The $6.50 Medical Records Myth That's Costing Your Personal Injury Firm Money
Ask a paralegal what HIPAA caps medical record fees at, and most will say $6.50. It's become one of those facts everyone in the industry repeats, and it's wrong for the request your firm sends almost every time.
The $6.50 figure comes from old HHS guidance on what a covered entity can charge for a flat per-page fee when an individual asks for an electronic copy of their own records. It was written for patients, not law firms. In 2020, a federal court settled the question of what happens when someone else is asking. In Ciox Health, LLC v. Azar, the D.C. District Court vacated the part of HIPAA guidance that extended the individual fee limit to third-party requests, including the kind an attorney sends with a signed authorization. HHS's own FAQ 2033 confirms the fee limitation now applies only to an individual's request for their own records, not a request to send copies to a third party.
What your firm is actually paying
Once a request leaves the patient-directed lane, the price is set by whatever state the provider sits in, and the range is wide. California caps provider copying fees at 25 cents a page for paper records plus a clerical fee of up to $16 (Health and Safety Code Section 123110). New York allows up to 75 cents a page under Public Health Law Section 18, with an exception when the records support a benefits claim or appeal. Neither number is close to a flat $6.50, and neither state's cap is the ceiling everywhere. Some states allow separate search, retrieval, or certification fees on top of the per-page rate, stacked in ways that are easy to miss on an invoice from a records-release vendor.
None of this is exotic law. It's published fee schedules, and most of them haven't changed the underlying structure in years. The problem isn't that the rules are unknowable, it's that a firm juggling records requests across a dozen open cases, each with its own providers, states, and follow-up timelines, doesn't have anyone whose full-time job is to check every invoice against the schedule that actually applies.
Where the real cost shows up
The dollars on any one invoice are usually small. The cost is the pattern: requests that sit unanswered past a state's response deadline with no one following up, invoices that get paid at whatever the vendor billed because checking took longer than it was worth, and records that come back incomplete with the gap discovered during demand package review instead of during intake. A firm running fifteen open cases with three providers each is tracking forty-five separate request threads, each on its own clock, each billed under a different jurisdiction's rules.
That's the kind of work that's tedious enough to fall behind on and structured enough that it doesn't need a person doing the tracking by hand. An agent that reads incoming provider correspondence, logs the request and its deadline, checks an invoice against the applicable state schedule, and flags anything that looks like an overcharge or a stale request gives your staff something concrete to review instead of a stack of records folders to reconcile at 9pm before a demand deadline. It's the same read-and-propose pattern behind the work we do for law firms, laid out on how it works: the agent reads and proposes, a person still decides whether to push back on a bill or send the follow-up.
What to check this week
You don't need new software to close the immediate gap. Pull the last ten records invoices your firm paid without a second look and check the per-page rate against the fee statute for that provider's state. If a vendor billed a flat rate regardless of state, or added a search fee your state's law doesn't allow, that's real money to recover or at least stop overpaying going forward. It's also worth deciding, in writing, who owns tracking outstanding requests past their statutory response window, because right now the answer at most small firms is "whoever remembers."
Sources: HHS FAQ 2033, HIPAA fee limitations, California Health and Safety Code Section 123110, and New York 10 NYCRR Section 50-2.5.