In a personal injury case, medical records and bills are the evidence of the injury and the basis of the damages. They drive the demand, they drive the timeline, and when they arrive late or incomplete, the whole file waits. Medical records retrieval is the work of getting complete, accurate records and bills from every provider who treated the client, and doing it without letting the case stall.

It is unglamorous work, but firms that run it well settle files sooner and spend less time chasing paper. The difference is mostly process.

Start at onboarding

The retrieval process begins the day the client signs. Collect signed authorizations for the release of medical information at onboarding, along with a list of every provider the client has seen for the injury: emergency care, hospitals, primary care, specialists, physical therapy, chiropractic, imaging, pharmacies and anyone else. Ask about earlier treatment for the same body parts too, because the other side will. The guide to personal injury case management covers onboarding more broadly.

Authorizations and the rules that apply

Providers release records under privacy law, chiefly HIPAA at the federal level, plus state rules. A request can be made with a HIPAA-compliant authorization signed by the client, or in some cases by the client exercising their own right of access and directing the records to the firm. The two routes can carry different rules on timing and fees, and state law can add requirements of its own. Make sure your authorization forms are current, specific enough for each provider and properly signed and dated, and check the rules that apply in your state rather than assuming one approach works everywhere.

Request the right things

Be specific about what you need from each provider, because a vague request often produces a partial response. Typical requests cover:

  • Medical records for the relevant dates, including notes, test results and discharge summaries.
  • Itemized bills showing every charge, separately from the records.
  • Imaging reports, and the images themselves where they will matter.
  • Payment and balance information, including what insurance paid and any write-offs.
  • A certification or affidavit where your jurisdiction needs records authenticated for use later.

Records and bills often come from different departments, sometimes from different companies, so request them separately and track them separately.

Timing: request as each provider finishes

Waiting until treatment is completely over before requesting anything adds weeks or months to the file. Request records from each provider when their part of the treatment ends, and request updates from providers who are still treating as the case approaches the demand. That way the last request is a small update rather than the start of the whole process.

Track every request

Every request should be logged with the provider, what was requested, the date it was sent and how it was sent. Set follow-up dates and follow up on schedule, because requests that are not chased tend to sit. Note who you spoke to and what they said. Your case management system or CRM should make outstanding requests visible at a glance; the guide to law firm CRM covers how firms keep that information in one place.

Check what comes back

Do not file records the moment they arrive. Check them against the request: are all the dates there, do the bills match the records, are pages missing, are there entries from another patient? Look for gaps in treatment and for notes that mention earlier injuries or conditions, because both matter for the value of the case. Catching a problem when the records arrive is far easier than discovering it during negotiation.

Fees and invoices

Providers and their copy services often charge for records, and what they may charge can depend on the type of request and on state law. Track every invoice against its request, pay promptly so records are not held, and record the costs so they can be handled correctly at the end of the case.

Handling delays

Some providers are slow. Follow up by phone as well as in writing, confirm the request was received and is complete, and ask exactly what is missing if it was rejected. Keep a record of every attempt. If a provider still does not respond, the attorney can decide whether other steps are appropriate.

In-house or outsourced

Some firms handle retrieval entirely in-house; others use a records retrieval company for some or all providers. Outsourcing can help with volume, with providers that are hard to deal with, or with requests across many states. Either way, the firm still owns the result: someone in the firm should track what has been requested, what has arrived and what is still missing.

What to measure

Track how long records take to arrive by provider, how many requests are outstanding per file and per case manager, and how often records come back incomplete. Those numbers show where the process is slowing files down. The guide to law firm KPIs covers how to fit them into the firm's wider reporting.

The short version

Collect authorizations and a full provider list at onboarding, request records and itemized bills from each provider as their treatment ends, and be specific about what you need. Log and follow up on every request, check records for gaps and errors when they arrive, track fees, and decide deliberately what to handle in-house. Measure how long records take so you can see where files are waiting.

Frequently asked questions

What is medical records retrieval?
The process of requesting, tracking and collecting a client's medical records and bills from every provider who treated them, so the firm can document the injury and the damages.

Do you need a HIPAA authorization to get medical records?
Providers generally need a valid authorization signed by the client, or a request made by the client under their own right of access, before releasing records to a law firm. State law can add requirements.

Should records and bills be requested separately?
Usually yes. Records and itemized bills often come from different departments or companies, and requesting them separately makes each easier to track.

When should a firm request medical records?
As each provider's treatment ends, rather than waiting until all treatment is over. Providers who are still treating can be asked for updates closer to the demand.

Why do medical records requests get delayed?
Common causes are incomplete or outdated authorizations, vague requests, unpaid invoices and requests that nobody follows up. A tracking log with follow-up dates prevents most of them.

Should a law firm outsource records retrieval?
It can help with volume, difficult providers or requests across many states. Whether in-house or outsourced, someone in the firm should still track every outstanding request.

Ready for More Signed Cases?

Legal Leadz AI runs exclusive injury campaigns state by state. Tell us the state, the case types and what your intake can realistically work in a month, and we will show you what the volume and the economics look like in that market before you commit to anything.

Get My Free Market Analysis →