A medical record should contain your identifying and administrative information, a full medical history, a dated and signed note for every clinical encounter, diagnostic test and imaging results, treatment plans and provider orders, and the consent and legal forms that document your rights. Federal regulations governing what should be included in a medical record require hospital records to hold enough information to support your diagnosis, justify any admission, and describe how you responded to treatment over time.1eCFR. 42 CFR 482.24 – Condition of Participation: Medical Record Services Everything else in the chart supports one of those purposes.
Identifying and Administrative Information
Every page or screen ties back to you through basic identifiers: your full legal name, date of birth, and home address, plus phone and email contacts and an emergency contact. The administrative side carries your insurance policy details and a unique medical record or account number assigned by the facility, along with marital status or employer when relevant.
Accuracy here has real consequences. An outdated address or wrong insurance number can delay a treatment authorization or produce billing problems that take months to untangle.
Social and Environmental Factors
Providers increasingly document social factors that shape your health, including housing stability, food security, transportation access, and employment. Standardized codes let this information sit alongside your clinical data.2Centers for Medicare & Medicaid Services. Improving the Collection of Social Determinants of Health (SDOH) Data with ICD-10-CM Z Codes It may come from you through a screening questionnaire or from a social worker, and a clinician should review and sign off before it becomes official.
Medical History
The history is the foundation. Federal rules require a documented history and physical examination for hospital patients, completed no more than 30 days before or 24 hours after admission and always before any surgery or procedure involving anesthesia.1eCFR. 42 CFR 482.24 – Condition of Participation: Medical Record Services If an H&P was completed within that 30-day window, the provider must still update it within 24 hours of admission to note any change in your condition.
A complete history covers:
- Past medical conditions, chronic illnesses, and prior hospitalizations
- Surgical history with dates and types of procedures
- Allergies to medications, foods, and environmental triggers, including what reaction each one causes
- Current and recent medications, including prescriptions, over-the-counter products, and supplements, with dose and frequency
- Immunization records
- Family medical history for hereditary risk
- Social history, including occupation, tobacco and alcohol use, exercise, and diet
Documentation of Every Clinical Encounter
Each visit or interaction gets its own entry, and each entry must be complete, dated, timed, and authenticated by the person who provided or evaluated the service.1eCFR. 42 CFR 482.24 – Condition of Participation: Medical Record Services That signature is more than a formality; an unsigned note can jeopardize an insurance claim and, in serious cases, raise questions about whether the documented care actually happened.
Under CMS documentation guidelines, an encounter note should record:3Centers for Medicare & Medicaid Services. Evaluation and Management Services
- The reason for the visit or chief complaint
- The relevant history of the problem, including associated symptoms and what makes it better or worse
- Physical examination findings
- Prior test results that inform the current visit
- The provider’s assessment or diagnosis
- The plan of care, including tests, referrals, prescriptions, and patient education
Providers also document your progress, response to treatment, and any changes to an earlier diagnosis.3Centers for Medicare & Medicaid Services. Evaluation and Management Services When billing is time-based, the note should show total time or start and stop times.
Test Results and Imaging
Every lab, pathology report, and imaging study becomes part of your permanent record: blood work, urine tests, cultures, biopsy findings, X-rays, MRIs, CT scans, and ultrasounds. Each result should show when the test was performed, the findings, and the interpreting provider’s conclusions.
The point is not archival. Past and present diagnoses have to stay accessible to any treating or consulting physician,3Centers for Medicare & Medicaid Services. Evaluation and Management Services because a timeline of results is what lets a new provider spot slowly worsening kidney function or a tumor that has changed size between scans.
Treatment Plans and Orders
Every active plan and provider order sits in the treatment section. All orders, including verbal ones, must be dated, timed, and promptly signed by the ordering provider.1eCFR. 42 CFR 482.24 – Condition of Participation: Medical Record Services That includes:
- Medication orders with drug name, dose, frequency, route, and duration
- Therapy and care orders for physical therapy, occupational therapy, diet, wound care, and other ongoing interventions
- Referrals to specialists with the clinical reason
- Surgical or procedural orders with pre-op and post-op instructions
- Discharge instructions covering medication changes, activity restrictions, and follow-up appointments
Any modifications to your plan over time should also be documented, so the record shows why your care changed.
Consent Forms and Legal Documents
Several legally required documents sit in your record to confirm you were informed and to protect your rights.
Informed Consent
Before most procedures and treatments, you sign a form confirming you understand what is being done, the risks, and the alternatives. The signed form stays in the record as evidence the conversation happened. Authorizations for releasing your health information to outside parties are handled the same way.
Advance Directives
Hospitals participating in Medicare must document in a prominent part of your record whether you have an advance directive, such as a living will or a healthcare power of attorney. If you have one, a copy belongs in the record, and staff involved in your care should know its contents. The facility must give you written information at admission explaining your right under state law to accept or refuse treatment and to create a directive.4eCFR. 42 CFR 489.102 – Requirements for Providers No provider can condition your care on whether you have signed one.
HIPAA Privacy Acknowledgment
Your provider must give you a notice explaining how they can use and share your health information and what your privacy rights are, and must ask you to acknowledge in writing that you received it.5U.S. Department of Health and Human Services. Notice of Privacy Practices If you decline to sign, the provider documents the attempt and the reason.6U.S. Department of Health and Human Services. Notice of Privacy Practices for Protected Health Information That acknowledgment, or the documentation of the attempt, stays in your file.
Records That Sit Outside the Main Chart
Two categories of information get stronger federal protection and are handled differently from the rest of your record.
Psychotherapy notes are the detailed notes a mental health professional writes during counseling sessions about the content of your conversations. They must be kept separate from the rest of your mental health record, and a provider generally cannot use or share them without your specific written authorization, even for treatment or insurance purposes.7eCFR. 45 CFR 164.508 – Uses and Disclosures for Which an Authorization Is Required Session dates, medication information, treatment plans, diagnoses, and progress summaries are specifically excluded from the definition, so those details follow normal HIPAA sharing rules even when the underlying notes do not.
Substance use disorder records from federally assisted treatment programs carry extra confidentiality protections under the federal law commonly called Part 2. These records cannot be shared in a way that identifies you as having received substance use treatment unless you give written consent, a court orders disclosure, or there is a medical emergency. Even with a general consent for treatment, payment, and healthcare operations, the information cannot be used against you in legal proceedings without your consent or a court order and subpoena.8U.S. Department of Health and Human Services. Understanding Confidentiality of Substance Use Disorder (SUD) Patient Records or Part 2
Seeing and Correcting What’s in Your Record
Under HIPAA, you have a broad right to access your health information regardless of whether it is stored on paper, electronically, onsite, or in an archive.9U.S. Department of Health and Human Services. Individuals’ Right under HIPAA to Access their Health Information When you request copies, the provider must respond within 30 calendar days. Archived or hard-to-retrieve records can push that out by one additional 30-day period, but the provider must notify you in writing of the delay and the expected completion date.10eCFR. 45 CFR 164.524 – Access of Individuals to Protected Health Information Only one extension is allowed.
Providers can charge a reasonable, cost-based fee limited to the cost of copying labor, supplies, and postage. They cannot fold in costs for searching, retrieval, or maintaining their systems, even if state law would otherwise allow it. For electronic copies of records that are already maintained electronically, the flat fee cannot exceed $6.50.9U.S. Department of Health and Human Services. Individuals’ Right under HIPAA to Access their Health Information You can also direct the provider to send your records to a third party of your choosing.
If you find an error, you have the right to request an amendment, and the provider must act within 60 days. The provider can require the request in writing and ask why the change is needed. Denial is allowed only on limited grounds: the information was not created by that provider and the original source is still available, the record is accurate and complete as it stands, or the information is not part of the records used to make decisions about your care.11eCFR. 45 CFR 164.526 – Amendment of Protected Health Information If your request is denied, the provider must give you a written explanation, and you can submit a written statement of disagreement that becomes a permanent part of the record.
How Long the Record Stays Available
Hospitals participating in Medicare must retain medical records for at least five years in their original or legally reproduced form. That is the federal floor. Many states require longer, and some extend the timeline significantly for minors’ records. The hospital must also maintain a system for coding and indexing records so they can be retrieved by diagnosis and procedure, and original records can be released only under federal or state law, a court order, or a subpoena.1eCFR. 42 CFR 482.24 – Condition of Participation: Medical Record Services If you expect to need older records for a legal matter or an ongoing condition, request copies well before the retention period runs out rather than assuming they will always be available.