How to Correct an Error on Your Health Care Record

To correct an error on your medical record, send a written amendment request to the provider or facility that created the record, identifying the specific mistake, the correction you want made, and the evidence that supports it. Under the HIPAA Privacy Rule, the provider has 60 days to respond, with a single 30-day extension allowed if they notify you in writing before the first deadline passes.1eCFR. 45 CFR 164.526 – Amendment of Protected Health Information

One thing worth understanding up front: an amendment does not erase the original entry. The provider keeps what was there and appends the correction or links to it. That protects the treatment history while still putting the accurate information in front of anyone who reads the file.

What You Can Ask To Have Corrected

The right to request an amendment covers information in your “designated record set” — your medical charts, billing records, enrollment files, and other records used to make decisions about your care or coverage.1eCFR. 45 CFR 164.526 – Amendment of Protected Health Information Typical errors include a wrong date of birth, an incorrect diagnosis code, a medication dosage that doesn’t match what was prescribed, lab results attributed to the wrong patient, an allergy you don’t have, or a misspelled name.

A provider can deny your request on four specific grounds:

  • The provider didn’t create the record. If another facility or doctor wrote the entry, direct your request there instead. The exception is when that originator is no longer available to act.
  • The record isn’t part of the designated record set. Some internal or administrative notes fall outside the amendment right.
  • The record isn’t one you’d be allowed to inspect in the first place. Psychotherapy notes kept separate from the main file are the main example.
  • The provider reviews the entry and concludes it is already accurate and complete.

Those four grounds come straight from the regulation, and no other reason is a valid basis for refusal.1eCFR. 45 CFR 164.526 – Amendment of Protected Health Information

Pin Down the Error Before You File

Vague complaints get vague answers. Before writing anything, identify the exact entry that’s wrong: the date of service, where it appears in the record, what it currently says, and what it should say. Then gather evidence. Lab reports, pharmacy records, discharge summaries, correspondence from another provider, or allergy test results all make it harder for the provider to fall back on “the record is accurate and complete.” The stronger your documentation, the shorter the argument.

What To Put in the Written Request

Many providers have an amendment request form, sometimes available through the patient portal. If there isn’t one, a letter works. Include:

  • Your full legal name, date of birth, contact information, and any patient ID or medical record number.
  • The name of the provider or facility that holds the record.
  • The specific error: date of service, section of the record, and what is wrong.
  • The correction you want made, stated clearly.
  • A brief factual reason. “The record lists a penicillin allergy; I have no penicillin allergy, as confirmed by allergy testing on [date]” is far more effective than a paragraph of frustration.
  • Copies of the documents supporting your version.

Send it to the medical records department, the privacy officer, or whoever the office designates for HIPAA matters. If you don’t know, call and ask.

Submit It in a Way You Can Prove

How you deliver the request matters less than whether you can show you delivered it. Certified mail with return receipt gives you a mailing receipt and a delivery signature. A patient portal submission should be captured with a screenshot or confirmation email. If you hand it in, ask for a signed and dated acknowledgment on your copy. Keep everything — the request, the attachments, and the proof of delivery — in one place.

The 60-Day Response Deadline

The provider must act on the request within 60 days of receiving it. They can take one 30-day extension, but only if they send you a written notice before the initial 60 days expire, explain the reason, and give a date by which you’ll have an answer.1eCFR. 45 CFR 164.526 – Amendment of Protected Health Information There is no second extension. If 90 days go by with no response, the rule has been violated.

If the Provider Agrees To Make the Correction

When the amendment is accepted, the provider appends the correction to the record or links to it, notifies you in writing, and asks you to identify anyone else who received the incorrect information and should be told about the change.1eCFR. 45 CFR 164.526 – Amendment of Protected Health Information The provider also has to make reasonable efforts to send the correction to business associates and other parties they know have the flawed data and could act on it in ways that hurt you.2U.S. Department of Health and Human Services. What Are a Covered Entity’s Responsibilities to Notify Others in a Network if an Amendment Is Made

Think broadly when you name recipients. If a health insurer denied a claim on the basis of the wrong information, or a specialist got flawed records before a referral, list them. Once you name them, the provider is obligated to follow up.

If the Provider Denies the Request

A denial has to come in writing and has to cite which of the four permitted grounds justifies it.1eCFR. 45 CFR 164.526 – Amendment of Protected Health Information A denial that names no specific ground, or names one that doesn’t fit the facts, may itself be a violation.

Your Statement of Disagreement

After a denial you can submit a written statement of disagreement explaining why the record is wrong. The provider must attach it to the record, and it must be included or summarized with any future disclosure of the disputed information. Anyone who later receives that part of your record also sees your side.

The Provider’s Rebuttal

The provider is allowed to write a rebuttal. If they do, they have to send you a copy and attach the rebuttal to the record alongside your statement. Both documents then travel with the disputed entry in future disclosures. The exchange can feel circular, but it creates a permanent, visible dispute — useful if the error ever causes problems.

If you decide not to file a statement of disagreement, you can still ask that your original amendment request and the denial letter be included with any future disclosures of the disputed record.

Filing a Complaint With the Office for Civil Rights

If the provider ignores your request, misses the deadline, denies it without a valid ground, or agrees to correct the record and then doesn’t follow through, you can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.3U.S. Department of Health and Human Services. Filing a Health Information Privacy Complaint Complaints can be submitted by mail, fax, email, or through the OCR’s online complaint portal.4U.S. Department of Health and Human Services. How to File a Health Information Privacy or Security Complaint

The complaint generally has to be filed within 180 days of when you knew or should have known about the violation, though OCR can waive that deadline for good cause. Send copies of your amendment request, proof of submission, the provider’s response or the absence of one, and any other correspondence. The paper trail you built during the amendment process is what OCR uses to evaluate the case.