A resident or properly authorized representative can request nursing-home records, but two federal access frameworks may apply. HIPAA generally requires a covered provider to act on a request for protected health information in its designated record set within 30 calendar days, with one limited written extension. The federal nursing-home resident-rights rule can require access to records pertaining to the resident much faster and addresses copies after advance notice. State law may add stronger rights. A precise request should identify the requester’s authority, the records and dates, the preferred format, and the delivery destination.
Establish who is entitled to make the request
The resident can request their own records and should direct access when able. Another person needs recognized authority: for example, a personal representative under applicable law, a health-care agent whose authority is active, a court-appointed guardian within the order’s scope, or a person expressly authorized by the resident. Being an emergency contact, adult child, or bill payer does not automatically grant full access.
Send the relevant authority document and identification through the facility’s secure process. A power of attorney may cover health information, finances, both, or neither, and may become effective only after a specified event. Ask the privacy officer to identify any claimed defect in writing rather than repeatedly resending sensitive documents.
Choose the right record scope
HIPAA access reaches protected information in the designated record set, which commonly includes medical and billing records used to make decisions about the resident. Request named categories and a date range: assessments, care plans, physician orders, medication administration records, treatment records, nursing notes, therapy records, laboratory results, incident documentation in the resident’s record, transfers, and billing ledgers.
Not every internal document is necessarily in the access set. Psychotherapy notes and information compiled for certain legal proceedings are excluded, and limited denial grounds can apply. Ask the facility to produce the non-denied portion and issue the required written denial for anything withheld. For context on care documentation, review the guide to nursing-home care-plan meetings and records.
Invoke the faster resident-access rule when relevant
A Medicare- or Medicaid-certified nursing home must allow a resident access to records pertaining to that resident, including current clinical records, within 24 hours of an oral or written request, excluding weekends and holidays. After receiving records for inspection, the resident can purchase copies with two working days’ advance notice. The copy charge cannot exceed the community standard.
State in the request that the resident seeks inspection or copies under the nursing-home resident-rights rule as well as HIPAA, if both apply. The faster provision is especially useful for an immediate care-plan or safety concern. It does not mean staff must create a new analysis, answer interrogatories, or disclose another resident’s information.
Use the HIPAA clock and format rights correctly
Under HIPAA, the provider must act no later than 30 calendar days after receiving the access request. If it cannot do so, it may take one additional period of up to 30 days only after sending, within the first period, a written reason and completion date. The outer limit is not a routine waiting period; electronic records may be available sooner.
Ask for the form and format desired. If an electronic copy is readily producible that way, the provider should supply it; otherwise, agree on a readable alternative. Give a secure address or portal destination and specify whether records should go to the resident, representative, or another designated recipient. Keep proof of receipt because that date starts the clock.
Challenge an unsupported copying fee
HIPAA permits a reasonable, cost-based fee for copies. It can include allowed copying labor, supplies for the requested medium, postage, and an agreed summary or explanation. It cannot include search, retrieval, verification, system maintenance, or infrastructure costs. A per-page fee is generally not appropriate for records maintained electronically.
Ask for an estimate before production and an itemization if the amount seems high. State fee schedules do not override HIPAA if they authorize impermissible costs or an unreasonable charge for the request. Inspection is different from purchasing copies. Narrowing an unnecessarily broad date range can reduce expense without surrendering important records.
Escalate delay or denial in a documented sequence
First contact the health-information or privacy office with the original request, delivery proof, deadline, and missing categories. Ask for a written status and any denial. If urgent care is affected, separately contact the director of nursing or clinician rather than assuming a records complaint will solve the clinical issue.
Unresolved access problems may be raised through the facility grievance process, the state survey agency, or the federal health-privacy complaint process as appropriate. Suspected neglect requires a separate safety response; use this guide to documenting and reporting nursing-home concerns. Preserve originals and do not alter record exports.
After receipt, create an index rather than renaming or editing source files. Note missing date ranges, duplicated pages, unreadable scans and gaps in medication or treatment records. Send one focused deficiency list to the records office. If a clinical entry appears wrong, request an amendment through the provider’s process; keep the original and response. Access gives the requester a copy, not permission to overwrite the legal health record.
When records are needed for a move, the US nursing-home directory and planning hub can help identify possible receiving facilities. Send only the minimum necessary referral packet through an authorized channel; directory access does not authorize disclosure or guarantee that a home will admit the resident.
Can the home refuse records because a bill is unpaid?
HIPAA access cannot be denied because the resident has not paid for health-care services. The provider may charge a permissible copying fee, but an old care bill is different from that fee. Ask for the denial in writing if staff link access to payment. Billing disputes, collection issues, and the resident’s record-access rights should be handled on separate tracks.
Can a family member request everything?
Only if the family member has authority covering the requested information or the resident has provided a valid authorization. The facility may verify identity and scope. If authority is limited, the resident can request records directly or sign an authorization while capable. A representative should include proof and avoid asking for unrelated information about roommates, staff medical data, or other residents.
Who decides access, urgency, and continuing care?
The covered provider and its privacy officer must apply HIPAA and the nursing-home resident-access rule; applicable state law and enforcement authorities resolve stronger rights or disputed compliance; and the resident’s legal documents determine representative authority. Record access does not guarantee a clinical change, payer coverage, or another placement. The treating team, insurer or public program, and receiving facility separately decide care, coverage, availability, and admission.