It’s 9 p.m. at an urgent care clinic and the nurse asks a simple question. What medications are you on, and at what dose? You get the first two right. The third one you half remember. The supplement you started in March you forget entirely.
That gap isn’t a personal failing. It’s how American medical records are built. Your primary care office keeps one file. The orthopedic group keeps another. The hospital where you had your gallbladder removed keeps a third, and the lab that ran your blood work last spring keeps a fourth. None of them merges automatically into a single picture of you.
Researchers have put numbers on what that costs. In a 2020 study in JAMA Network Open, almost 23,000 patients at three US health systems read at least one of their own visit notes. About 21% found something they believed was a mistake, and more than 4 in 10 of those people rated the mistake as serious.
The fix is a habit, a folder, and one page of paper you can hand to anybody in under five seconds.
Why nobody else is holding your whole file
Each practice keeps the slice of your history it created. That isn’t negligence. It’s a structure that grew up one office at a time, and federal rules only started pushing hard in the other direction in the last decade.
The practical result is that the person with the fullest view of your health is you. Your gastroenterologist may never see the sleep study. The emergency physician treating your chest pain at 10 p.m. has no way of knowing you stopped a blood pressure drug six weeks ago because it made you dizzy.
Medication lists are where the fragmentation shows up most plainly. In a 2014 study in the Journal of the American Pharmacists Association, pharmacists at a Minnesota family medicine clinic reviewed the lists of 327 patients who were each taking at least 10 medications. They found and resolved 2,167 discrepancies, roughly 6.6 per person, and judged just over half to be clinically important. The most common problem was the simplest one: the chart listed a drug the patient had already quit.
A separate study of primary care visits at the Cleveland Clinic, published in the Journal of Patient Safety, found that once over-the-counter products were counted, only 15% of patients had a chart medication list that matched exactly what they said they were taking.
The reverse is measurable too. When records travel with a patient, care gets less repetitive. A 2022 analysis in JMIR Medical Informatics followed service members moving from Defense Department care into the Veterans Affairs system. Primary care providers who had used the shared record viewer in the prior six months ordered significantly fewer duplicate imaging studies, with an odds ratio of 0.44.
What’s worth keeping, and what’s just paper
Most people who try to keep health records fail for the same reason: they try to keep everything. A shoebox of explanation-of-benefits statements and visit printouts is a pile, not a record.
MedlinePlus, the consumer health service of the National Library of Medicine, describes a personal health record as a single place that pulls together information otherwise scattered across separate offices. That’s the test. Keep what a stranger would need to treat you safely, and this is what earns its place, roughly in order of how often it changes a clinical decision.
Medications and supplements. Name, dose, how often, why you take it, and when you started. The National Institutes of Health Office of Dietary Supplements specifically recommends keeping a written record of supplement name, dose, frequency and reason, and telling every provider about them, including your dentist and pharmacist. That’s not a formality. Vitamin K can blunt the effect of the blood thinner warfarin, and St. John’s wort speeds up the breakdown of many prescription drugs.
Allergies, and what the reaction was. “Allergic to penicillin” is nearly useless on its own. A rash at age six is a different clinical problem than throat swelling at age thirty, and the two lead to different decisions about antibiotics.
Surgeries and procedures, with dates and facilities. You don’t need the operative report. You need enough that a surgeon can request the right record from the right place.
Chronic diagnoses and roughly when they were made. The year matters. A diagnosis of high blood pressure in 2009 tells a different story than one made last month.
Immunizations. More on that below, because this is the category people most often can’t reconstruct.
Family history. First-degree relatives, the condition, and the age they were diagnosed. Age at diagnosis is the part people leave out and the part clinicians use.
The handful of results that establish your baseline. Not every lab you’ve ever had. The ones that show what normal looks like for you, plus any imaging. Reading and interpreting those numbers is a separate skill and a separate conversation with your clinician.
What you can let go: routine visit summaries that changed nothing, duplicate copies, and billing paperwork once the bill is settled and the year is closed.
One exception worth building a habit around is imaging. If you have a CT, MRI or ultrasound, ask for a copy on a disc or as a file before you leave, and keep it. Radiology departments do send studies to each other, but requests get lost, formats conflict, and a repeat scan means more cost and, for CT, more radiation.
The access rights you already have
Federal law is firmer here than most people realize. Under the HIPAA Privacy Rule, the Department of Health and Human Services Office for Civil Rights says you have the right to inspect and get copies of your medical records and your billing records held by health plans and most providers.
Several details are worth knowing before you ask.
You can usually get the copy in the form you want, including by email. A provider may charge a reasonable fee for copying and mailing, but HHS says that fee may not be a per-page charge if your information is stored electronically. HHS also states that providers cannot charge you for the time they spend searching for or retrieving your records.
You cannot be turned down because you owe the practice money. An unpaid bill and a records request are separate matters under the rule.
The standard clock is 30 days. HealthIT.gov, run by the federal office that oversees health technology policy, explains that a provider needing more time must tell you why and give you a new date, and can take up to 30 additional days. State laws sometimes set a shorter deadline, and those still apply.
There are limits. HHS notes that you don’t have a right to a therapist’s psychotherapy notes, which are the private notes a mental health professional keeps separate from the medical and billing record. Only you or your legally recognized personal representative can access your file.
If a front desk tells you HIPAA prevents them from giving you your own chart, that is backwards. HealthIT.gov states plainly that the Privacy Rule requires them to give you access, and that providers cannot create unreasonable barriers or unreasonably delay the request. Asking for the health information services department, rather than the receptionist, usually solves it in one call.
When a request stalls: the information blocking rules
For years, a provider or software vendor could make records technically difficult to move and face no consequence. That changed with the 21st Century Cures Act, passed in 2016.
Federal health IT officials describe the law as having made sharing electronic health information the expected norm. Information blocking is defined as a practice by a covered “actor” that is likely to interfere with access, exchange or use of electronic health information, unless the law requires it or an exception applies.
Three groups are covered: health care providers, developers of certified health IT, and health information exchanges and networks. The standard differs slightly between them. Developers and exchanges are judged by whether they knew or should have known a practice was likely to interfere. Providers are judged by whether they knew the practice was unreasonable.
There are exceptions, written into 45 CFR Part 171. They’re voluntary, and meeting one gives an organization certainty. Failing to meet one doesn’t automatically make a practice information blocking. It gets looked at case by case.
The part that matters to you is the complaint route. ONC runs a Report Information Blocking Portal, and the HHS Office of Inspector General can investigate claims against all three actor types. HHS has also finalized a rule creating disincentives for providers found to have blocked information. You will not usually need this. It exists, and knowing it exists changes how a stalled request sounds on the phone.
Errors, and the right to push back
Records contain mistakes, and some of them matter. In that 2020 JAMA Network Open study, among the errors patients rated as very serious, the most common category involved a current or past diagnosis, followed by inaccurate medical history, then medications or allergies. Roughly 6% were notes that appeared to have been written about a different patient entirely.
Patients often spot these and say nothing. A 2021 study in the Journal of the American Medical Informatics Association found that of patients and families who perceived a serious note error, only about 56% contacted the provider. The two biggest barriers were not knowing how to report a mistake, named by 61%, and not wanting to be seen as a troublemaker, named by about a third.
You can ask for a correction, and there’s a process. HealthIT.gov advises contacting the office to learn its procedure, putting the request in writing with the date of service and a clear explanation of what’s wrong, attaching a copy of the page with the error, and keeping a copy of everything you send. The provider has 60 days to respond unless it requests an extension.
If the provider refuses, you aren’t finished. You can submit a written statement of disagreement, and HHS says the provider or plan must add it to your record. You can also file a complaint with HHS.
Some errors shouldn’t wait for a letter. If the chart shows an allergy you don’t have, omits one you do, or lists a medication you stopped, call the practice that day. The same goes for anything scheduled: before a procedure involving anesthesia or sedation, confirm that the record reflects every prescription and supplement you take, since some supplements raise bleeding risk or change how you respond to anesthesia.
Portals help, and they are not your record
Patient portals are genuinely useful. They’re also routinely misunderstood as a solution to a problem they don’t solve.
A portal shows you one organization’s view of you. If you see four practices across three systems, you have three portals, three logins and three partial pictures. Nothing stitches them together, and if you change jobs, change insurers or move, you may lose easy access to the portal that held the most history.
Portals also deliver results fast, sometimes before anyone has called you. On balance that’s good. It also means you may read an abnormal value on a Saturday with no one to ask about it. The best move is to send a portal message asking what the result means for you and what the next step is, and to resist the search engine spiral in the meantime.
Use the portal for what it does well: downloading your own data. Look for a Blue Button symbol, which HealthIT.gov says marks a site where you can download your records. Veterans, active-duty service members and Medicare beneficiaries have Blue Button access through their own federal portals.
Then put what you download somewhere that isn’t a portal, because the portal belongs to them and the record belongs to you.
Immunizations are the hardest category to rebuild
This is a fact that surprises almost everyone. According to the CDC, no national organization keeps vaccination records, and the CDC does not have yours. The only records that exist are the ones you or your parents were handed and the files kept by whoever gave the shot.
Those files age out. The CDC notes that high schools and colleges may keep health records for only one to two years after you leave, and that doctors’ offices and clinics keep records for a limited number of years.
Where to look, in rough order of payoff: your own baby book or saved childhood paperwork, your parents, your state health department, which in many states runs an immunization information system that may include adult vaccines, previous employers including the military, and former schools.
If you come up empty, the CDC says it’s safe to repeat some vaccines, though not ideal, and that a doctor can sometimes run blood tests to check whether you’re immune to certain vaccine-preventable diseases. That’s the conversation to have before a pregnancy, before starting a job in health care or child care, or before international travel, rather than at the last minute.
Going forward, ask your provider or pharmacist for an immunization record card, bring it to visits, and have each vaccine signed and dated. Ask that it also be entered into your state registry.
A one-page summary you can build this weekend
This is the single highest-value thing in this article. One page, printed, in your wallet or bag, and a photo of it on your phone. This is a structure that works.
Block 1: Identity and contacts. Your name, date of birth, blood type if you know it, one emergency contact with phone number, and the name and phone number of your primary care practice.
Block 2: Active conditions. Each diagnosis and the year it was made. Four or five lines, not a paragraph.
Block 3: medications. Name, dose, how often, and what it’s for. Include prescriptions, over-the-counter drugs you take regularly, vitamins, herbs and any other supplement.
Block 4: Allergies and reactions. The substance, what happened, and roughly when.
Block 5: Surgeries and major procedures. Procedure, year, and where it was done.
Block 6: Implants and devices. Pacemaker, stent, joint replacement, insulin pump, IUD. Include the year. This block is short and occasionally decisive, especially before imaging.
Block 7: Baseline numbers. Three or four values you and your clinician track, each with its date and the lab that ran it, plus the date of your last imaging study and where the images live.
Date the page itself. An undated summary is a guess.
Updating it is the part people drop. Tie it to something that already happens on a schedule. Review it when you refill a prescription, or the week you file your taxes. Change one thing: whichever block the last appointment touched.
Finally, keep a parallel digital copy in a place you control, such as an encrypted folder or a file on your own computer, and bring the printed page to appointments. Paper doesn’t need a password, a signal or a battery, which is precisely why it works in an emergency room.
The one thing to do first
If you do nothing else from this article, write the medication and supplement list, with doses, and date it.
It’s the item clinicians ask for most often, the one patients most often get wrong, and the one where being wrong changes what happens next. Everything else in a personal health record is useful. That list is the one that can stop a bad interaction before it starts.
Sources
- U.S. Department of Health and Human Services, Office for Civil Rights. “Right to Access.” hhs.gov
- U.S. Department of Health and Human Services, Office for Civil Rights. “Your Medical Records.” hhs.gov
- HealthIT.gov (U.S. Department of Health and Human Services). “Information Blocking.” healthit.gov
- HealthIT.gov (U.S. Department of Health and Human Services). “Get It.” healthit.gov
- HealthIT.gov (U.S. Department of Health and Human Services). “Check It.” healthit.gov
- MedlinePlus, U.S. National Library of Medicine. “Personal Health Records.” medlineplus.gov
- Centers for Disease Control and Prevention. “Your Vaccine Records.” cdc.gov
- National Institutes of Health, Office of Dietary Supplements. “Dietary Supplements: What You Need to Know.” ods.od.nih.gov
- PubMed. “Bell SK, et al. "Frequency and Types of Patient-Reported Errors in Electronic Health Record Ambulatory Care Notes." JAMA Network Open, 2020. DOI: 10.1001/jamanetworkopen.2020.5867.” doi.org
- PubMed. “Lam BD, et al. "Speaking up about patient-perceived serious visit note errors: Patient and family experiences and recommendations." Journal of the American Medical Informatics Association, 2021. DOI: 10.1093/jamia/ocaa293.” doi.org
- PubMed. “Milone AS, et al. "Medication reconciliation by clinical pharmacists in an outpatient family medicine clinic." Journal of the American Pharmacists Association, 2014. DOI: 10.1331/JAPhA.2014.12230.” doi.org
- PubMed. “Reedy AB, et al. "Patient, Physician, Medical Assistant, and Office Visit Factors Associated With Medication List Agreement." Journal of Patient Safety, 2016. DOI: 10.1097/PTS.0000000000000100.” doi.org
- PubMed. “Yuan Y, et al. "Integrated Health Record Viewers and Reduction in Duplicate Medical Imaging: Retrospective Observational Analysis." JMIR Medical Informatics, 2022. DOI: 10.2196/32168.” doi.org