Can A Doctor Request Medical Records From Another Doctor? | What HIPAA Allows

Yes. One clinician may ask another for records tied to treatment, payment, or health care operations, though state rules and office policy may narrow that access.

If you’re switching doctors, seeing a specialist, or landing in the ER, the same question pops up fast: can one doctor get your chart from another doctor without chasing you for every page? In many cases, yes. Under HIPAA, covered health care providers may share protected health information for treatment, payment, and certain health care operations without a separate signed authorization from the patient.

That said, “may” is not the same as “must.” A clinic can be allowed to share records and still ask you to fill out a release form. State privacy law, office workflow, record type, and the reason for the request can all change what happens next. That gap is where most confusion starts.

This article lays out the rule in plain English, shows when records usually move smoothly, and spells out when a release is still likely to land in your inbox.

Can A Doctor Request Medical Records From Another Doctor? In Daily Practice

In routine care, doctors ask other doctors for records all the time. A primary care office may ask a cardiologist for test results. A surgeon may ask for old imaging before an operation. A new psychiatrist may want discharge notes from a recent hospital stay. That kind of exchange usually falls under treatment.

According to HHS guidance on treatment, payment, and health care operations, HIPAA lets covered entities use and disclose protected health information for treatment without the patient signing a new authorization each time. Treatment is read broadly. It includes coordination, referral, and management of care by one provider with another provider.

So if your dermatologist needs your biopsy note from another office, the request itself is usually lawful. The same goes for a hospital asking your family doctor for recent labs after you arrive with chest pain.

Still, the rule does not force one office to hand everything over on demand. A provider can limit the response to what fits the request. Staff may ask for identity checks, a fax cover sheet, a secure portal request, or a patient release if their workflow calls for it. That can feel annoying. It does not always mean the office is wrong.

Why The Rule Feels Messy To Patients

Most people hear “HIPAA” and assume it blocks nearly all sharing. HIPAA does the opposite in some care settings. It protects privacy, yet it also allows record sharing when that sharing is tied to treatment or payment. The rule tries to let care move while still setting guardrails.

The trouble is that front-desk practice does not always match the broad federal rule. One office may send records to another doctor after a simple request. Another may want your written okay, even when HIPAA would allow the transfer without it. That often comes down to office policy, staffing, or state law that gives patients more control than federal law does.

When A Signed Release Is Still Common

• You want records sent somewhere that is not tied to treatment or payment.
• The receiving party is a lawyer, employer, school, or insurer outside the usual claim flow.
• The office wants a signed release for internal risk control.
• State law places extra limits on certain records.
• The chart includes material with tighter privacy rules, such as psychotherapy notes.

What HIPAA Allows, And What It Does Not Force

A clean way to read this is to split the question into two parts. Part one: is the request allowed under HIPAA? Part two: does the first doctor have to send the records just because the second doctor asked? The answer to part one is often yes. The answer to part two is not always.

HHS says on its Your Medical Records page that a provider or health plan may send copies of records to another provider or health plan when needed for treatment or payment, or with the patient’s permission. That same page also says the Privacy Rule does not require a provider or plan to share information with other providers or plans in every case.

That difference matters. A lawful request can still run into delay, limited production, or a release form. In plain terms, HIPAA opens the door. It does not always push the records through it.

Situation	Usually Allowed Without New Authorization?	What Often Happens In Real Offices
Primary care doctor asks a specialist for consult notes	Yes, as treatment	Notes are often sent by fax, portal, or health record exchange
Hospital asks your family doctor for recent labs	Yes, as treatment	Fast transfer is common when timing affects care
New doctor asks old doctor for your chart before first visit	Often yes, if tied to treatment	Many offices still ask you to sign a release
Billing office asks for records tied to a claim	Yes, as payment	Only the record set tied to the claim may be sent
Lawyer asks for the chart	Usually no	A signed authorization is normally required
Employer asks for treatment records	Usually no	Written patient permission is usually needed
Patient asks one doctor to send records to another doctor	Yes, and patient rights also apply	The office may have up to 30 days for an access request
Request includes psychotherapy notes	No, not under the usual access rule	Extra limits often apply

Requesting Medical Records From Another Doctor Under State Rules

Federal law is only one layer. States can add tighter privacy rules. That matters a lot with mental health records, HIV-related information, genetic data, substance use treatment records, and records tied to minors. Once state law is tighter, the tighter rule usually wins for that record set.

That is why two people in different states can have different experiences even when both are dealing with the same type of request. One office may send the chart with no fuss. Another may ask for a release that names the records, the date range, and the receiving doctor.

The record type matters too. General progress notes and lab results are often easier to move than psychotherapy notes. Those notes get special treatment under HIPAA and are not part of the normal patient access rule. Substance use disorder records can also trigger extra federal rules outside standard HIPAA workflow.

Minimum Necessary Does Not Usually Block Treatment Sharing

Patients often hear about the “minimum necessary” rule and think it bars full chart transfers. For treatment disclosures, HIPAA does not apply that rule in the same way it does for many other disclosures. A doctor can share what another treating doctor needs for care. Good offices still keep the request tied to the purpose. That is why you may see a request narrowed to recent labs, one imaging study, or a discharge summary instead of the whole chart.

Patient Rights Still Matter

Even when doctors can share records with each other, patients still have strong rights. You can ask for a copy of your own records. You can ask that a copy be sent to another person or entity you name in writing. HHS says in its right of access guidance that covered entities generally must act on an access request within 30 days, with one limited extension in some cases.

That right can be the cleanest route when doctor-to-doctor transfer stalls. If the offices are dragging their feet, asking for your own copy and handing it over through a portal or secure email can move things along.

If You Need Records Moved Fast	What To Ask For	Why It Helps
Specialist visit next week	Recent progress note, labs, imaging report, med list	Staff can send a smaller packet faster than a full chart
Surgery or urgent follow-up	Operative note, discharge summary, pathology, imaging	These records usually answer the receiving doctor’s first questions
Office says “we need your release”	Complete the release right away and ask for secure delivery	It removes the office-policy roadblock
Transfer is stalled	Request your own copy and send it yourself	Your access rights can be faster than office-to-office back-and-forth

What Patients And Staff Should Watch For

If you are the patient, ask three short questions: who is requesting the records, which records are needed, and when are they needed by? That trims delay. It also cuts the odds of an office sending a giant chart when a specialist only needs one MRI report and the last medication list.

If you work in a clinic, the safest habit is precision. Tie the request to treatment, payment, or operations. Verify the receiving office. Ask only for the record set that fits the need. That kind of clean request tends to move faster and creates fewer privacy problems.

Also watch the common mix-up between “access” and “authorization.” Access is the patient’s right to get records. Authorization is the written permission used for disclosures that are not already allowed by HIPAA. When people use those terms like they mean the same thing, delays pile up.

What The Real Answer Comes Down To

One doctor can request medical records from another doctor in many routine care settings, and HIPAA often allows the disclosure without a fresh patient signature when the request is tied to treatment, payment, or certain office functions. Still, that does not mean every office will send the chart on request alone.

If the record type is sensitive, state law is tighter, or the office sticks to a release-first workflow, you may still need to sign paperwork. If speed matters, ask for the exact records needed, not the whole file, and use your own access rights if the doctor-to-doctor request bogs down.