Records Did Not Arrive: A Date-and-Confirmation Log for Care Coordination

By the Connected Care Guide Team

If you asked a doctor’s office, hospital, or specialist to send your medical records and they still haven’t shown up, the fastest path forward is a written log: the date you asked, exactly how you asked, who confirmed it, and what confirmation number or reference they gave you. Under federal law, most health care providers and health plans have to act on a records request within 30 calendar days — and that clock started the day you asked, not the day you happened to follow up. A simple log turns “I think I called about this” into a documented timeline you can hand to a supervisor, a new provider’s office, or a federal regulator if it comes to that.

This guide gives you a copy-and-use log format, explains the timeline rules that apply to almost every provider, and lays out what your options are if the deadline passes.

Terms to Know

• HIPAA right of access: A federal rule under the Health Insurance Portability and Accountability Act (HIPAA) that gives you the right to see and get a copy of your own health records from most doctors, hospitals, clinics, and health plans.
• Covered entity: The federal term for a health care provider, health plan, or health care clearinghouse that HIPAA’s access rules apply to. Your doctor’s office and your hospital are both covered entities.
• Designated recipient: A third party — such as a new specialist — that you direct your provider to send your records to, instead of sending them to you first.
• Extension notice: A written explanation a provider must send you, within the first 30 days, if they need up to 30 additional days to complete your request. It has to state the reason for the delay and the date they expect to finish.
• Confirmation or reference number: Any ticket number, case number, fax confirmation sheet, portal message ID, or staff name and date that documents your request was received. Not every office issues one automatically — ask for it.
• OCR complaint: A formal complaint filed with the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR), the federal office that enforces HIPAA’s access rules.

Requesting Records Yourself vs. Directing Them to a New Provider

The records-request process works a little differently depending on where you want the records to end up. Both paths use the same legal deadlines, but the paperwork and follow-up steps differ.

Asking for your own copy

• You can ask verbally or in writing, though a written or portal-based request is easier to document later.
• You can request a specific format (paper, PDF, portal download, USB) and the provider generally has to accommodate a “readily producible” format.
• The provider may charge a reasonable, cost-based fee — limited to the labor of actually copying and preparing the records, supplies like paper or electronic media, and postage. They cannot charge you for the time spent searching for or reviewing your file, or for system and storage costs.

Directing records straight to a new provider

• Federal guidance requires this request to be in writing and signed by you, and it must clearly name the recipient and where the records should go.
• An electronically signed form, a signed fax, or a signed mailed letter all count — the office cannot require you to show up in person just to submit this request.
• The same 30-day (or 60-day, with a written extension notice) deadline applies, and the same limited fee rules apply.

Either way, the receiving side of the transfer — the new specialist’s office — often cannot tell you anything about a request they didn’t originate. Your log is the only complete record of the transfer unless both offices are asked to confirm it.

Your Date-and-Confirmation Log: A Step-by-Step Field Guide

Keep this log anywhere you’ll actually see it again — a notes app, a printed page, or a shared document with a family member helping you coordinate care. Add a new entry every time you contact either office about this transfer.

1. Log the original request first. Record the date you asked, which office you asked, the method (phone, portal message, in-person, fax, mail), the specific records you requested, and where they should be sent.
2. Get a name and a number. Ask whoever takes your request for their name and any ticket, case, or reference number tied to it. If they say they don’t issue one, write down the date, their name, and the exact words they used to confirm receipt.
3. Calculate your 30-day marker. Add 30 calendar days to your original request date and write that date down. That’s the outer deadline under the federal right-of-access rule, unless you receive a written extension notice.
4. Log every follow-up call or message. Each time you check in, record the date, who you spoke with, what they told you (e.g., “records are being prepared,” “request was never received”), and any new reference number.
5. Save any extension notice in writing. If the office sends you a written explanation for a delay, file it with your log and note the new completion date they gave you — providers are allowed one extension of up to 30 additional days, but it has to be explained in writing within the original 30-day window.
6. Note the destination confirmation separately. If records were sent to a new provider, log the date they say the file arrived, and if possible, get confirmation directly from the receiving office rather than relying on the sending office’s word alone.
7. Flag the 60-day outer limit. If the original 30 days plus one legitimate 30-day extension have both passed with no records and no further written explanation, your log now documents a request that has gone past the federal deadline.

Sample Log Entry Format

• Date of contact:
• Office contacted:
• Method (phone / portal / fax / mail / in person):
• Name of staff member spoken with:
• Confirmation or reference number given:
• What was requested (records type, destination):
• What I was told (status, expected date):
• Next follow-up date I set:

If the Deadline Passes

If your 30-day (or extended 60-day) window has passed with no records, no written extension notice, and no clear explanation, you have a documented basis to escalate:

• Ask to speak with a supervisor or the office’s privacy officer, and reference your log’s dates directly.
• Put your follow-up in writing (email or patient portal message) so there’s a timestamped record of the escalation itself.
• If the office still does not respond or comply, you have the right to file a complaint with the HHS Office for Civil Rights, the federal office that enforces the HIPAA right of access.

Your log is exactly what you’d attach to a complaint like this: dates, names, methods, and reference numbers, in order.

What This Guide Is Not

This is general educational information about a federal records-access process, not legal advice, and not a substitute for a medical, legal, or health-privacy professional’s review of your specific situation. It does not evaluate whether any particular office has violated the law in your case. If your situation involves a health emergency or you need records urgently for ongoing treatment, contact the treating provider’s office directly or, for a medical emergency, call local emergency services.

Related Reading on Connected Care Guide

• Before a records transfer ever comes up, it often starts with a meeting about your care plan — see Preparing for a Care Conference: Questions, Roles, and Notes.

Sources: U.S. Department of Health and Human Services, Office for Civil Rights — “Get it. Check it. Use it.” (hhs.gov/hipaa/for-individuals/right-to-access); HHS FAQs on request timeliness, permitted fees, and directing records to a third party (hhs.gov/hipaa/for-professionals/faq); HealthIT.gov Patient Engagement Playbook, Chapter 3 (playbook.healthit.gov/playbook/pe/chapter-3). Page last reviewed and updated September 2026.

By Connected Care Guide Editorial Team