HIPAA Patient Records Request Log
A ready-to-use log template for tracking patient records requests under 45 CFR § 164.524, including required fields, fees, and denial handling.
Short answer
A patient access request log template with required fields, fee guidance, denial reasons, and state-law overlay notes.
What is inside
- Required log fields: date, requester, records, format, response, fees, denial reason
- 30-day response clock with 60-day extension notice template
- Permissible fees aligned to OCR's copying-fee guidance
- Limited denial reasons under § 164.524(a)(3) and the patient review right
- State-law overlay notes for jurisdictions with shorter response windows
- Common Right of Access enforcement gaps to audit against
We publish the same practical templates and decision tools that clinics use to structure recurring HIPAA work. No enterprise gate. No resource-library gimmicks. Just practical material delivered quickly.
Editorial details
Written by: Angel Campa
Reviewed by: PHIGuard Compliance Research
Updated: April 28, 2026
Best next step: Open the matching product path
Sources
- 45 CFR § 164.524 — Access of individuals to protected health information | Electronic Code of Federal Regulations
- Individuals' Right under HIPAA to Access their Health Information | U.S. Department of Health and Human Services