The HHS Office for Civil Rights (OCR) reissued guidance clarifying that HIPAA's reasonable cost-based fee limits apply per request—not per page—and that patients choosing digital delivery should not be charged for paper reproduction they did not ask for.
Despite the reminder, hospital patient-access teams in multiple states continue quoting $1–$3 per page for electronic download portals, according to a coalition of health privacy clinics.
How to push back
- Cite 45 CFR § 164.524 and request an itemized estimate before paying.
- Ask for records in the format your EHR already supports (CCD, PDF export, or portal download).
- File an OCR complaint if the provider refuses a fee breakdown or delays beyond 30 days without extension notice.
State attorneys general may also enforce consumer protection laws on deceptive medical-records pricing, especially when estimates exceed the federal cap after labor and postage are separated.
Requesting a fee estimate first
Ask for an itemized estimate before payment and specify electronic format (portal download, CCD, or PDF). Decline paper reproduction fees when you did not request paper copies.
If the provider delays beyond 30 days without a written extension notice, document dates and file an OCR complaint while continuing to request records in writing.
Guides on patientadvocates.io
For step-by-step help, start with our Medical records access guide or browse related topics including Personal representatives, HIPAA & permissions.
Common questions
What is the HIPAA limit on medical records copying fees?
HIPAA allows only a reasonable, cost-based fee for copies, generally capped around $6.50 for digital records in many cases. Fees must reflect actual labor and postage—not per-page paper rates for electronic delivery.