Can my attorney request medical billing records on my behalf without me calling the hospital?: North Carolina

Understanding the Problem

You want to know if your North Carolina personal injury attorney can get your itemized medical bills directly from the hospital or clinic without you making calls yourself. Here, you already signed medical billing authorizations and your lawyer asked the provider’s billing office for an itemized statement tied to a specific date of treatment. You want to confirm that’s allowed and what rules apply.

Apply the Law

Under North Carolina law and federal privacy rules, a patient can authorize a provider to release medical and billing records to a designated person, including an attorney. The main contact is usually the provider’s Health Information Management (medical records) or billing department. A request properly submitted under the patient’s HIPAA right of access generally must be addressed within 30 days. A separate authorization-based request submitted by an attorney does not automatically receive that HIPAA deadline. In a North Carolina personal injury matter, however, a provider claiming a lien must furnish requested supporting records or an itemized statement to the attorney without charge and within 60 days under N.C. Gen. Stat. § 44-49(b). In active litigation, attorneys may also use a subpoena under the North Carolina Rules of Civil Procedure.

Key Requirements

• Valid authorization: The authorization should be signed and dated and identify you, the provider, the information to be released, the recipient, the purpose, and an expiration date or event.
• Scope and specificity: The request should clearly state the type of record, such as an itemized bill or account ledger, and the relevant treatment dates.
• HIPAA access timing: When the request qualifies as the patient’s request for access under HIPAA, the provider generally must act within 30 days; one limited extension may apply if the provider gives a timely written explanation and completion date.
• Personal injury lien timing: A provider seeking a lien under N.C. Gen. Stat. § 44-49 must furnish a requested itemized statement, hospital record, or medical report to the attorney without charge within 60 days after receiving the request.
• Fees: Outside the lien-related rule, N.C. Gen. Stat. § 90-411 permits record-copy charges of up to 75 cents per page for the first 25 pages, 50 cents per page for pages 26 through 100, and 25 cents per page after page 100, with a minimum fee of up to $10. HIPAA cost-based limits may control qualifying patient-access requests.
• Alternatives in litigation: If a case is filed, records can be obtained by subpoena with required notice and an opportunity to object.
• Sensitive categories: Certain records, including some mental health and substance use treatment information, may require additional consent or be subject to added restrictions.

What the Statutes Say

• North Carolina Gen. Stat. § 44-49 (Medical provider liens) - Requires a provider claiming a personal injury lien to furnish a requested itemized statement, hospital record, or medical report to the attorney without charge and within 60 days as a condition of a valid lien.
• North Carolina Gen. Stat. § 90-411 (Charges for copies of medical records) - Establishes maximum charges for copies of medical records provided to a patient or the patient’s designated representative, subject to other controlling law.
• North Carolina Gen. Stat. § 1A-1, Rule 45 (Subpoena) - Sets out how records can be obtained by subpoena in a lawsuit, including notice and compliance rules.
• North Carolina Gen. Stat. § 8-53 (Health care provider–patient communications) - Protects confidential medical information and permits records to be furnished with the patient’s authorization.
• HIPAA Right of Access (U.S. Department of Health & Human Services) - Explains the general 30-day response period and permissible cost-based fees for qualifying patient-access requests.

Analysis

Apply the Rule to the Facts: You signed medical billing authorizations and your attorney asked the provider’s billing department for an itemized statement for a specific treatment date. If the authorization satisfies applicable requirements and covers billing information, the provider may send the itemized bill directly to your attorney. If the request is submitted as your HIPAA right-of-access request, the general 30-day response period applies. If the provider is asserting a North Carolina personal injury lien, it must furnish the requested itemized statement or supporting record to your attorney without charge within 60 days to satisfy the lien statute. If the provider resists and litigation is underway, your attorney can use the subpoena process with proper notice.

Process & Timing

1. Who submits: Your attorney may transmit the request. Where: The health care provider’s Health Information Management or billing department in North Carolina. What: A written request with a valid authorization specifying the itemized billing statement and treatment date(s). If relying on the HIPAA right of access, the request should clearly be made by or on behalf of the patient under that right. When: As soon as you sign the required authorization or access request.
2. The provider confirms identity and authority, determines which deadline applies, and calculates any lawful fees. A qualifying HIPAA access request generally carries a 30-day period. A provider seeking a personal injury lien must furnish the material described in N.C. Gen. Stat. § 44-49(b) without charge within 60 days after receiving the attorney’s request.
3. The provider sends the itemized statement and any requested ledger or billing records to your attorney by an available secure method. If records are needed during a lawsuit and are not provided voluntarily, your attorney may issue a records subpoena under Rule 45 with the required notice.

Exceptions & Pitfalls

• Incomplete authorizations—such as forms missing the provider, recipient, records requested, expiration information, or signature—can cause delays or denials.
• An attorney’s ordinary authorization-based request does not automatically invoke HIPAA’s 30-day patient-access deadline. The request should clearly identify the legal basis being used.
• Some categories, including certain mental health and substance use treatment information, may require additional or more specific consent.
• If a third party requests records without the patient’s authorization or other legal authority, the provider may refuse absent a subpoena, court order, or another lawful basis.
• Fee rules depend on the request. A provider asserting a personal injury lien must provide the material required by N.C. Gen. Stat. § 44-49(b) without charge, while other requests may be subject to N.C. Gen. Stat. § 90-411 or HIPAA’s cost-based limits.
• In active lawsuits, follow Rule 45 and applicable privacy-notice requirements to avoid objections or a motion to quash the subpoena.

Conclusion

In North Carolina, your attorney can request and receive your itemized medical billing records if you sign a valid authorization that clearly identifies the provider, the records, the recipient, and the relevant timeframe. A qualifying HIPAA patient-access request generally must be addressed within 30 days. If the provider claims a personal injury lien, it must furnish a requested itemized statement, hospital record, or medical report to your attorney without charge within 60 days under N.C. Gen. Stat. § 44-49(b). If voluntary release stalls during a lawsuit, your attorney can use a Rule 45 subpoena. Next step: sign the appropriate authorization or patient-access request and have your attorney submit it to the provider’s records or billing office.