Short Answer
In North Carolina, a provider must respond to a proper patient records request within a HIPAA timeline (generally 30 days, with one written extension). If the hospital has not confirmed receipt or produced records, send a written follow‑up to Health Information Management and the privacy officer, confirm the request details, and set a clear deadline. If a lawsuit is filed, you can subpoena the custodian of records under North Carolina Rule 45 to compel production.
Understanding the Problem
You need medical records from a North Carolina hospital for a personal injury case, but the hospital has not confirmed your request or produced the records within its usual processing time. The question is: how do you, as the patient or the patient’s attorney, follow up so the records are released for litigation?
Apply the Law
North Carolina law and HIPAA work together here. Providers must provide patients (or their authorized representatives) access to copies of records within a set timeframe, and they may charge only certain fees. When a civil case is filed in a North Carolina court, you may also compel records from the records custodian using a subpoena. The Clerk of Superior Court (or an attorney of record using the official AOC subpoena form) is the usual path for subpoenas. The key timing trigger is the date the provider received a valid request; HIPAA sets a general 30‑day response window, with one written extension if needed.
Key Requirements
- Valid request/authorization: Ensure the request clearly identifies the patient, dates of service, provider, and scope of records, and includes a signed HIPAA authorization or a patient right‑of‑access request.
- Timely response: Providers must respond within the HIPAA timeline (generally 30 days) or give a written reason and a new date if they need one extension.
- Reasonable fees only: Copying charges must comply with North Carolina’s fee statute and HIPAA’s cost‑based limits.
- Litigation tool if needed: After a case is filed, use a subpoena to the custodian of records under North Carolina Rule 45 to compel production.
- Format and scope: Ask for electronic copies when available and limit the request to what the claim requires (to reduce delays and costs).
What the Statutes Say
- N.C. Gen. Stat. § 90-411 (Copying fees for patient records) - Sets allowable charges for copies of patient medical records.
- N.C. R. Civ. P. 45 (Subpoenas) - Authorizes subpoenas, including subpoenas for records from a custodian.
- N.C. Gen. Stat. § 8-44.1 (Hospital medical records) - Allows certified copies of hospital records to be used in court.
- 45 C.F.R. § 164.524 (HIPAA right of access) - Sets the general 30‑day response deadline with one written extension.
Analysis
Apply the Rule to the Facts: Your firm submitted a request with the patient’s identifying information, but the hospital has not confirmed receipt or produced records. First, confirm the request meets HIPAA requirements and was delivered to Health Information Management. If it has been about 30 days since submission, send written follow‑up demanding compliance or a written extension date, and offer to pay reasonable fees. If a lawsuit is already filed, consider issuing a subpoena to the custodian of records to fix the delay.
Process & Timing
- Who files: The patient or the patient’s attorney. Where: Hospital Health Information Management and the hospital’s privacy officer in North Carolina. What: A written follow‑up attaching the original HIPAA authorization/right‑of‑access request, proof of delivery, and a request for electronic copies. When: Follow up promptly; if no response by about 30 days from receipt, demand compliance or a written extension date.
- If still delayed: Send a final notice giving a short, reasonable deadline and ask for a fee estimate consistent with N.C. Gen. Stat. § 90-411. Note that specialized records (for example, certain behavioral health or substance use records) may require additional authorizations, which can extend timing.
- If litigation is filed: Issue a subpoena to the custodian of records under Rule 45 through the Clerk of Superior Court or using the official AOC subpoena form available on nccourts.gov. Allow reasonable time for compliance and request a certification for use under § 8-44.1.
Exceptions & Pitfalls
- Incomplete or expired authorization stalls requests. Ensure the form clearly lists the provider, date range, and purpose, and is signed and dated.
- Requests sent to the wrong facility or fax number get lost. Verify the correct Health Information Management contact and delivery method.
- Some records (such as psychotherapy notes or certain substance use disorder records) have extra consent steps or limits. Plan for added time.
- Fees above North Carolina’s limits or unclear invoices can delay release. Ask for a fee estimate that complies with § 90-411 and HIPAA’s cost‑based rules.
- Subpoenas without proper notice or insufficient time to comply risk objections. Follow Rule 45 service and timing requirements.
Conclusion
To follow up on a delayed medical records request in North Carolina, confirm your request is HIPAA‑compliant, verify delivery to Health Information Management, and demand a response within the HIPAA deadline. If 30 days have passed without records or a written extension, send a firm written follow‑up and be ready to pay allowable fees. If a lawsuit is filed, issue a Rule 45 subpoena to the custodian of records through the Clerk of Superior Court.