List of Forms and Contact Details Required to Request Medical Records From CVS MinuteClinic
Requesting medical records from CVS MinuteClinic shouldn't require weeks of phone calls, rejected authorizations, and manual follow-ups. This guide provides the current authorization forms, online request options, phone numbers, and mailing address that law firms may need to request MinuteClinic records efficiently.
For law firms handling volume requests across multiple providers, platforms like Codes Health streamline retrieval by validating authorizations before submission and managing provider follow-up, with an average turnaround measured in a couple of weeks. Codes Health’s current website reports a one-to-two-week average turnaround.
Key Takeaways
CVS MinuteClinic provides a current release form for PHI disclosures, revised December 2025.
CVS routes patients, healthcare providers, and other requestors through separate request pathways hosted by Datavant.
Direct contact information listed on the current authorization form includes fax 401-652-9093, email MCRecords@CVSHealth.com, and MinuteClinic, One CVS Drive, Woonsocket, RI 02895.
The current authorization expires six months after signature unless a different expiration date is entered.
The current CVS form requires at least one selection in its sensitive-records section.
Codes Health validates authorizations before submission and works to identify issues that can cause provider rejection.
Understanding Your Rights: How to View and Request Your CVS MinuteClinic Medical Records Online
Under HIPAA, individuals generally have a legal right to inspect and obtain copies of protected health information in a designated record set, subject to limited exceptions.
CVS also offers a Health Dashboard that can provide access to records from up to five years of in-person and Virtual Care MinuteClinic services, including downloadable information.
MinuteClinic Patient Portal Access
The MinuteClinic resources page directs medical-record requestors to secure request pathways hosted by CVS’s release-of-information partner, Datavant. CVS currently provides options for:
Patients or personal representatives, including parents of minor children
Providers requesting records for continuity of care
All other requests, including third parties and other providers
CVS states that Datavant is not owned or operated by CVS Health, MinuteClinic, or its managed entities and that use of the third-party site is subject to Datavant’s own privacy policy and terms.
For healthcare providers requesting records for treatment purposes, HIPAA can permit disclosures without an individual authorization when the disclosure meets the applicable treatment provisions.
Retrieving Digital Medical Records
Patients may request electronic access to PHI maintained electronically. The HIPAA Notice explains MinuteClinic patients’ access rights, while federal HIPAA guidance generally requires covered entities to provide requested information in the requested electronic form or format when it is readily producible that way.
Electronic submission can avoid postal transit time, but CVS does not publish a guaranteed one-to-two-business-day fulfillment timeframe for MinuteClinic record requests.
The Essential HIPAA Release Form: Your Key to Accessing MinuteClinic Records
For attorney and other third-party disclosure requests, appropriate patient authorization or another valid legal basis is generally required. Patient access requests and certain treatment disclosures may proceed under different HIPAA provisions, so not every medical record disclosure legally requires the same authorization process.
What is a HIPAA Release Form?
A HIPAA authorization allows specified protected health information to be disclosed to a designated recipient for an authorized purpose.
MinuteClinic provides its own current release form for PHI disclosures.
Filling Out Your HIPAA Authorization for MinuteClinic
The current MinuteClinic form, revised December 2025, requests:
Patient identification:
Patient name
Street address
City, state, and ZIP code
Date of birth
Records specification:
Complete medical history
Itemized billing
Lab reports
Immunization history
Other requested information
All dates of service or specific dates
Sensitive records:
The form states that the requester must select at least one option covering:
Sexually transmitted disease/infection lab reports
Behavioral health
Exclusion of sensitive records
Recipient information:
Person or company name
Mailing address or email address
Authorization requirements:
Patient or personal representative signature
Signature date
A different expiration date, if desired
Documentation establishing authority when a personal representative signs
Unless another expiration date is entered, the authorization expires six months after signature.
Ensuring HIPAA Compliance for Record Requests
Because the current MinuteClinic form says at least one sensitive-records option must be selected, leaving that portion incomplete creates an obvious authorization defect.
Codes Health's AI reviews requests before submission and can flag issues such as misspellings, missing dates of service, and signature problems. Codes Health identifies incomplete authorizations as a major source of preventable provider rejection and uses pre-submission review to reduce that risk.
Printable Medical Records Release Forms: Free Options for Your CVS MinuteClinic Request
Where to Find MinuteClinic Forms
Current English form: Download PDF
Revised December 2025
Six-month default expiration
Spanish version: Download PDF
CVS’s current resources page lists both English and Spanish PHI authorization forms.
Legacy form: Download PDF
Because CVS now publishes a December 2025 authorization form through its current MinuteClinic resources page, use the current form rather than relying on an older legacy document unless MinuteClinic specifically instructs otherwise.
Step-by-Step Guide to Filling Out the Printable Form
Complete patient information: Enter the identifying information requested on the current CVS form.
Select record types: Mark the categories applicable to the request.
Address sensitive records: Select at least one of the sensitive-record options.
Specify the date range: Choose all dates of service or enter specific dates.
Enter recipient details: Provide the person or company and mailing address or email address.
State the purpose: Provide a specific purpose when appropriate.
Sign and date: The patient or authorized personal representative must sign and date the form.
Check expiration: Enter a different expiration date if the default six-month period is not appropriate.
The current form states that a photocopy or facsimile of a signed authorization is as valid as the original.
Contacting CVS MinuteClinic: Phone Numbers, Addresses, and Online Options
Direct Contact Information for MinuteClinic Records
Email submission: MCRecords@CVSHealth.com
This email appears on MinuteClinic’s current PHI authorization form.
Fax submission: 401-652-9093
This is the fax number printed on the current MinuteClinic authorization form.
Mailing address:
MinuteClinic
One CVS Drive
Woonsocket, RI 02895
This is also the address printed on the current form.
Privacy Office phone: (833) 571-1784 (TTY: 711)
The current HIPAA Notice lists this number for the CVS Health Privacy Office, along with PrivacyOffice@CVSHealth.com and One CVS Dr., Woonsocket, RI 02895.
Patient Support: 1-866-389-ASAP (2727)
CVS lists this number for patients with questions about a recent MinuteClinic visit. It should not be described as a dedicated medical-record request-status line unless CVS specifically directs the requester to use it for that purpose.
Using Online Requests
Patients and Personal Representatives:
Access: MinuteClinic Resources
Request type: Patients or personal representatives
Healthcare Providers:
Access: MinuteClinic Resources
Request type: Providers requesting continuity-of-care records
Attorneys and Third Parties:
Access: MinuteClinic Resources
Request type: All other requests, including third parties
CVS currently routes each of these request categories through its release-of-information partner, Datavant.
Datavant support: (800) 367-1500
CVS publishes this number for Datavant questions.
For law firms managing high-volume requests across multiple providers, Codes Health reduces the complexity of tracking provider-specific portals and submission methods. The platform validates requests before submission, manages retrieval workflows, and provides status visibility.
For high-volume customers, Codes Health can also build custom integrations with CRM platforms and other medical software systems.
Ensuring Accuracy: What to Include on Your Medical Records Release Form for MinuteClinic
Key Information for a Valid Release
The current MinuteClinic authorization form calls for:
Patient identifiers:
Patient name
Street address
City, state, and ZIP
Date of birth
Record parameters:
Requested record types
All dates of service or specific dates
At least one sensitive-record selection
Recipient specifications:
Person or company name
Mailing address or email address
Purpose, when applicable
The form does not identify a Social Security number as a required field.
Common Mistakes to Avoid
Important defects can include:
Missing signature: The patient or authorized personal representative must sign.
Blank sensitive section: CVS states that at least one option must be selected.
Expired authorization: The current form defaults to six months unless another date is entered.
Incorrect patient information: Errors can interfere with matching the request to the correct patient.
Missing authority documents: A representative signing for the patient must explain their authority and provide supporting paperwork such as a power of attorney or guardianship document.
Codes Health's AI reviews requests before submission and flags preventable issues such as misspellings, missing dates of service, and signature problems.
Incomplete authorizations are a major source of avoidable denials and resubmissions. In jurisdictions with statutory response periods, a defective request can effectively send the firm back to the beginning of the process once a corrected request is required. Texas, for example, generally requires physicians covered by its medical-record statute to provide requested information no later than the 15th business day after receiving the required written consent or request.
Understanding the Process: From Submission to Receiving Your MinuteClinic Records
What Happens After You Submit Your Request?
Although exact internal steps can vary, a records workflow generally involves:
Receipt of the request
Review of the request or authorization
Matching the request to the patient
Identifying responsive records
Preparing responsive records for release
Delivering the records through the applicable channel
CVS does not publish a detailed service-level timetable for each of these internal steps on its current MinuteClinic resources page.
Typical Legal Timeframes for Record Retrieval
Under the HIPAA right of access, covered entities generally must act on an individual’s access request no later than 30 calendar days after receiving it. One additional period of up to 30 calendar days is permitted when the covered entity provides a written explanation of the delay and expected completion date within the initial period. These are outer federal limits, not MinuteClinic’s promised normal turnaround.
State laws can impose different or faster requirements. For example, the Texas Medical Board explains that physicians subject to Texas’s applicable records law generally must furnish requested records within 15 business days after receipt of the required request or consent.
Electronic submission can avoid postal delivery time, but CVS does not currently publish guaranteed one-to-two-day portal processing, three-to-five-day fax or email processing, or a specific acknowledgment schedule for these channels.
Checking the Status of Your MinuteClinic Records
For requests initiated through CVS’s online record-request pathways, use the tools and contact instructions presented during the Datavant request process.
For questions about the MinuteClinic authorization process, the current form lists:
Email: MCRecords@CVSHealth.com
Fax: 401-652-9093
Mail: MinuteClinic, One CVS Drive, Woonsocket, RI 02895
For privacy-rights questions, contact the CVS Health Privacy Office using the information in the HIPAA Notice.
Law firms handling dozens of simultaneous requests across multiple providers face a significant tracking burden. Codes Health provides centralized status visibility and provider follow-up so legal teams do not have to manage each request manually.
Special Considerations: Requesting Records for Family Members from CVS MinuteClinic
Authorization for Minors' Medical Records
CVS’s resources page specifically includes patients or personal representatives, including parents of minor children, among its online records-request categories.
The minor treatment form is separate from the PHI release form. Attorneys seeking disclosure of existing medical records should use the applicable records-request process rather than treating an authorization-to-treat form as a medical-record release.
Requesting Records as a Personal Representative
HIPAA allows individuals to exercise certain rights through personal representatives as permitted or required by law. CVS notes that a personal representative may be required to produce evidence showing authority to act for the patient.
The MinuteClinic authorization form likewise tells a person signing for the patient to explain their authority and provide supporting paperwork, with power of attorney and guardianship documents given as examples.
For deceased patients or other legally complex representation situations, the required documentation can depend on applicable state law and the representative’s legal authority. Law firms should avoid assuming that one document set applies nationwide.
Beyond the Basics: Legal Context for Your MinuteClinic Medical Records
Why Medical Records Matter in Legal Cases
For personal injury attorneys, MinuteClinic records may document:
Initial injury presentation: Treatment close in time to an incident may help establish the medical timeline.
Ongoing symptoms: Follow-up visits can document continuing complaints.
Diagnostic findings: Records may contain lab results, vital signs, or clinical observations.
Treatment recommendations: Documentation may include referrals, prescriptions, or restrictions.
Billing records: Billing information may be relevant to claimed economic damages.
Integrating MinuteClinic Records into a Broader Medical History
A personal injury case might also involve:
Emergency department records
Primary care visits
Specialist consultations
Physical therapy
Imaging reports
Pharmacy records
MinuteClinic visits
Each custodian may have its own authorization requirements and request procedures, making multi-provider retrieval difficult to manage manually.
How Codes Health Streamlines Multi-Provider Retrieval
Codes Health combines medical-record retrieval with AI-assisted record review for plaintiff law firms. Its platform:
Validates requests before submission
Manages retrieval across multiple channels
Tracks requests centrally
Reviews completeness before delivery
Organizes records for case review
Codes Health is purpose-built for medical-record workflows. General-purpose AI tools, including ChatGPT and similar systems, can help summarize supplied material but are not designed to provide the same specialized, litigation-focused medical-record retrieval and review workflow. Codes Health combines purpose-built AI processing with human verification and completeness review.
For law firms using Filevine, Codes Health integrates with the case-management workflow. Codes Health’s own current materials say that Filevine users can request, track, communicate about, and receive records within the Filevine environment.
For high-volume customers using other systems, Codes Health can develop custom integrations with CRM platforms and other medical software. Its MIT-educated engineering team continues to build additional workflows and products as the platform expands.
Some speed-focused retrieval services promote same-day access by relying heavily on immediately connected electronic sources. Those fast results may not always cover every requested provider, date range, or record type. Codes Health emphasizes completeness and warns that incomplete expedited retrieval can leave law firms or clients responsible for chasing the missing material, creating additional friction and potential client churn.
Quick Reference: CVS MinuteClinic Contact Directory
Authorization Forms
Current English PHI form:
Default expiration: Six months
Current Spanish form:
Listed on CVS’s current MinuteClinic resources page.
Legacy disclosure form:
Prefer CVS’s current December 2025 authorization unless specifically instructed otherwise.
Minor treatment form:
Not a medical-record release
Online Requests
Patients:
Access: MinuteClinic Resources
Healthcare Providers:
Access: MinuteClinic Resources
Third Parties:
Access: MinuteClinic Resources
CVS currently routes these secure records requests through Datavant.
Direct Contact Methods
Records Email:
MCRecords@CVSHealth.com
Records Fax:
401-652-9093
Privacy Phone:
(833) 571-1784
TTY: 711
Patient Support:
1-866-389-ASAP (2727)
CVS describes this number as support for questions about a recent MinuteClinic visit.
Privacy Email:
PrivacyOffice@CVSHealth.com
Mail:
MinuteClinic
One CVS Drive
Woonsocket, RI 02895
Datavant Support:
(800) 367-1500
Stop Chasing Records Manually
Managing medical-record requests from MinuteClinic and other providers can consume substantial staff time, particularly when a case involves multiple custodians.
Codes Health handles the retrieval workflow for plaintiff law firms, including authorization validation, request submission, provider follow-up, completeness review, and organized record delivery. Its current website reports an average turnaround of one to two weeks.
Schedule a demonstration to see how Codes Health can streamline medical-record retrieval and review for your legal team.
Frequently Asked Questions
How long does it typically take to get medical records from CVS MinuteClinic?
CVS does not publish a guaranteed normal processing time for each MinuteClinic records-request channel on its current resources page. For an individual exercising the HIPAA right of access, federal law generally requires a covered entity to act within 30 calendar days after receiving the request. A qualifying extension of up to another 30 days may be available if the covered entity provides the required written notice. These are maximum federal timeframes, not an estimate of how long every MinuteClinic request will take.
Can I request my MinuteClinic medical records for free?
HIPAA permits covered entities to charge individuals a reasonable, cost-based fee for copies of PHI, subject to specific limitations. Those permissible costs can include certain copying, supply, and postage costs. State law may provide additional protections. The HIPAA rule providing one free accounting of disclosures during a 12-month period concerns a different privacy right and should not be confused with medical-record copy fees.
What information do I need on a MinuteClinic release form?
The current MinuteClinic form requests patient name, address and date of birth; requested record types; dates of service; the required sensitive-record selection; recipient information; purpose where applicable; signature and date; and supporting authority documentation when a representative signs.
Is there a difference between a HIPAA authorization and a medical records release?
The terminology is often used loosely, but the legal mechanism matters. MinuteClinic’s release form is an authorization for the release of PHI. However, HIPAA does not require the same authorization mechanism for every disclosure. For example, qualifying treatment disclosures can occur without individual authorization, and an individual exercising the HIPAA right of access has separate rights under 45 CFR 164.524.
Can a family member request my MinuteClinic medical records?
Possibly, depending on the family member’s legal authority and the circumstances. CVS permits patients to exercise rights through personal representatives as allowed by applicable law and may require evidence establishing that authority. Marriage or family relationship alone should not automatically be treated as sufficient authority for access to an adult patient’s PHI.
