Medical Records Request Checklist for Attorneys: What to Ask For and Why

By John Mahoney | April 2026 | 15 min read

Incomplete medical records are the silent killer of medical malpractice and personal injury cases. An attorney who requests "all medical records" and assumes the production is complete is an attorney who will be surprised at deposition -- or worse, at trial -- when a critical document surfaces that should have been in the file from the beginning.

The problem is not that facilities refuse to produce records outright. The problem is more subtle than that. Most medical records departments respond to requests with whatever their default production protocol generates, and that default almost never includes everything that exists in the chart. Incident reports get routed to risk management. Fetal monitoring strips stay in a separate storage system. Pathology slides are not considered "records." Nursing flow sheets get omitted because they were not specifically requested. The result is a production that looks complete but is missing the exact documents that matter most.

This guide provides a comprehensive, provider-type-specific checklist for requesting medical records in litigation. It covers what to ask for and why, the difference between authorization-based requests and subpoenas, common mistakes that lead to incomplete productions, the records that facilities routinely withhold unless specifically demanded, HIPAA authorization requirements, and how to prepare for a custodian of records deposition when the production is disputed.

The Foundation: Why Generic Requests Fail

A records request that says "please provide all medical records" is technically sufficient under most state laws and HIPAA. In practice, it produces incomplete results for several reasons.

First, medical records departments interpret "medical records" to mean the contents of the designated record set -- the specific collection of documents that the facility defines as the official medical record. This designated record set typically includes progress notes, orders, lab results, imaging reports, and discharge summaries. It typically does not include incident reports, peer review materials, quality assurance documents, correspondence between providers, billing records, or separately stored items like fetal monitoring strips and surgical videos.

Second, many facilities maintain records in multiple systems that do not automatically consolidate into a single production. The electronic health record may contain clinical notes, but radiology images live in a PACS system, pathology results are in a laboratory information system, and billing data is in a separate revenue cycle platform. A generic request may pull from the EHR but miss everything else.

Third, some records -- particularly those related to risk management, incident reporting, and peer review -- are affirmatively withheld because the facility considers them privileged or protected. Whether that privilege actually applies depends on state law, but the facility will not produce them unless they are specifically requested and, often, subpoenaed.

The solution is specificity. The more precisely you describe what you want, the more complete the production will be.

Master Checklist: Hospital Inpatient Records

Hospital records are the most voluminous and the most commonly incomplete. A single inpatient stay can generate thousands of pages across dozens of document types. The following checklist covers the categories that should be requested for every hospital admission at issue in litigation.

Administrative and Admission Records

• Face sheet (demographic and insurance information)
• Admission and registration forms
• Advance directives and power of attorney documents
• Consent forms (general consent to treatment, procedure-specific informed consent, blood product consent, research consent)
• Conditions of admission / patient rights acknowledgment
• Transfer documentation (if the patient was transferred from or to another facility)

Physician Documentation

• History and physical examination (H&P)
• Daily progress notes (attending, resident, fellow, and APP notes)
• Consultation reports (all specialties)
• Operative reports (all procedures)
• Pre-operative and post-operative notes
• Anesthesia records (pre-anesthesia evaluation, intraoperative anesthesia record, post-anesthesia recovery notes)
• Procedure notes for bedside procedures (central line placement, intubation, lumbar puncture, chest tube insertion)
• Discharge summary
• Discharge instructions given to the patient
• Death summary and pronouncement note (if applicable)
• Autopsy report (if applicable -- may require separate request to pathology)

Nursing Documentation

• Nursing admission assessment
• Nursing progress notes (narrative notes and flowsheet entries)
• Vital signs records (including all documented vital sign checks, not just summary sheets)
• Intake and output records
• Medication administration records (MARs)
• Nursing flow sheets (neurological checks, pain assessments, fall risk assessments, skin assessments, restraint documentation)
• Code blue / rapid response team records
• Patient education documentation
• Nursing discharge assessment

Diagnostic Results

• Laboratory results (all ordered tests with reference ranges, including any that were ordered but not resulted or cancelled)
• Radiology reports (all imaging studies: X-ray, CT, MRI, ultrasound, nuclear medicine)
• Actual radiology images on CD or digital media (not just the radiologist's report)
• Pathology and cytology reports (including gross and microscopic descriptions)
• Pathology slides and tissue blocks (requires separate request to the pathology department -- these are not part of the standard chart)
• EKG tracings (the actual strips, not just the machine interpretation)
• Echocardiogram reports and images
• Pulmonary function test results
• Microbiology and culture results
• Blood bank records (transfusion records, crossmatch results, blood product administration)

Orders and Pharmacy Records

• All physician orders (written and electronic, including verbal and telephone orders)
• Pharmacy dispensing records
• IV fluid administration records
• Controlled substance administration logs

Specialty-Specific Records

• Fetal monitoring strips (obstetric cases -- these are frequently stored separately and omitted from standard productions)
• Surgical videos and photographs (often stored on separate systems; must be specifically requested and preserved)
• Anesthesia machine data logs
• Ventilator settings and respiratory therapy records
• Physical therapy, occupational therapy, and speech therapy notes
• Social work and case management notes
• Dietary / nutrition consult notes
• Wound care documentation and photographs

Incident and Risk Management Records

• Incident reports / occurrence reports / variance reports (note: facilities will object to producing these and will assert peer review or quality improvement privilege -- the availability depends on state law)
• Risk management files related to the patient
• Patient complaint records
• Correspondence between the facility and the patient or patient's family regarding the care at issue

Checklist: Emergency Department Records

Emergency department records require their own request because ED documentation is structured differently from inpatient records and is sometimes maintained in a separate system.

• EMS / ambulance run reports (these are maintained by the transporting agency, not the hospital -- request separately from the fire department, ambulance service, or EMS authority)
• ED triage assessment (triage time, chief complaint, acuity level, vital signs at triage)
• ED physician notes (often templated and auto-populated -- request the complete note, not just the printed summary)
• ED nursing notes (real-time documentation of assessments, interventions, and patient status changes)
• ED flow sheet (vital signs, medications administered, procedures performed, with timestamps)
• ED physician orders
• ED consultation notes (specialist consultations called from the ED)
• Psychiatric evaluation notes (if applicable)
• ED disposition documentation (admission orders, transfer paperwork, discharge instructions, AMA forms)
• ED tracking board data / timestamps (time of arrival, time to physician, time to disposition -- often maintained electronically and not included in the standard chart)

Checklist: Physician Office / Outpatient Records

Office-based records are typically less voluminous than hospital records but can be equally critical, particularly in failure-to-diagnose and failure-to-refer cases.

• New patient registration and history forms
• Office visit notes (all visits within the relevant time period -- request by date range, not just the visit at issue)
• Referral documentation (letters, electronic referrals, specialist requests)
• Prescription records and medication lists
• In-office test results (EKGs, spirometry, point-of-care testing)
• Laboratory and imaging orders with results (the ordering provider's copies, which may include annotations)
• Telephone encounter notes and patient portal messages
• Correspondence with other providers (referral letters, results letters, consultation follow-up)
• Prior authorization documentation
• Patient no-show and cancellation records
• After-hours call logs and on-call documentation
• Vaccination records
• Screening questionnaires (depression screening, substance use, fall risk)

Checklist: Surgical and Ambulatory Surgery Centers

• Pre-surgical evaluation and clearance documentation
• Informed consent forms (procedure-specific, with documented risks discussed)
• Surgical safety checklist (WHO surgical checklist or equivalent -- time-out documentation)
• Operative report
• Anesthesia records (pre-op, intra-op, and post-op)
• Intraoperative nursing notes
• Surgical specimen logs
• Equipment and implant logs (lot numbers, serial numbers, manufacturer information)
• Surgical videos and intraoperative photographs
• PACU (post-anesthesia care unit) records
• Post-operative orders and instructions

Checklist: Radiology and Imaging Facilities

• Radiology reports for all studies (preliminary and final reads)
• Addendum reports and amended reads (critical -- amended reports may reflect a missed finding on initial read)
• Actual diagnostic images on CD or digital media (DICOM format)
• Comparison studies referenced in reports
• Critical result notification logs (documentation that abnormal findings were communicated to the ordering provider, including time, method, and person notified)
• Peer review or quality assurance findings related to reads on the patient (subject to state privilege law)
• Technologist notes

Checklist: Long-Term Care and Nursing Facilities

Long-term care records have a unique structure dictated by federal and state regulatory requirements. They are often the most disorganized and incomplete productions attorneys encounter.

• Minimum Data Set (MDS) assessments (required by CMS -- comprehensive assessments at admission, quarterly, annually, and with significant change in condition)
• Care plans (initial and all updates)
• Physician orders (standing, PRN, and acute orders)
• Nursing notes (daily and per-shift documentation)
• Certified nursing assistant (CNA) documentation (ADL flow sheets, repositioning logs, food and fluid intake)
• Medication administration records
• Fall logs and incident reports
• Wound care documentation and wound measurement records with photographs
• Weight records (weekly or monthly)
• Dietary records and nutritional assessments
• Therapy notes (PT, OT, ST)
• Social work notes
• State survey deficiency reports (these are public records and can be obtained from the state health department if the facility does not produce them)
• Staffing records (daily staffing logs, census data -- relevant in understaffing cases)
• Transfer and discharge documentation

Checklist: Pharmacy Records

• Prescription fill history (all medications dispensed within the relevant period)
• Prescription images (scans of original prescriptions)
• Pharmacist consultation notes
• Drug interaction alerts and overrides
• Controlled substance dispensing logs
• Compounding records (if custom medications were prepared)
• Prior authorization records

HIPAA Authorization: Getting It Right

The Health Insurance Portability and Accountability Act permits disclosure of protected health information for litigation purposes, but the authorization form must meet specific requirements. An authorization that is deficient on any element gives the facility a basis to refuse production -- and many will use any available technicality to delay.

Required Elements of a Valid HIPAA Authorization

Special Authorization Requirements

Certain categories of records require separate or enhanced authorization under federal and state law:

• Substance abuse treatment records (42 CFR Part 2): Records from federally assisted alcohol and drug abuse programs require a specialized authorization form that is separate from the standard HIPAA authorization. The 42 CFR Part 2 authorization has additional requirements including the name of the program, the amount and kind of information to be disclosed, and a specific prohibition against redisclosure statement.
• HIV/AIDS records: Many states impose additional protections on HIV-related information that exceed HIPAA requirements. Check your jurisdiction's specific authorization requirements.
• Mental health and psychotherapy records: Psychotherapy notes (as defined by HIPAA -- the therapist's personal session notes) are afforded heightened protection and require a separate specific authorization. Note that psychotherapy notes are distinct from the mental health treatment record, which can be disclosed under standard authorization.
• Genetic information: The Genetic Information Nondiscrimination Act (GINA) and state genetic privacy laws may impose additional consent requirements for genetic testing results.

Authorization vs. Subpoena: When to Use Which

Attorneys have two primary mechanisms for obtaining medical records: a patient-signed authorization and a subpoena (or subpoena duces tecum). Each has advantages and limitations, and the choice between them has strategic implications.

Authorization-Based Requests

Subpoena-Based Requests

The Recommended Approach

For most cases, the optimal strategy is a two-stage approach. Start with an authorization-based request that is as specific as possible, using the checklists in this guide. Review the production for completeness. Then, if the production is incomplete -- as it often will be -- follow up with a subpoena that specifically identifies the missing documents. This approach is faster, less expensive, and less adversarial than leading with a subpoena, while preserving the ability to compel production when necessary.

What Facilities Try to Withhold (and How to Get It)

Every experienced litigation attorney has encountered facilities that produce an incomplete record set and declare the production complete. Sometimes the omission is innocent -- the records department simply did not know the requested documents existed or were stored in a different system. Other times, the omission is strategic.

The following categories of records are most commonly withheld or omitted from standard productions:

1. Incident Reports and Occurrence Reports

Facilities routinely refuse to produce incident reports, citing peer review privilege, quality improvement privilege, or attorney-client privilege. The availability of these reports depends entirely on state law. In some jurisdictions, incident reports prepared in the ordinary course of business (as opposed to those prepared at the direction of counsel for anticipated litigation) are discoverable. In others, they are categorically protected. Know your state's law on this issue and be prepared to brief it if the facility objects.

2. Fetal Monitoring Strips

In obstetric malpractice cases, the fetal heart rate monitoring strips are frequently the most critical evidence in the case. They are also frequently omitted from standard records productions because they are stored in a separate archival system -- often on paper rolls or in a dedicated electronic fetal monitoring database that is not integrated with the EHR. You must specifically request fetal monitoring strips by name, and you should do so early, because many facilities have limited retention periods for this data.

3. Surgical Videos and Intraoperative Photographs

Many surgical procedures are now routinely recorded on video, particularly laparoscopic, arthroscopic, and robotic-assisted procedures. These videos are rarely included in standard records productions and may be overwritten or deleted on a short retention cycle. Request preservation and production of surgical video immediately upon case intake, and send a separate litigation hold letter to the facility's risk management department.

4. EHR Audit Trails and Metadata

Electronic health records maintain detailed audit trails that log every access, modification, and deletion of chart entries. These audit trails can reveal when a note was written versus when it was dated, whether entries were modified after the fact, who accessed the chart and when, and whether late entries were added. Audit trail data is almost never included in a standard production and must be specifically requested. Facilities frequently resist producing it.

5. Nursing Assignment and Staffing Records

In cases involving nursing negligence or understaffing, the facility's daily staffing records, nurse-to-patient ratios, and assignment sheets are critical evidence. These records are maintained by nursing administration, not by the medical records department, and will not be produced unless specifically requested.

6. Communication Logs

Many hospitals use secure messaging platforms, paging systems, and internal communication tools that generate logs of communications between providers. A physician's text page to a specialist requesting an urgent consult -- and the specialist's delayed response -- may be documented in a paging system log that is never part of the medical record. Similarly, telephone orders and verbal notifications are sometimes documented in communication logs that are separate from the clinical notes.

7. Equipment and Device Records

In cases involving medical device malfunction, equipment failure, or medication pump errors, the equipment maintenance logs, calibration records, and device data downloads are essential. These records are maintained by the biomedical engineering department, not by medical records. Infusion pump data logs, ventilator settings logs, and cardiac monitor alarm history can all be critical evidence that requires a specific, targeted request.

"In twenty years of medical malpractice defense, I can count on one hand the number of times a plaintiff's firm requested the EHR audit trail in their initial records request. It is the single most underutilized category of evidence in medical malpractice litigation."

Common Mistakes in Medical Records Requests

Even experienced firms make avoidable errors in the records request process. The following mistakes are the ones that most frequently result in incomplete productions, delays, and problems at trial.

1. Requesting by Provider Instead of by Facility

A request for "all records of Dr. Smith" sent to a hospital will often produce only the notes authored by Dr. Smith -- not the nursing notes, lab results, radiology reports, and consultant notes that are part of the same episode of care. Always request by facility and date range, not by individual provider.

2. Failing to Request Records from All Relevant Providers

The medical records themselves are the best source for identifying additional providers. Progress notes reference consultants. Discharge summaries list follow-up providers. Lab results come from reference laboratories. Imaging may have been read by a teleradiology group. If you do not cross-reference the records you receive against the providers mentioned in those records, you will have gaps.

3. Waiting Too Long to Request Records

Medical records retention periods vary by state and by record type. Most states require hospitals to retain records for 7 to 10 years, but some categories of records (fetal monitoring strips, surgical videos, equipment logs) may have much shorter retention periods. In addition, facilities are increasingly transitioning between EHR systems, and records from legacy systems may become difficult or impossible to retrieve. Request records as early as possible in the case lifecycle.

4. Accepting the First Production as Complete

When you receive a records production, compare it against your request line by line. If you requested 15 categories of records and the production includes 8, send a deficiency letter identifying the missing categories and requesting completion. Do not assume that the omitted categories do not exist -- assume that they were not produced.

5. Not Preserving Electronic Evidence Early Enough

A litigation hold letter should be sent to every facility and provider at the earliest possible stage, specifically identifying categories of electronic evidence that may be subject to routine deletion: surgical videos, fetal monitoring data, EHR audit trails, equipment logs, and communication platform data. Spoliation of evidence is a powerful argument, but only if you can prove the evidence existed and was destroyed after the duty to preserve attached.

6. Using the Facility's Own Authorization Form

Many facilities provide their own HIPAA authorization forms and insist that patients use them. These facility-generated forms are often narrower in scope than what the attorney needs, and they may include limitations that restrict the categories of records produced. Use your own HIPAA-compliant authorization form that specifically enumerates the categories of records you are requesting. If the facility insists on its own form, submit both.

Custodian of Records Deposition: When and How

When a records production is incomplete, disputed, or when the authenticity of the records is at issue, a custodian of records deposition is the mechanism for getting answers. The custodian of records is the person at the facility who is responsible for maintaining and producing the medical record, and they can testify about what the record contains, how it was maintained, and whether the production is complete.

When to Take the Custodian's Deposition

• The production is incomplete and the facility has not responded to deficiency letters
• You suspect records have been altered, backdated, or deleted
• The facility has refused to produce specific categories of records (incident reports, audit trails, communication logs)
• You need testimony about the facility's record-keeping practices to authenticate records at trial
• The records contain entries that appear inconsistent (different fonts, timestamps out of sequence, entries that reference events that had not yet occurred)

Key Deposition Topics

Documents to Request in Advance

Before the custodian deposition, subpoena the following documents to be produced at or before the deposition:

• The facility's medical records policy and procedures manual
• Records retention and destruction schedule
• EHR audit trail for the patient at issue
• Litigation hold notices issued in connection with the case
• Correspondence between the facility's medical records department and risk management regarding the records request
• Certification that the production is complete (or identification of withheld documents with privilege log)

Using AI to Identify Record Gaps

One of the most powerful applications of AI in medical-legal work is the automated identification of missing records. When an AI tool like MedLegal AI processes a set of medical records, it does more than extract dates and build a timeline. It cross-references every provider name, facility, referral, diagnostic order, and follow-up recommendation against the records that were actually received.

This cross-referencing reveals gaps that a manual reviewer might miss, particularly in large record sets from multiple providers. Examples include:

• A consultation report references a specialist who was seen, but no records from that specialist were received
• Lab results are referenced in a progress note, but the actual lab reports are not in the production
• Imaging was ordered and presumably performed, but neither the report nor the images were produced
• Discharge instructions reference a follow-up appointment with a specific provider, but there are no records from that provider in the follow-up period
• A transfer summary references records that accompanied the patient from the transferring facility, but those records were not included in the receiving facility's production

Identifying these gaps early -- before expert review, before depositions, and before discovery deadlines -- allows the firm to send targeted follow-up requests and subpoenas that close the gaps while there is still time to do so.

Medical Records Request Best Practices Checklist

1. Use provider-type-specific request checklists rather than generic "all records" language
2. Send litigation hold letters to all facilities and providers at the earliest possible stage
3. Specifically request fetal monitoring strips, surgical videos, EHR audit trails, and equipment logs when relevant to the case
4. Use your own HIPAA authorization form with all required elements -- do not rely solely on the facility's form
5. Request records by facility and date range, not by individual provider name
6. Obtain separate authorizations for substance abuse, HIV/AIDS, mental health, and genetic records when applicable
7. Compare every production against your original request and send deficiency letters for missing categories
8. Cross-reference provider names and referrals in received records to identify additional providers whose records should be requested
9. Request records from EMS, reference laboratories, teleradiology groups, and other ancillary providers that are often overlooked
10. Calendar records retention deadlines for time-sensitive data (surgical video, fetal monitoring, equipment logs)
11. Use AI tools to automate gap identification across multi-provider record sets
12. Be prepared to subpoena records that are not produced in response to authorization-based requests
13. Schedule a custodian of records deposition when productions are incomplete or disputed

Bottom Line

Medical records are the evidentiary foundation of every medical malpractice and personal injury case. The records you do not obtain are the records that will hurt you at trial. A generic request produces a generic result -- and a generic result almost always means an incomplete record.

The checklists in this guide are designed to ensure that your records requests are specific enough to capture the documents that matter, including the ones that facilities do not produce by default. Combined with early litigation holds, systematic gap analysis, and the willingness to subpoena and depose when necessary, a disciplined records request process ensures that your case is built on a complete factual foundation -- not on whatever the medical records department decided to send.

For firms handling multiple cases with records from dozens of providers, AI-powered tools that automate gap identification and cross-referencing are no longer a luxury. They are the difference between catching a missing fetal monitoring strip in week two and discovering it is gone forever in month twelve.

Questions? Contact us at [email protected] or (856) 497-9417