---
title: Medical records request packets
description: Prepare and mail a signed medical records request packet online, with optional authorization, ID, and supporting attachments.
seotitle: Medical records request packets
seo-description: Prepare and mail a signed medical records request packet online, with optional authorization, ID, and supporting attachments.
group: resources
indexable: true
llms: true
schema: webpage
og-image: /forms/medical-records-request-packets/thumbnail
og-image-alt: Medical Records Request Packets generated form preview
published: 2026-06-20
updated: 2026-07-11
tags:
  - medical records
  - health records
  - HIPAA
  - healthcare
  - records requests
path: /forms/medical-records-request-packets
---
# Medical records request packets

Prepare and mail a signed medical records request packet online, with optional authorization, ID, and supporting attachments.

## How it works
1. **Choose whether the patient or the patient's legal personal representative is requesting records, and whether the records should go to a new provider.** - 
2. **Enter patient, requester, provider, and mailing-destination details.** - 
3. **Select the record types, add date ranges and an exact records-delivery destination, and attach authority, authorization, or ID documents when needed.** - 
4. **Preview the generated request packet, confirm the mailing details, and check out with PostalForm.** -


## Form summary
Medical Records Request Packets helps patients and legal personal representatives turn a HIPAA access request into a clean mailed packet. The workflow generates a signed request letter, request summary, exhibit index, and optional supporting-document appendix, then lets the user review the packet before checkout.

## What you need
- Patient name and date of birth
- Requester name, relationship to the patient, return address, email, phone, and signature
- Provider, hospital, clinic, or medical records department mailing address
- Record types, date range, and preferred release instructions
- The exact person or entity and destination when records should go to someone other than the requester
- Proof of legal representative authority or a provider-specific authorization when required
- Authorization or release form (optional) — Attach the provider's release form or another valid authorization when required. A generated access-request letter does not replace a general HIPAA authorization.
- ID or relationship proof (optional) — Attach an ID copy, guardianship document, health-care power of attorney, or other proof that establishes the requester's authority when the provider asks for it.
- Prior request or provider form (optional) — Attach prior correspondence, a provider-specific request form, portal printout, or instructions showing what the records office requested.
- Other supporting documents (optional) — Any other supporting PDF or image you want appended behind the request packet.

## Data collected
- Patient name, date of birth, contact details, and optional patient address
- Requester name, relationship, return address, email, phone, and signature
- Provider, hospital, clinic, or medical records department mailing details
- Record types, date range, release-to instructions, delivery preference, and optional supporting attachments

## Where it gets mailed
You will enter the recipient address during checkout.

## Packet order
- Cover page
- Main medical records request letter
- Request summary
- Exhibit index
- Uploaded authorization, ID, prior request, or supporting documents

## Common mistakes
- Mailing to a general clinic address instead of the medical records, health information management, or release-of-information department.
- Leaving the requested record date range vague when the provider needs specific treatment dates.
- Requesting delivery to a third party without clearly naming the recipient and exact delivery destination.
- Assuming a generated access request replaces a provider-specific authorization or proof of representative authority.
- Skipping the packet preview before checkout.

## Agent summary
Collect patient identity, requester authority, provider mailing destination, requested record types, date range, records-delivery destination, signature, and any provider-specific authorization or identity documents needed to prepare and mail a patient-access request packet. Do not represent this workflow as a general HIPAA authorization.

## For assistants
Use the Forms Draft API to prefill this form and generate a preview PDF.
- Endpoint: `POST /api/forms/medical-records-request-packets/drafts`
- Payload: `{ fields: { ... }, attachments: [{ id, label, base64 }] }`
- Required fields: lane_patient_request, lane_authorized_representative, lane_records_to_new_provider, lane_billing_or_insurance_records, patient_name, patient_date_of_birth, requester_name, requester_relationship, requester_email, requester_phone, requester_address, provider_name, recipient_name, recipient_address, record_type_full_chart, record_type_visit_notes, record_type_lab_imaging, record_type_billing_records, record_type_immunization_records, record_type_other, records_date_range, release_to_name, release_delivery_method, delivery_instructions, requester_signature, signature_date, representative_authority_acknowledged, third_party_request_acknowledged, provider_requirements_acknowledged, preview_acknowledged
- Attachment IDs: authorization_or_release_form, identity_or_relationship_proof, prior_request_or_provider_form, other_supporting_documents
- Notes: This workflow prepares a signed patient-access request or a request by a legal personal representative. It is not a general HIPAA authorization, does not establish representative authority, retrieve records, verify provider-specific or state-law requirements, provide advice, or guarantee release. After Ciox Health v. Azar, HIPAA's mandatory third-party directive is limited to electronic copies of PHI in an electronic health record sent electronically; other third-party releases may require a valid authorization or provider process.

## LLM field schema
```json
[
  {
    "id": "lane_patient_request",
    "label": "Patient requesting own records",
    "type": "checkbox",
    "required": true,
    "meta_class": "radio",
    "ui_width": null,
    "group_id": "request_type",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "lane_authorized_representative",
    "label": "Authorized representative requesting records",
    "type": "checkbox",
    "required": true,
    "meta_class": "radio",
    "ui_width": null,
    "group_id": "request_type",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "lane_records_to_new_provider",
    "label": "Send records to a new provider",
    "type": "checkbox",
    "required": true,
    "meta_class": "radio",
    "ui_width": null,
    "group_id": "request_type",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "lane_billing_or_insurance_records",
    "label": "Billing or insurance records request",
    "type": "checkbox",
    "required": true,
    "meta_class": "radio",
    "ui_width": null,
    "group_id": "request_type",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_name",
    "label": "Patient full name",
    "type": "text",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_date_of_birth",
    "label": "Patient date of birth",
    "type": "date",
    "required": true,
    "meta_class": "date",
    "ui_width": "half",
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_phone",
    "label": "Patient phone (optional)",
    "type": "text",
    "required": false,
    "meta_class": "phone",
    "ui_width": "half",
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_email",
    "label": "Patient email (optional)",
    "type": "text",
    "required": false,
    "meta_class": "email",
    "ui_width": "half",
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_address_line1",
    "label": "Patient address line 1 (optional)",
    "type": "text",
    "required": false,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_address_line2",
    "label": "Patient address line 2 (optional)",
    "type": "text",
    "required": false,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "patient_city_state_zip",
    "label": "Patient city, state, ZIP (optional)",
    "type": "compound",
    "required": false,
    "meta_class": null,
    "ui_width": null,
    "group_id": "patient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": [
      {
        "id": "city",
        "label": "City",
        "metaClass": "city",
        "required": false
      },
      {
        "id": "state",
        "label": "State",
        "metaClass": "state",
        "required": false
      },
      {
        "id": "zip",
        "label": "ZIP",
        "metaClass": "zip",
        "required": false
      }
    ]
  },
  {
    "id": "requester_name",
    "label": "Requester full name",
    "type": "text",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "requester",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "requester_relationship",
    "label": "Relationship to patient",
    "type": "select",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "requester",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "requester_email",
    "label": "Requester reply email",
    "type": "text",
    "required": true,
    "meta_class": "email",
    "ui_width": "half",
    "group_id": "requester",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "requester_phone",
    "label": "Requester reply phone",
    "type": "text",
    "required": true,
    "meta_class": "phone",
    "ui_width": "half",
    "group_id": "requester",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "requester_address",
    "label": "Return mailing address",
    "type": "address",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "requester",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "provider_name",
    "label": "Provider, hospital, or clinic name",
    "type": "text",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "recipient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "recipient_name",
    "label": "Records department or attention line",
    "type": "text",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "recipient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "recipient_address",
    "label": "Provider mailing address",
    "type": "address",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "recipient",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "record_type_full_chart",
    "label": "Complete medical record or chart",
    "type": "checkbox",
    "required": true,
    "meta_class": "multi_select",
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "record_type_visit_notes",
    "label": "Visit notes, discharge summaries, or reports",
    "type": "checkbox",
    "required": true,
    "meta_class": "multi_select",
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "record_type_lab_imaging",
    "label": "Lab results, imaging reports, or test results",
    "type": "checkbox",
    "required": true,
    "meta_class": "multi_select",
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "record_type_billing_records",
    "label": "Billing, itemized statements, or insurance records",
    "type": "checkbox",
    "required": true,
    "meta_class": "multi_select",
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "record_type_immunization_records",
    "label": "Immunization or vaccine records",
    "type": "checkbox",
    "required": true,
    "meta_class": "multi_select",
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "record_type_other",
    "label": "Other records (describe below)",
    "type": "checkbox",
    "required": true,
    "meta_class": "multi_select",
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "records_date_range",
    "label": "Date range or visit dates requested",
    "type": "text",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "request_purpose",
    "label": "Purpose of request (optional)",
    "type": "select",
    "required": false,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "release_to_name",
    "label": "New provider or other designated recipient",
    "type": "text",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "lane_records_to_new_provider",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "release_delivery_method",
    "label": "Records delivery method",
    "type": "select",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "lane_records_to_new_provider",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "delivery_instructions",
    "label": "Exact delivery destination for the records",
    "type": "textarea",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "lane_records_to_new_provider",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "records_needed_by_date",
    "label": "Requested response date (optional)",
    "type": "date",
    "required": false,
    "meta_class": "date",
    "ui_width": "half",
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "request_purpose",
      "operator": "in",
      "value": [
        "Insurance claim or appeal",
        "Legal or administrative matter"
      ]
    },
    "compound_subfields": null
  },
  {
    "id": "authorization_context",
    "label": "Authorization or representative context (optional)",
    "type": "textarea",
    "required": false,
    "meta_class": null,
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "lane_authorized_representative",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "request_notes",
    "label": "Describe the other records you need",
    "type": "textarea",
    "required": false,
    "meta_class": null,
    "ui_width": null,
    "group_id": "records",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "record_type_other",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "requester_signature",
    "label": "Requester signature",
    "type": "signature",
    "required": true,
    "meta_class": null,
    "ui_width": "half",
    "group_id": "authorization",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "signature_date",
    "label": "Signature date",
    "type": "date",
    "required": true,
    "meta_class": "date",
    "ui_width": "half",
    "group_id": "authorization",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "representative_authority_acknowledged",
    "label": "I am the patient's legal personal representative under applicable law, and I will include any proof of authority the provider requires.",
    "type": "checkbox",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "authorization",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "lane_authorized_representative",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "third_party_request_acknowledged",
    "label": "I understand this is a signed access request, not a general HIPAA authorization, and the provider may require its own authorization for this third-party release.",
    "type": "checkbox",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "authorization",
    "choice_group": null,
    "choice_label": null,
    "visibility": {
      "fieldId": "lane_records_to_new_provider",
      "operator": "truthy"
    },
    "compound_subfields": null
  },
  {
    "id": "provider_requirements_acknowledged",
    "label": "I understand the provider may require its own form, proof of identity or representative authority, a valid authorization, a portal request, or a permitted fee before releasing records.",
    "type": "checkbox",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "authorization",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  },
  {
    "id": "preview_acknowledged",
    "label": "I will review the generated packet before checkout and confirm the mailing address is correct.",
    "type": "checkbox",
    "required": true,
    "meta_class": null,
    "ui_width": null,
    "group_id": "authorization",
    "choice_group": null,
    "choice_label": null,
    "visibility": null,
    "compound_subfields": null
  }
]
```

## Sources
- [HHS: Individuals' Right of Access under 45 CFR 164.524](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html)
- [HHS: Ciox court-order limits on third-party directives](https://www.hhs.gov/hipaa/court-order-right-of-access/index.html)
- [USPS Certified Mail FAQ](https://faq.usps.com/articles/Knowledge/What-is-Certified-Mail)

## Last verified
2026-07-11


## FAQs
- **Can I use this to request records from a hospital or clinic?** Yes. Use the workflow when you have the provider's mailing address and want PostalForm to generate and mail a written request packet.
- **Can I attach a provider authorization form or ID copy?** Yes. The workflow accepts optional PDFs or images for authorization forms, ID copies, prior requests, and other supporting documents.
- **Will PostalForm get the records back for me?** No. PostalForm prepares and mails the request packet. The provider controls how it verifies, processes, and responds to the request.
- **Can an agent or API submit this workflow?** Yes. The workflow is published in the machine-readable forms catalog and exposes structured fields and attachment inputs for API, machine-order, and MPP-style order creation.


## Related
- [SSA-827 — Authorization to Disclose Information to SSA](/forms/ssa-827)
- [Medical records request letter guide](/medical-records/medical-records-request-letter-online)
- [Medical records request resources](/medical-records)