HIPAA Medical Records Requests: Timelines, Fees and Nevada's NRS 629.061 Limits

Medical records and bills are the backbone of every PI demand, and they are often the slowest part of the file. This guide covers the two legal frameworks behind most records requests from a Nevada PI firm: the federal HIPAA Privacy Rule and Nevada's own health-records statutes (NRS 629.061 and 629.062). It explains which one you are using, the timelines, and what providers may charge.

1. Patient access request or authorization? Know which you are sending

2. HIPAA timelines (45 CFR 164.524(b)(2))

• The covered entity must act on an access request no later than 30 days after receipt.
• It may extend once, by no more than 30 days, only if it gives a written statement of the reasons for the delay and the date it will finish, within the first 30 days.
• Denials must be in writing, in plain language, and state the basis (164.524(d)).

3. HIPAA fees for access requests (45 CFR 164.524(c)(4))

The fee may include only:

• labor for copying the PHI, in paper or electronic form;
• supplies for a paper copy, or for electronic media if the patient asks for portable media;
• postage, if the patient asked for the copy to be mailed;
• preparing an explanation or summary, if the patient agreed to it in advance.

HHS guidance also allows a flat fee of up to $6.50 (including labor, supplies and postage) for electronic copies of electronically maintained records as an alternative to calculating actual or average costs. HHS says that guidance remains in effect only to the extent it is consistent with the Ciox order.

4. Nevada rules (NRS 629.061 and 629.062)

• Who may inspect: the patient, a representative with the patient's written authorization, and certain others listed in the statute (NRS 629.061(1)).
• Inspection timeline: within 10 working days of the request if the records are in Nevada, or 20 working days if they are outside Nevada (NRS 629.061(2)).
• Copy cost: actual postage plus copying, not to exceed 60 cents per page for photocopies, plus a reasonable cost for X-ray-type records. No administrative or service fee of any kind may be charged (NRS 629.061(4)).
• Billing records count: for this section, "health care records" includes billing statements, ledgers and other records of amounts charged (NRS 629.061(10)(b)).
• Electronic copies (NRS 629.062): if records are kept electronically and requested electronically, the fee may not exceed $40 or the per-page amount under NRS 629.061, whichever is less. A private custodian may charge a $5 minimum, and may add $5 for a no-records letter, $5 for a custodian certificate, $20 for a printed film sheet, and $25 for radiologic images in another form.
• Social Security and needs-based benefit claims: one free copy, furnished within 30 days, when the request is accompanied by documentation of the claim (NRS 629.061(5)).
• Retention: custodians generally keep records for 5 years after receipt or production (NRS 629.051).

5. What a clean request packet includes

• Cover letter that names the legal basis (HIPAA access under 164.524 or an authorization under 164.508), dates of service, and the record and billing types requested
• HIPAA-compliant authorization, or the patient's signed, written access direction naming the firm and where to send the records
• Request for itemized billing with CPT/HCPCS codes, using CMS-1500 for professional claims and UB-04 for facility claims, plus a payment ledger
• Preferred format (electronic, secure portal or email) and a delivery address
• A citation to NRS 629.061 and 629.062 fee limits for Nevada providers
• Records-custodian affidavit or certificate request, if the attorney wants one
• Calendar entries at day 10, day 30 and day 60, each with a follow-up script

Download our HIPAA records request letter template, or let us run requests and follow-ups for you. See Medical Records Request and Medical Records Follow Ups.