How Do I Get My Dental Records to Appeal a Denial? You Have a Federal Right to Them Within 30 Days, and the Fee Is Capped by Law.

Short answer: you have a federal right to your own dental and medical records within 30 days of asking, under 45 CFR 164.524. The office can take one more 30 days, but only if they tell you in writing why, inside the first 30. Any fee has to be reasonable and cost-based, limited to four things: copying labor, supplies, postage, and a summary if you agreed to one. There is no line item for search time or retrieval time. If you are gathering records for a denial appeal, this rule is the tool that gets them into your hands on a deadline, not on the office's convenience.

Most people who call a dental office for their records get one of two answers: a form to fill out, or a vague "we'll get to it." Neither one tells you that federal law already set the clock and the price. Knowing the actual rule changes the conversation.

What the rule sets	The requirement	Citation
Initial deadline	Act on the request no later than 30 days after receipt	45 CFR 164.524(b)(2)(i)
Extension	One extension of up to 30 more days, with written notice inside the first 30 days stating the reason and the new date	45 CFR 164.524(b)(2)(ii)
Fee, labor	Cost of labor to copy the records, paper or electronic	45 CFR 164.524(c)(4)(i)
Fee, supplies	Cost of paper, or of electronic media if you asked for a copy on portable storage	45 CFR 164.524(c)(4)(ii)
Fee, postage	Cost of mailing, only if you asked for the copy to be mailed	45 CFR 164.524(c)(4)(iii)
Fee, summary	Labor to prepare a summary or explanation, only if you agreed to a summary in advance	45 CFR 164.524(c)(4)(iv)
Flat-fee option	Up to $6.50 per request, for electronic copies of electronically maintained records, as an alternative to itemized cost	HHS guidance interpreting 164.524(c)(4)

What does 45 CFR 164.524 actually say about the deadline?

The regulation puts the burden of speed on the covered entity, not on you. Section 164.524(b)(2)(i) says a covered entity must act on a request for access "no later than 30 days after receipt of the request." Acting means either giving you the records or, if it is going to deny some or all of the request, telling you that in writing with the reason. The 30 days is not a target; it is the outer limit.

There is exactly one way to extend it. Section 164.524(b)(2)(ii) allows "no more than 30 days" of extension, and only if the entity gives you written notice, inside the original 30-day window, stating the reasons for the delay and the date by which it will complete the request. An office that misses 30 days with no such notice is not "running a little behind." It is outside the rule.

What can they legally charge me for copies?

Section 164.524(c)(4) lists what a "reasonable, cost-based fee" is allowed to cover, and it is a short, closed list: labor for copying, the cost of supplies like paper or a USB drive, postage when you asked for mail delivery, and labor to prepare a summary if you agreed to receive one instead of the full record. That is the entire list. Time spent searching your chart, pulling the file, or general office overhead is not on it, because the fee is tied to the cost of producing the copy, not the cost of running the practice.

HHS has had to clarify this in writing because offices kept charging more. The guidance states plainly that the option to charge a flat $6.50 fee for electronic copies of electronically maintained records is a convenience, not a ceiling on every request. If an office quotes you a high per-page rate for a large paper chart, ask them to show the cost basis, or ask whether an electronic copy is available, since the flat-fee option applies there.

Can a dental office withhold my records because I owe them money?

No. The right of access in 164.524 has no carve-out for an unpaid balance. A provider that says "we can release your records once your account is settled" is describing a collections policy, not a HIPAA rule, and the two are not the same thing. The fee provisions in (c)(4) already set the entire price of the copy. A past-due balance on treatment is a separate matter and cannot be used to extend the 30-day clock or add to the fee.

Can I have them sent straight to my insurer or my appeal reviewer?

Yes. Under 164.524(c)(3)(ii), if you direct the covered entity, in writing and signed by you, to transmit a copy to a person or entity you name, the covered entity generally has to treat that the same as sending the copy to you. For an appeal, that written direction is useful for two reasons: it creates a dated record that you made the request and where you asked it to go, and it can save you a step if your appeal reviewer accepts records sent directly from the provider.

What records am I actually entitled to?

The right covers protected health information in what HIPAA calls a designated record set: chart notes, x-rays and images, treatment plans, correspondence about your care, and billing records the provider maintains about you. It does not obligate the office to create a record that never existed, and it does not reach records that were legitimately transferred to a different provider before your request. If you suspect a specific note or image is missing, ask in writing whether it was transferred, and to where. In a denial appeal that turns on documentation, a genuine gap in the record can itself be part of your argument.

Does this cover my denial letter too?

No, and this is the distinction people get wrong. 45 CFR 164.524 governs your provider's obligation to give you your own clinical and billing records. It has nothing to do with your insurer's obligation to explain a denial or process your appeal. Your denial letter or Explanation of Benefits is a plan document, governed by your plan's own appeal deadlines, not by the 30-day access rule. Most appeals need both pieces: the provider's records showing what was done and why, obtained under 164.524, and the insurer's denial letter, which sets your appeal clock running separately.

What do I do if the office ignores the 30 days?

Put the request in writing if you have not already, and keep a copy with the date. If 30 days pass with no records and no written extension notice, you can file a complaint with the HHS Office for Civil Rights, which enforces this rule. Most delays get resolved with a phone call once the office realizes you know the actual deadline and fee rule, since most staff have never had to look either one up.

A note on who we are

CheckMyDenial helps patients read and appeal insurance denials. We are related to a company that does medical-dental billing and reimbursement for patients and practices, and if you ever move from reading to having someone handle a claim for you, that relationship and any fee are disclosed before anything is paid. This page is free, it does not require anything from you, and it will stay that way.

Where this comes from

The 30-day deadline, the one-time 30-day extension, and the four permitted fee categories are drawn directly from the regulatory text of 45 CFR 164.524, as published by the Cornell Legal Information Institute's mirror of the Code of Federal Regulations. The clarification that the $6.50 flat-fee option is not a general fee cap comes from HHS's own guidance document on permissible fees for the HIPAA right of access. If you find something here that is out of date, tell us and we will fix it and change the date at the top.