How Much Can a Hospital Charge for Medical Records? State Caps, HIPAA, and a Fee Calculator (Free Tool)

By John Mahoney · December 8, 2026 · 8 min read

You get one number from the copy-fee rules that ends most records-pricing arguments: the maximum a provider or its release-of-information vendor may charge for this request, from this requester, in this format, in this state. The same chart can legitimately cost a few dollars or several hundred depending on who signed the request and the format, and vendors do not always get the arithmetic right. This post explains the three rules that stack on every invoice, how to check an invoice against them, what to do about an overcharge, and how to use the request itself to control the cost.

The three rules on every invoice

1. The state statute

Most states cap what a provider may charge for copies, usually a per-page rate that steps down after the first block of pages, sometimes with a flat search or retrieval fee and a separate rate for electronic copies. Some index the schedule to inflation each year. A minority leave the fee at "reasonable cost." The statute names the requester it applies to, and some states set a different rate for the patient than for an attorney or an insurer.

2. The HIPAA patient rate

Under 45 C.F.R. § 164.524(c)(4), when a patient (or personal representative) requests their own records, the covered entity may charge only a reasonable, cost-based fee covering the labor of copying, supplies, and postage, and, if the patient agreed to one, preparing a summary. HHS's guidance (FAQ on calculating the limited fee) describes three permitted methods: actual costs, an average-cost schedule, or, for electronic copies of electronically held records, an optional flat fee of up to $6.50 inclusive of labor, supplies and postage. Search and retrieval, system maintenance and compliance costs cannot be charged to the patient, and HHS does not consider per-page fees reasonable for electronic copies. Where a state schedule would charge the patient more, the HIPAA limit controls, because HIPAA pre-empts state law that gives individuals less protection.

3. Who signed the request

In Ciox Health, LLC v. Azar, No. 18-cv-0040 (D.D.C. Jan. 23, 2020), the court held that the patient-rate limitation applies only to an individual's request for access to their own records, not to a request that records be transmitted to a third party, and vacated HHS's 2016 guidance to the extent it said otherwise. HHS's notice on the order confirms that the patient's own access rights and fee limits are undisturbed. The practical result: an attorney request with a signed authorization, an insurer request or a subpoena pays the state schedule, which is why many firms have the client submit a HIPAA access request for a copy to the client, at the patient rate, and forward it.

How to check an invoice

1. Count the pages actually produced, not the pages requested. Duplicates, blank pages and fax covers count if they were produced and billed.
2. Identify the requester as the statute would: patient, patient's attorney with authorization, or subpoena.
3. Identify the format delivered. Electronic delivery is often a separate, lower schedule.
4. Apply the state schedule for that requester, format and page count, adding only the postage and sales tax the statute allows.
5. If the patient made the request, apply the HIPAA rule too and take the lower figure.
6. Compare to the invoice. The difference is the amount to dispute.

A worked example (hypothetical)

The facts and the fee schedule below are invented for illustration and do not describe any real state, provider or vendor. Use the calculator for the actual figure in your state.

A plaintiff's paralegal requests a 640-page hospital chart with a signed authorization and receives a PDF on a portal link. The invoice from the release-of-information vendor reads: retrieval fee $25.00; 640 pages at $1.00 per page, $640.00; electronic delivery fee $15.00; total $680.00.

Suppose the state's statute for an attorney request allows a $20 search fee, $0.75 per page for the first 100 pages and $0.25 per page thereafter, and provides that electronic copies are billed at half the paper rate. Running the request through the calculator with those inputs produces a paper maximum of $20 + $75 + $135 = $230, and an electronic maximum of $20 + $105 = $125. The invoice is $555 over the electronic maximum. The calculator's dispute paragraph cites the statute and the figure, and asks for a corrected invoice or a refund within 30 days.

Now suppose the same chart had been requested by the patient herself, electronically. The HIPAA rule applies, search and retrieval cannot be charged at all, per-page fees for electronic copies are not considered reasonable, and the provider may charge its actual labor and supply cost or the $6.50 flat fee. The state figure of $125 does not control because it would give the patient less protection than federal law. The paralegal's firm would have saved more than the cost of the request by having the client sign the HIPAA access request and forward the file.

What to request next

• An itemized invoice that states the statute or rule the vendor relied on and the page count billed.
• The provider's or vendor's written fee schedule in force on the date of the request.
• For a patient request, the provider's cost-based calculation if it charged more than $6.50 for an electronic copy.

What the tool does not do

The calculator reads each state's figure from the statute, regulation or official fee notice it links to, with a verified date and a confidence flag; a state marked "unverified" shows only the federal rule. It does not know your invoice's history, whether sales tax applies, or whether a particular vendor has a contract rate. Fee schedules change, so confirm against the current statute before a figure goes into a letter or a motion.

Frequently asked questions

How much can a hospital charge a patient for a copy of their own records?

Under 45 C.F.R. § 164.524(c)(4), a patient's own access request may be billed only a reasonable, cost-based fee limited to the labor of copying, supplies, and postage. Search and retrieval costs cannot be charged. For an electronic copy of electronically held records, HHS guidance allows an optional flat fee of up to $6.50 inclusive of labor, supplies and postage. Where a state schedule would produce a higher number for a patient request, the HIPAA limit controls.

Do the HIPAA fee limits apply when my attorney requests the records?

Not since Ciox Health, LLC v. Azar (D.D.C. Jan. 23, 2020). The court held that the patient-rate limitation applies only to an individual's request for their own records, not to a request that records be sent to a third party. Attorney, insurer and subpoena requests pay the state fee schedule. HHS's notice on the order says the patient's own access rights and fee limits are unchanged.

Is $6.50 the most a provider can ever charge?

No. HHS has clarified that $6.50 is an optional flat-fee method for electronic copies, not a cap on every patient request. A provider may instead charge its actual or average cost for permitted items. Per-page fees for electronic copies, however, are not considered reasonable under HHS guidance.

What do I do if I was overcharged?

Compare the invoice to the state maximum for the requester, format and page count, and to the HIPAA figure if the patient made the request. Send a dispute letter with the invoice to the records department or the release-of-information vendor named on it, keep a copy, and if there is no refund consider the state attorney general's consumer-protection office or, for a patient request, a complaint to the HHS Office for Civil Rights.

Related: the Records Request Builder and what to do when records are altered or missing.