Insurer Asking for Extensive Medical Records?

“I was hurt in a crash, and now the adjuster wants years of my medical records. Do I have to hand over everything?” The request alone does not establish that every record is relevant or that unrestricted access is required. Your obligations can depend on the claim and state law, so ask what is needed and respond rather than ignore it.

Key Facts

An insurer may seek records to assess the cause and extent of an injury.
A broad request is not proof that every requested record is relevant.
Signing an authorization can give the insurer access to records within its scope.
Your policy, claim type, and state law may affect your obligations.
Keep copies of requests, authorizations, records, and claim communications.

Why is the insurer asking for a broad medical history?

An insurer may request medical records to evaluate whether the crash caused your injury, how serious it is, and what treatment may be related. The adjuster may also look for earlier conditions or injuries that could affect the claim. If your crash involved a rear-end collision, for example, the insurer may want records connected to the same area of your body.

Closed medical records folder beside an insurance form — Laura James

That does not make every part of your medical history relevant. Records about unrelated care may reveal sensitive information without helping explain your crash injuries. The size of the request is a reason to clarify its purpose and scope, not a reason to assume you must provide unrestricted access.

An insurer may also request records to check information you have already provided, such as when symptoms began or what treatment you received. Accurate, consistent information can help avoid confusion. If an old condition is relevant, explain the difference between your prior health and the symptoms or limitations that followed the crash.

Do you have to sign the insurer’s authorization?

You do not automatically have to sign a broad authorization just because an adjuster asks for one, but your obligations depend on the type of claim and applicable rules. A claim under your own policy may involve cooperation terms that differ from a claim against another driver’s insurer. Read the request and any policy language carefully before deciding how to respond.

Medical authorization form on a clean desk — RDNE Stock project

An authorization may let a provider send records directly to the insurer. Check which providers and dates it covers, what information can be released, and who may receive it. Ask the adjuster to explain why the requested records are needed and whether records limited to the injury, relevant body area, or treatment period will work.

HIPAA privacy protections govern how covered health care providers and plans use or disclose health information; they do not automatically prevent disclosure when a valid authorization applies. If the request is unclear or unusually broad, consider getting help understanding the document before signing.

What can you do when the request seems too broad?

Do not ignore the request. The insurer may continue evaluating the claim with the information it has, and policy obligations or claim requirements may apply. If you disagree with the scope, state that clearly and ask for a more focused request instead of leaving the adjuster without a response.

Insurance request letter and organized documents — Kindel Media

Avoid altering records or guessing at medical details. If you do not understand a document or feel pressured to sign immediately, ask for time to review it and seek help understanding your options.

Read the authorization and note its scope, including providers, dates, record types, and recipients.
Ask the adjuster to explain the connection between the requested records and your claimed injuries.
Ask whether you can provide relevant records yourself or use a narrower authorization.
Keep copies of your response, the records you send, and any authorization you sign.

Can an old condition affect your injury claim?

An earlier health condition can matter to a claim, but it does not automatically mean the crash caused no new harm. The insurer may compare your medical history with your symptoms, treatment, and functioning after the collision. The medical record and other evidence can help distinguish an ongoing condition from a new injury or a worsening of an existing one.

Notebook with medical appointment notes beside a calendar — Tessy Agbonome

Be straightforward about relevant prior injuries or treatment. If you had symptoms before the crash, explain what changed afterward and when you noticed the change. If you had no symptoms or limitations before the collision, make that clear as well. Your health care provider can document your reported symptoms and clinical findings.

The insurer may use information in the records to question whether a condition is related to the crash or whether treatment was needed. That is one reason to review what is being requested and make sure the records provide context. Do not hide relevant history, but do not assume that a request for your complete medical past means all of it bears on the claim.

What if you already signed or sent records?

If you already signed an authorization or sent records, find out exactly what was shared and whether the insurer has requested more. Get a copy of the authorization and review its scope, including who can receive information and whether it permits additional disclosures. Contact the insurer or provider promptly if you believe the authorization was broader than you intended.

Claim file and authorization document being reviewed — Mikhail Nilov

Whether you can withdraw permission for future disclosures, and what effect that has, depends on the authorization and applicable rules. Withdrawal generally does not erase records already disclosed or require the recipient to return them. Ask the provider and insurer what has already been sent and whether further releases are scheduled.

Keep a copy of the records you submitted and note when and how they were sent. If you receive an offer or a request for a statement after the records are reviewed, take time to understand what it covers and how it affects your claim. You can request an offer review or consultation to discuss the paperwork and any claim deadlines.

How can state law change the rules for medical records?

State rules can differ on medical-record authorizations, privacy protections, and how relevant records may be requested during a lawsuit. Policy terms and the type of claim can also affect what information an insurer may request and what cooperation is required.

Legal documents and state map on a desk — Sora Shimazaki

State law may also affect fault rules, claim deadlines, and damages. Because those rules are not the same everywhere, the scope of a request and the response time that applies to you depend on where the crash happened and the details of your claim.

Frequently Asked Questions

Can I send selected records instead of signing a release?

You can ask the adjuster whether relevant records supplied by you will meet the request. The insurer may ask for additional information, and your claim or policy obligations may affect what it needs. Keep a copy of anything you send.

Does HIPAA stop an insurer from getting medical records?

HIPAA does not automatically block disclosure when a provider has a valid authorization or another permitted basis for disclosure. The scope of the authorization matters, so read it before signing and ask questions if it is unclear.

Can the insurer use unrelated medical information?

An insurer may review information it receives, but whether particular information is relevant or may be used in a claim can depend on the circumstances and applicable law. You can ask why specific records are needed and raise concerns about unrelated material.

What if I am still receiving treatment?

Tell the adjuster that treatment is ongoing and keep records of new appointments, symptoms, and expenses. Your medical picture may change as treatment continues, so an early evaluation may not reflect the full course of care.

Should I ignore repeated requests for records?

No. Ignoring a request can leave the insurer without information it says it needs to evaluate the claim. Respond in writing, ask for clarification, and explain any limits or concerns you have.

Sources

U.S. Department of Health and Human Services: HIPAA for Individuals

Next Steps

If you received a broad medical-record request or an insurance offer, you can ask for a free case evaluation, offer review, or deadline check. Contact us for a consultation to discuss the request and possible next steps.

The Insurer Is Asking for Ten Years of Medical Records