Your medical records are the ground truth of your hospital visit. Every legitimate charge must have corresponding documentation in those records. When a service appears on your bill but not in your records, you have documented evidence of a billing error. Here's how to get your records and what to do with them.
Under HIPAA 45 CFR § 164.524, you have the right to access your own medical records. The provider must respond to your request within 30 days, with one possible 30-day extension if they notify you in writing. They can charge a reasonable cost-based fee for copying, but cannot deny you access to your records.
The records you're entitled to include: physician and nursing notes, operative and procedure reports, lab results, imaging reports, medication administration records, discharge summaries, and any other documentation related to your care.
Request records and your itemized bill simultaneously. Call the medical records department and the billing department on the same day. Both have 30-day response obligations. Getting them at the same time means you can start comparing immediately.
Upload your bill. BillSherpa checks it against 10 federal laws and shows you every potential error and estimated savings — completely free.
Check my bill free →Go through your itemized bill line by line. For each CPT code, find the corresponding entry in your medical records. For a lab test, there should be an order and a result. For a procedure, there should be a procedure note. For a consultation, there should be a consult note. If you find a billed service with no corresponding documentation, that's evidence of a billing error.
Every record entry has a date and time. If a service is billed on a date when the records show you weren't at the hospital, or when no documentation of that service exists, that's a billing error.
Sometimes tests or procedures are ordered and then cancelled before they're performed, but billing is never notified. Look for orders that were cancelled or marked "not done" in the records — these should not appear on your bill.
If you were seen in the emergency department, the physician's note should justify the level billed (Level 1–5). A Level 5 visit (CPT 99285) requires documentation of a high-complexity medical decision and a comprehensive examination. If the note describes a straightforward visit, a Level 5 code may be upcoding.
Compare the ICD-10 diagnosis codes on your bill to the diagnoses documented in your physician's notes. Wrong diagnosis codes can cause services to be miscategorised — a preventive visit coded as diagnostic, for example, subjects you to your deductible for a service that should be free under the ACA.
Upload your bill. BillSherpa checks it against 10 federal laws and shows you every potential error and estimated savings — completely free.
Check my bill free →HIPAA allows providers to charge a reasonable cost-based fee for copying and mailing records, but not for the retrieval itself. Many states have stricter limits — California, for example, caps fees at $0.25 per page. Check your state's medical records fee limits. If the fee seems excessive, ask for electronic records instead, which should be free or much cheaper.
Yes, if you are the executor of the estate, the legal next-of-kin, or hold a valid healthcare power of attorney. You'll need to provide documentation of your authority — a copy of the death certificate and your legal standing.
Hospitals are legally required to maintain medical records for a minimum of 6 years under HIPAA (and longer in many states). If they claim records don't exist for a date when you know you were treated, that's a serious problem. Put your request in writing, note their response, and contact your state health department if records are not provided within 30 days.