List of Forms and Contact Details Required to Request Medical Records in Boston (PI Lawyers' Checklist)
Boston personal injury attorneys face a consistent bottleneck: medical records requests that should take 30 days under Massachusetts law often stretch much longer through manual processes. This checklist provides the specific authorization forms, hospital system contacts, fee guidance, and strategic procedures you need to retrieve complete medical records from Boston-area facilities, plus how platforms like Codes Health cut turnaround from months to weeks with AI-powered retrieval and automated provider follow-ups.
Key Takeaways
Under HIPAA and Massachusetts guidance, providers generally have 30 days to provide requested records, 60 days if records are not maintained or accessible on-site, and may take one additional 30-day extension with written notice.
Mass General Brigham centralizes network records to one Somerville office, so one request can cover MGH, Brigham and Women's, and other facilities.
Boston Children's Hospital publishes a dedicated attorney line and an approximately 10-business-day processing timeline.
Massachusetts hospital fees are set by state guidelines; an example 200-page record ran about $173.69 under the cited 2024 schedule, so verify current rates before quoting clients.
Codes Health has found that incomplete authorizations are a leading cause of rejected requests: missing signatures, unclear expiration dates, or unchecked sensitive-record boxes can make an authorization defective and delay the response.
Codes Health's AI platform catches authorization errors before submission and delivers organized records in weeks, not months.
Understanding HIPAA Release Forms for Boston PI Cases
Every medical records request requires a properly executed authorization form compliant with both federal HIPAA requirements and Massachusetts-specific privacy laws.
What Is a Massachusetts-Specific HIPAA Release Form?
Massachusetts operates under M.G.L. c. 111, Section 70, alongside HIPAA. Under HIPAA and Massachusetts guidance, providers generally have 30 days to respond to a valid authorization, 60 days if the records are not maintained or accessible on-site, and may take one additional 30-day extension if they provide written notice explaining the delay.
Most Boston hospitals accept a standard HIPAA-compliant authorization, but major systems like Mass General Brigham and Boston Medical Center maintain their own forms that typically expedite processing.
Key Elements of a Valid HIPAA Authorization
Required fields on every authorization:
Patient's full legal name (including maiden name if applicable)
Date of birth (and Social Security Number only if a specific facility form asks for it)
Current address and phone number
Medical record number (if known)
Specific dates of service or treatment period
Provider/facility name
Description of records needed (all records vs. specific types)
Recipient information (law firm name, address, fax)
Patient signature with date
Expiration date or triggering event for the authorization
Sensitive records that may require additional authorization language or separate initials:
HIV/AIDS test results
Substance abuse/alcohol treatment records (42 CFR Part 2 protection)
Mental health/psychiatric treatment
Sexually transmitted diseases
Genetic testing results
Reproductive health information
Review each provider's form carefully, since required checkboxes and initials vary by facility.
Ensuring Proper Patient Signatures for Medical Records
Minor patients: Parent/guardian signature is required unless the patient is emancipated. Boston Children's Hospital requires documentation of legal authority if the signer is not the biological parent.
Deceased patients: The executor or administrator of the estate must authorize. Provide legal documentation of executor status with your request.
Common rejection trigger: Codes Health has found that incomplete authorizations are a leading cause of denied requests. Missing signatures, expired or unclear expiration language, or failure to authorize sensitive categories can make an authorization defective, requiring resubmission and effectively delaying the provider's response. Codes Health uses AI to review requests before submission, flagging misspellings, missing dates of service, and signature issues that would otherwise cause provider rejections.
Complete Boston Hospital Directory: Contact Information and Forms
Mass General Brigham (Centralized for All MGB Facilities)
Mass General Brigham consolidates records processing for network facilities to one centralized office, so one request can cover Massachusetts General Hospital, Brigham and Women's Hospital, Newton-Wellesley Hospital, Salem Hospital, Mass Eye and Ear, McLean Hospital, and Spaulding Rehabilitation.
Contact information:
Address: 121 Inner Belt Road, Room 240, Somerville, MA 02143-4453
Phone: (617) 726-2361
Fax: (617) 726-3661
Hours: Monday to Friday, 8:00 AM to 5:00 PM (no walk-in service; call first)
Authorization form: Mass General Brigham form (English, Spanish, and Portuguese versions available)
Processing time: Up to 30 days standard; up to 60 days if records are not maintained or accessible on-site
Radiology images: Radiology images and films are handled by the radiology department at the facility where care was received. For example, MGH lists 617-726-1798 / fax 617-724-0264, while Brigham and Women's lists 617-732-7180 / fax 617-732-5300.
Attorney notes: If your client received care at multiple MGB facilities, use the general MGB authorization form to consolidate requests. No walk-in service is available, so submit by mail, fax, or online portal.
Boston Medical Center, Main Campus
Boston Medical Center operates multiple campuses with centralized Health Information Management processing.
Contact information:
Address: 850 Harrison Avenue, Yawkey Ambulatory Care Center, Basement, Boston, MA 02118
Phone: (617) 414-4213
Fax: (617) 414-4210
Hours: Monday to Friday, 8:00 AM to 4:30 PM
Authorization form: BMC authorization form
Processing time: Typically 14 to 30 days; up to 30 days for sensitive information
Delivery methods: Mail, hold for pickup (by appointment), fax (healthcare facilities only), secure email, BMC MyChart
Privacy office: privacyofficer@bmc.org or (617) 638-7919
Boston Medical Center, Brighton Campus (formerly St. Elizabeth's Medical Center)
Contact information:
Address: 736 Cambridge Street, Brighton, MA 02135
Main hospital phone: (617) 789-3000
Medical records phone: (617) 789-2870
Medical records fax: (617) 789-3015
ROI status checks: (617) 863-8331
Hours: Monday to Friday, 9:00 AM to 5:00 PM
Radiology department: (617) 789-2762
Submission: For patient and attorney medical-record and itemized billing requests, BMC directs requesters to its online tool or to mail/fax the BMC authorization form to BMC HIM, 850 Harrison Avenue, fax (617) 414-4210. Facility-specific medical-record contact numbers are also listed by BMC Health System for Brighton.
Boston Medical Center, South Campus (Brockton)
Contact information:
Address: 235 North Pearl Street, Brockton, MA 02301
Phone: (508) 427-3180
Fax: (508) 427-2209
Hours: Monday to Friday, 9:00 AM to 5:00 PM
Radiology department: (508) 427-3015
Online request tool: Available through BMC's online request tool (requires photo ID verification)
Boston Children's Hospital
Boston Children's Hospital publishes a dedicated attorney/insurer contact and an approximately 10-business-day processing timeline.
Contact information:
Address: 300 Longwood Avenue, Boston, MA 02115
Mailing address: Attn: Medical Records (BCH3040), 300 Longwood Avenue, Boston, MA 02115
General medical records phone: (617) 355-7546
Attorneys and insurers line: (617) 355-6436
Fax: (617) 730-0327 and (617) 730-0329
Hours: Monday to Friday, 8:00 AM to 4:30 PM
Authorization form: Children's Hospital form
Processing time: Approximately 10 business days after a valid authorization is received
Fees: Boston Children's directs attorneys and insurers to its dedicated attorney/insurer line, (617) 355-6436, for current fee information.
Radiology/imaging: Separate authorization required; fax (617) 730-0538
Online portal: Available through the hospital's third-party request platform
Beth Israel Deaconess Medical Center
Contact information:
Address: 330 Brookline Avenue, Rabb Building B014, Boston, MA 02215
Phone: (617) 667-3710
Fax: (866) 710-0132
Authorization form: Available at the BIDMC website
Recommendation: Call (617) 667-3710 to verify current attorney-specific procedures and fee schedules before submitting requests.
Tufts Medical Center
Contact information:
Address: 800 Washington Street, Boston, MA 02111
Phone: (866) 892-1780
Patient portal: myTuftsMed
Timing: Tufts Medicine says records are usually available within 10 days from receipt, and online requests may be ready in 3 to 5 business days. Third parties, including attorneys and insurers, can upload requests with patient authorization through Tufts Medicine's online process.
South Boston Community Health Center
Contact information:
Address: SBCHC Medical Records Department, 386 West Broadway, South Boston, MA 02127 (the ROI form also references 409 West Broadway, so verify the mailing address before sending time-sensitive requests)
Medical records phone: (617) 464-7543
Medical records fax: (617) 464-7680
Main health center: (617) 269-7500
Hours: Monday to Friday, 8:00 AM to 4:30 PM
Submission: Fax or U.S. mail only; email requests are not accepted for privacy and security reasons.
Massachusetts Fee Guidance for Medical Records
Hospital Fees (Cited 2024 Schedule)
Massachusetts hospital fees are based on state and federal guidelines and may be adjusted, so verify current state-authorized rates before quoting fees to clients. Under the cited 2024 schedule:
Base/search fee: $28.69
Pages 1 to 100: $0.96 per page
Pages 101 and up: $0.49 per page
Example calculation: A 200-page hospital record ran about $28.69 (base) plus $96.00 (pages 1 to 100) plus $49.00 (pages 101 to 200), for roughly $173.69 under that schedule.
Cost-Saving Strategies
Consider electronic delivery: Electronic copies can reduce mailing delays and may reduce costs in some request types, but fees vary by facility, requester, and applicable state and federal rules.
Be specific about date ranges: Avoid "complete records" where possible. Specify exact dates and record types to reduce page counts.
Client portal option: Patients can often request their own records through a patient portal and then share with counsel. Limitation: portal copies may lack the authentication needed for trial admissibility.
Step-by-Step Request Process for Boston PI Lawyers
Step 1: Identify All Treating Facilities
Obtain a comprehensive treatment history from your client:
Emergency transport records (which hospital ER?)
Follow-up care locations (specialists, physical therapy)
Billing statements and insurance EOBs
Pharmacy records (may indicate treating providers)
Step 2: Obtain Proper Authorization
Execute the HIPAA authorization immediately using a facility-specific or standard form
Have the client initial all sensitive-record sections (mental health, substance abuse, HIV)
Verify the signature and date are present
Include a valid photo ID copy with submission
Step 3: Submit Requests Using the Fastest Method
Submission hierarchy, fastest to slowest:
Provider's secure online portal
Patient portal coordinated with the client
Fax (keep the confirmation page)
Certified mail with return receipt
Step 4: Track and Follow Up
Day 7: Call to confirm receipt
Day 15: Written follow-up for an approaching deadline
Day 25: Escalate if no response (approaching the 30-day limit)
Day 30+: Reference M.G.L. c. 111, Section 70, in a formal demand
Step 5: Verify Completeness Upon Receipt
Review received records for:
All requested date ranges covered
All record types included (treatment notes plus billing plus imaging)
Legible and complete pages
The correct patient throughout
Managing multiple providers creates exponential complexity. A typical car accident case might involve 5 to 10 providers; catastrophic injuries could require 20+ sources. Codes Health centralizes this entire workflow: submit all requests through one interface, receive real-time status updates, and get organized chronological records ready for expert review without manually tracking dozens of provider relationships.
Codes Health's position is that some competitors advertising same-day retrieval often do not obtain complete records and typically require client involvement, which contributes to churn. Codes Health instead focuses on complete, comprehensive records in weeks, not months, without burdening clients.
Codes Health's MIT-educated engineering team keeps building out new workflows and products, so the platform constantly evolves and grows more comprehensive to meet the changing demands of law firms handling PI, mass tort, malpractice, disability, insurance, workers' compensation, and wrongful death matters. General-purpose AI tools such as ChatGPT can produce incorrect or misleading outputs and should not be treated as a sole source of truth for medical-record analysis; Codes Health's platform is purpose-built for high-precision legal medical-record review, with AI insights verified by humans. For high-volume customers, Codes Health can build custom integrations with CRM platforms and other medical software, creating seamless workflows tailored to specific practice needs.
Common Rejection Reasons and Solutions
Incomplete authorization: Missing signature, date, or unchecked sensitive-record boxes. Solution: complete every field, initial all sensitive sections, and verify the signature and date.
Missing or inadequate photo ID: Blurry, expired, or absent ID. Solution: include a clear copy of a current government ID matching the authorization form address.
Insufficient patient information: Common names without adequate identifiers. Solution: include full legal name plus aliases, DOB, dates of service, and account numbers.
Wrong department: Sent to billing instead of medical records. Solution: address to "Health Information Management" or "Medical Records Department," and verify the contact first.
Expired authorization: Missing or past expiration date. Solution: include a specific expiration date or triggering event (typically 6 to 12 months out).
Frequently Asked Questions
What is the average time to receive medical records in Boston for a personal injury claim?
Under HIPAA and Massachusetts guidance, providers generally have 30 days to respond to a valid authorization, 60 days if records are not maintained or accessible on-site, and may take one additional 30-day extension with written notice. Codes Health positions manual retrieval as a process that can stretch to 60 to 90 days, especially when provider delays and authorization defects compound. Boston Children's Hospital publishes faster processing at approximately 10 business days.
Can a personal injury lawyer in Boston request medical records without a signed HIPAA authorization?
No. Federal HIPAA regulations and Massachusetts privacy laws require written patient authorization for any release of protected health information to attorneys. The narrow exceptions involve subpoenas with proper court authorization or specific statutory carve-outs.
How can I track the status of my medical record requests from Boston hospitals?
Most major systems offer patient portal tracking (Patient Gateway for MGB, MyChart for BMC). For attorney requests, call the facility's medical records department directly. Codes Health provides real-time status updates for every request through one centralized dashboard, so you do not have to track each provider separately.
What are the most common reasons for delays or rejections when requesting medical records?
Common rejection reasons include incomplete authorizations (missing signatures or unchecked sensitive-record boxes), missing or inadequate photo ID, insufficient patient identifiers, requests sent to the wrong department, and expired authorizations. Each defective authorization generally has to be corrected and resubmitted, which delays the response. Codes Health's AI review catches these errors before submission.
How do medical record retrieval services ensure HIPAA compliance?
Reputable services maintain HIPAA-compliant platforms with encrypted data transmission, secure document storage, and proper authorization verification. Codes Health states that its platform combines AI processing, human verification, HIE integrations, and TEFCA network access, with complete audit trails and compliance documentation available on request.
