Get help applying a guide to your situation →