Medical record costs can make or break a personal injury case budget. When fees vary by provider, request type, and record format, it's hard to plan case costs with confidence. Ciox Health, which merged with Datavant in 2021 and now operates under the Datavant name, is a long-standing name in release of information and record retrieval. Its pricing has also drawn scrutiny, including a 2022 settlement over disputed electronic-record fees in Texas. For plaintiff law firms looking for more predictable budgeting, Codes Health offers AI-powered medical record retrieval under a flat fee model, with a reported typical timeframe of a couple of weeks.

Key Takeaways

• No nationwide Ciox/Datavant legal-retrieval rate card was verified, so firms should request an itemized quote for each provider and request type
• Provider copying charges, fees for third-party requests, and a law firm's contracted retrieval-service fees are different things and follow different rules
• In 2022, Ciox agreed to a $1.85 million settlement over disputed electronic-record fees for qualifying Texas requests, without admitting wrongdoing
• A lawsuit over a May 2024 email-security incident resulted in a $900,000 settlement, and Datavant denies wrongdoing
• Codes Health uses a flat fee model, flags authorization errors before submission, and runs a completeness review before closing retrievals
• Filevine users can manage Codes Health retrieval directly inside their case files

Understanding Medical Record Fees and the Rules Behind Them

Know the Rules That Apply to Your Requests

Applicable rules vary by jurisdiction, provider type, request authority, and record format. That's why law firms handling multi-state caseloads often see very different charges for similar requests.

It helps to separate three kinds of charges:

• Provider copying and delivery charges, which a provider or its release-of-information vendor bills for fulfilling a request
• Fees applicable to third-party requests, such as those made by a law firm with a client's authorization, which may follow different state or contractual rules than patient requests
• A law firm's contracted retrieval-service charges, which the firm pays a retrieval company for handling requests, follow-up, and delivery

Patient Access Fees: The $6.50 Option Explained

This section covers patient-access requests only, not commercial retrieval pricing. When individuals request their own records under HIPAA's right of access, fees are limited to reasonable, cost-based amounts. HHS fee guidance describes an optional flat fee of no more than $6.50 for qualifying requests for electronic copies of electronically maintained information, covering allowable labor, supplies, and postage. It's one option, not a universal maximum or a standard litigation charge, and the guidance carries a qualification stemming from the Ciox v. Azar decision.

HHS also excludes search, retrieval, and certain administrative costs from individual-access copying fees.

Ciox Pricing in Practice

No nationwide Ciox/Datavant legal-retrieval rate card was verified. Some figures circulating online come from individual provider release forms, which can list base charges, per-page fees, postage, supplies, labor, and tax for that provider only. Request an itemized quote identifying the provider, request type, format, applicable fees, and additional charges.

Typical components to ask about include:

• Copying or per-page charges
• Handling or processing fees
• Certification fees when you need authenticated documents
• Rush fees for expedited turnaround
• Postage and delivery charges

Fee Disputes and Complaints

In 2022, Ciox agreed to a $1.85 million settlement concerning disputed electronic-record fees for qualifying Texas requests, without admitting wrongdoing. The settlement notice distinguished clinic and hospital rates and stated that liability was not determined.

The National Organization of Social Security Claimants' Representatives announced an OCR complaint in March 2024 alleging excessive fees and access-related problems. The announcement states allegations, not findings of a violation.

Separately, a lawsuit concerning a May 8 to 9, 2024 email-security incident resulted in a $900,000 settlement. The settlement administrator reports that the settlement received approval following the September 22, 2026 hearing. Datavant denies wrongdoing.

How Medical Records Are Requested: Portals and Traditional Channels

Patient Portals and Direct Provider Access

Many health systems offer patient portals where individuals can view and download records. For clients, this can be a useful starting point. Portal downloads may not contain every record or billing document needed, though. Counsel should assess completeness and any authentication requirements for the intended use.

Traditional Channels for Comprehensive Retrieval

When digital access falls short, traditional methods are still needed:

• Fax requests to provider medical records departments
• Phone follow-up to track request status
• Mail submissions for facilities without electronic intake
• In-person visits for providers with limited remote access

Handling all of this gets heavy when a case involves several providers. Codes Health describes multichannel retrieval using digital connections, provider portals, and direct outreach by fax, phone, and email, taking on work that would otherwise fall to paralegals juggling dozens of open requests.

Streamlining Medical Record Requests: The Role of Professional Services

Why Law Firms Partner with Retrieval Specialists

Personal injury attorneys know medical records shape case strategy. Complete, organized records support case assessment and preparation. But retrieval work eats into paralegal hours that could go toward case development.

Datavant offers services for healthcare organizations and legal and insurance customers. Codes Health focuses its offering on plaintiff-law-firm retrieval and review workflows.

Customer feedback is one more data point. As of November 3, 2026, Datavant's BBB customer review page showed 1 out of 5 stars from 32 reviews. These are customer reviews, not verified findings, and they're separate from BBB's letter rating.

The Value of Faster Medical Record Acquisition

Timing matters in personal injury litigation. Statute of limitations deadlines, settlement negotiations, and trial prep all depend on having the medical documentation you need.

Codes Health reports that it typically delivers records in a couple of weeks, using persistent provider follow-up across calls, faxes, emails, and portals. Timing still depends on the providers involved. The platform checks delivered records against the original request before closing a retrieval, working to identify and pursue missing materials instead of accepting whatever arrives first.

Codes Health's position is that services promising same-day retrieval often return only the records available right away and rely on client involvement to fill the gaps, which it says can contribute to client churn. Codes Health says it works toward complete records in weeks, not months.

Understanding Release of Information for Comprehensive Record Access

Key Elements of a Valid Authorization Form

Under 45 CFR 164.508, a HIPAA authorization generally needs:

• A meaningful description of the information to be disclosed
• Identification of the disclosing party and the recipient
• The purpose of the disclosure
• An expiration date or qualifying expiration event
• A dated signature, plus a description of the representative's authority where a personal representative signs
• Required notices about revocation, conditioning of services, and potential redisclosure

Patient identifiers like full name and date of birth are often needed operationally, too.

Incomplete authorizations are a leading preventable cause of denied requests. Incomplete or invalid authorizations can cause rejection, correction, and retrieval delays. Codes Health uses AI-assisted validation to catch misspellings, missing dates of service, and signature issues before submission, helping prevent avoidable rejections.

HIPAA Considerations in Medical Record Sharing

An authorization is one basis for disclosure. Whether it's required depends on the purpose, request mechanism, record type, and applicable law. HIPAA permits many treatment and payment disclosures without authorization, and certain court orders and other qualifying legal processes can also permit disclosure. Providers also interpret requirements differently, and some require their own forms.

Codes Health's published materials describe a HIPAA-compliant e-signature workflow for intake documents, including releases of information and authorization forms. Confirm current availability and inclusion in your agreement.

AI and Automation in Medical Record Retrieval

How AI Supports Case Chronologies and Data Extraction

General AI platforms like ChatGPT aren't designed for litigation-grade medical record review. Codes Health advertises medical-record organization and AI-assisted insights with human verification. Attorneys and relevant experts should check findings against source records.

Codes Health was founded by graduates of MIT and Yale, and its engineering team continuously builds out additional workflows and products, so the platform keeps evolving to meet the changing demands of modern legal practices.

The platform organizes, compiles, and summarizes case records chronologically. Patient encounters and bills can be grouped by visit, helping attorneys work through large record sets without manually sorting thousands of pages. It extracts structured information including:

• Diagnoses and treatment histories
• Provider names and treatment dates
• Documented future medical needs
• Pre-existing conditions
• Missed appointments and care gaps

These findings are flagged for attorney and expert review, cutting down on hours of manual compilation.

Reducing Delays with AI-Assisted Request Validation

Before a request goes to a provider, AI validation can catch issues that might cause rejection:

• Authorization forms missing signatures
• Incorrect provider information or outdated addresses
• Missing date ranges that leave gaps in requested records
• Unchecked boxes for sensitive record categories

Catching these early keeps more requests moving instead of bouncing back for corrections.

The Impact of Integrated Workflows on Medical Record Retrieval Costs and Time

Managing Records Directly Within Your Case Management System

Switching between platforms costs attorney and paralegal time. When retrieval means logging into a separate vendor portal, downloading files, and re-uploading them to case management software, the extra steps add up across every case.

The Filevine partnership, announced July 13, 2026, reduces duplicate work and keeps retrieval activity associated with the case. Filevine users can submit medical record requests directly from case files, track status in real time, communicate with the Codes Health team, and receive completed records inside the same project.

Filevine CEO Ryan Anderson described medical record retrieval as a long-standing customer pain point that Filevine users had asked the company to solve for years.

Reducing Overhead Through Integrated Legal Tech

For firms already on Filevine, the integration helps with several hidden costs:

• Less duplicate data entry, since requests start from the case file
• Fewer manual status checks, since updates appear in the case file
• Simpler file management, since records arrive in the right project
• Less scattered communication, since team discussions stay with the case

Codes Health also describes custom integrations with CRM platforms and other medical software for high-volume customers. Confirm current availability and scope.

Checking for Completeness: Beyond Simple Document Retrieval

Why Complete Medical Records Matter for Legal Decisions

Incomplete records create litigation risk. Missing treatment dates leave gaps opposing counsel can exploit. Absent billing documentation weakens damages calculations. Overlooked provider visits may hold information that never surfaces during case preparation.

Codes Health includes a Missing Record Review that compares returned materials against the original request and available patient history. When records appear incomplete, the team works with the facility to resolve identified gaps before returning the record set.

The Role of Persistent Follow-Up

Getting complete records often takes multiple contacts with the same provider. First responses may include only certain document types, or the wrong date range. Persistent follow-up through calls, faxes, and portal messages helps keep requests from slipping through the cracks.

Codes Health combines technology and operational follow-up to identify and pursue missing materials, with visibility into completed outreach and next required actions. Firms can see what's been done without requesting separate vendor updates or chasing providers themselves.

Who Uses Professional Medical Record Retrieval Services?

Legal Specialties Requiring Record Access

Medical records shape case strategy across many practice areas:

• Personal injury cases where treatment documentation supports damages
• Mass torts needing consistent retrieval workflows across large plaintiff portfolios
• Medical malpractice matters needing detailed chronologies for expert review
• Workers' compensation claims requiring treatment histories
• Disability law cases that depend on documented functional limitations
• Wrongful death litigation requiring complete medical histories

Codes Health serves medical-document-intensive legal practices across all of these specialties.

Features That Matter for Plaintiff Firms

Key features to look for in a plaintiff-side retrieval partner include:

• Potential care concerns flagged for attorney and expert review
• Future medical expense extraction to support damages analysis
• Pre-existing condition flagging for earlier case strategy
• Flat fee pricing with written confirmation of scope, billing unit, provider charges, and exclusions

Bottom Line

Ciox/Datavant pricing depends on the provider, request type, and record format, and no single published rate card was verified. Most budget surprises in medical record retrieval come from preventable gaps: an authorization missing a required element, a record set missing a facility or billing file, or a quote that doesn't separate provider charges from service fees.

Get itemized quotes, know which fee rules apply to each request, and confirm how completeness is checked before records are delivered. Codes Health pairs a flat fee model with AI validation before submission, persistent multichannel follow-up, completeness review, and a Filevine-embedded workflow, with a reported typical timeframe of a couple of weeks. Request written confirmation of the flat fee's scope, billing unit, provider charges, and exclusions.

Frequently Asked Questions

What factors influence the cost of medical record retrieval?

Costs depend on the number of providers, page counts, record format, urgency, provider location, whether certification is needed, and which fee rules apply to the request. Per-page charges are hard to predict because page counts aren't known until records arrive. With any flat fee model, request written confirmation of the scope, billing unit, provider charges, and exclusions.

How do professional medical record retrieval services save time?

Professional services take on contacting multiple providers, tracking request status, following up on incomplete responses, and reviewing completeness. For a case involving several providers, that can mean dozens of phone calls, faxes, and portal logins that paralegals would otherwise handle.

Is AI used in medical record retrieval, and how does it help?

Yes. Before submission, AI validation can catch authorization errors that might cause rejections. After retrieval, AI can organize records chronologically, extract diagnoses and treatment dates, and flag potential issues like care concerns or pre-existing conditions for attorney and expert review. General AI tools like ChatGPT aren't designed for litigation-grade medical record review, and any AI findings should be checked against source records.

What is the average turnaround time for medical record requests through a service?

Turnaround varies by provider and service. Some services advertise fast delivery for digitally available records but may take longer for paper records or hard-to-reach providers. Codes Health reports a typical timeframe of a couple of weeks, with a completeness review before records are returned, though timing depends on the providers involved.

Can clients view their medical records online for free?

Many health systems offer patient portals where individuals can view and download records. Portal downloads may not contain every record or billing document needed, so counsel should assess completeness and any authentication requirements for the intended use. Retrieval services can help gather records across multiple providers.

What is a Release of Information form and when do I need it?

A Release of Information form, or HIPAA authorization, permits a provider to disclose protected health information to a named recipient. An authorization is one basis for disclosure, and whether it's required depends on the purpose, request mechanism, record type, and applicable law. A valid authorization generally includes a description of the information, the disclosing party and recipient, the purpose, an expiration date or qualifying event, a dated signature, and required notices. Incomplete or invalid forms can cause rejection, correction, and delays.