List of Forms and Contact Details Required to Request Medical Records From Duke Health in 2026
Requesting Duke Health records for a personal injury case or disability claim can feel overwhelming. Duke publishes centralized instructions for all Duke Health Enterprise facilities, including Duke University Hospital, Duke Regional Hospital, Duke Raleigh Hospital, and Duke Health Lake Norman Hospital. The good news is that one authorization form covers every facility in the system. The challenge is knowing which boxes to check, where to send it, and how to avoid common mistakes that slow processing. For law firms handling high-volume retrieval, Codes Health offers AI-powered validation that catches authorization errors before submission and manages persistent follow-up until records arrive.
Key Takeaways
Duke Health uses one authorization form (M3132, revised March 2025) for all Duke Health Enterprise facilities, so you don't need separate forms for each hospital or clinic
The centralized Release of Information department can be reached at 919-684-1700, fax 919-620-5165, or email ROI-Requestor3@dm.duke.edu
Duke's published instructions describe efforts to fulfill requests within 30 days, so confirm the expected completion date with Release of Information
Unless you specify treatment dates or select "All Treatment Dates," the form defaults to the last two years of active treatment
"Entire Record" excludes billing and imaging, which must be selected separately
Part F provides checkboxes for Mental and Behavioral Health and Genetic Testing, and other specially protected records may have additional consent requirements
Codes Health validates authorizations before submission and manages follow-up across calls, faxes, emails, and portals, typically returning complete records in a couple of weeks for a flat fee
Understanding Duke Health's Medical Records Request Process
Duke Health publishes centralized instructions and contact details for medical record requests. Rather than contacting individual hospitals or clinics separately, requests go through a single Release of Information department that serves the entire Duke Health Enterprise.
Who Can Request Medical Records from Duke Health?
Patients have the right to access their own medical records under HIPAA. Beyond patients themselves, the following can request records with proper documentation:
Legal representatives with Power of Attorney documentation
Parents or legal guardians for minor children
Executors or administrators of a deceased patient's estate with proof of authority
Attorneys with valid HIPAA-compliant authorization signed by the patient
Insurance companies with patient authorization
Other healthcare providers for continuity of care
Routine authorization-based attorney requests require a valid authorization. Other lawful routes may apply, including qualifying court orders, subpoenas, and other HIPAA-compliant legal requests. These processes must meet the applicable legal requirements, so a subpoena isn't unrestricted permission to disclose.
Overview of the Request Process
Most requests follow this sequence:
Submit the completed authorization form with all required signatures
Duke Health validates the request and confirms patient identity
Records are compiled from the relevant facilities
Delivery occurs via the method selected on the form
Confirm any applicable fee and payment instructions with Duke before processing
Essential Forms for Requesting Your Duke Health Medical Records
Downloading the Correct Duke Health Form
The primary form is the Duke Health Enterprise Authorization for Release of Protected Health Information, form number M3132. It's available in English and Spanish directly from the Duke Health website.
Always download the current version from Duke's website. Duke's separate instruction sheet doesn't always match the form's layout, so follow the section labels on the form itself.
Completing the Authorization for Release of Information
The current form contains several sections that need to be completed accurately:
Part A: Patient Information
Legal patient name (required)
Date of birth
Medical record number if available
Last 4 digits of Social Security Number
Phone number and email address
Full mailing address
Part B: Recipient Information
Name of person or entity receiving records
Contact information including phone, email, and fax
Complete mailing address
Part C: Records or Information Requested. This section covers treatment location, treatment dates, and record types. Select specific facilities or check "All Duke Health Enterprise Entities" for broader retrieval. For legal cases, the enterprise-wide option helps avoid missing records from satellite clinics. Specify treatment dates or select "All Treatment Dates"; otherwise, the form defaults to the last two years of active treatment. Record options include Abstract/Summary, Entire Record, or individual report types such as discharge summaries, laboratory reports, radiology reports, billing records, and imaging.
Part D: Purpose of Request. Options include Personal, Legal, Insurance, Continuation of Care, and Other.
Part E: Format and Delivery Options include electronic delivery (including a portal option for attorneys and insurers, encrypted email, or fax) and mail delivery on CD or paper.
Part F: Review and Approval. Part F provides checkboxes for Mental and Behavioral Health and Genetic Testing. Confirm any additional consent requirements for other specially protected records with Duke. This part also holds the signature, date, and the requester's relationship to the patient if someone else signs. Sign and date the authorization, and confirm Duke's acceptance requirements for the electronic-signature method you intend to use.
Incomplete authorizations are a leading preventable cause of denied requests. Missing patient signatures, unclear expiration dates, or unchecked boxes for sensitive records can delay or invalidate a request. Codes Health's AI review catches these errors before submission, automatically flagging misspellings, missing dates of service, and signature issues that would otherwise cause provider rejections.
How to Request Medical Records from Duke Health Online or Through MyChart
Accessing Your Records via MyChart
My Duke Health (previously Duke MyChart) lets patients view and download certain records directly without submitting a formal request. Records available through the portal include:
After-visit summaries and discharge summaries
Test and imaging results; Duke Radiology also describes access to radiologic imaging studies through My Duke Health
Medication lists and allergies
Immunization records
Clinic visit reports and consultation reports
Laboratory and pathology reports
Emergency department notes
The portal is handy for routine health information. Copies delivered through a medical records request remain available through their My Duke Health download link for 90 days. Save those files before the link expires; this doesn't mean all information in the portal disappears after 90 days.
Online Submission Methods for Third Parties
Third parties, including attorneys and insurance companies, can't use the patient portal to view a patient's records. Instead, third-party requests are submitted using the authorization form through one of these methods:
Email: ROI-Requestor3@dm.duke.edu
Fax: 919-620-5165
Mail: Release of Information, Duke University Health System, Health Information Management, PO Box 3016, Durham, NC 27710
Follow Duke's submission instructions. Before sending a password-protected attachment, confirm how Release of Information will access it.
Contact Information for Duke Health Medical Records Department
Direct Phone Lines for Patient Records
Centralized Release of Information Department:
Phone: 919-684-1700
Hours: Monday through Friday, 8:00 AM to 4:30 PM
Fax: 919-620-5165
Email: ROI-Requestor3@dm.duke.edu
My Duke Health Portal Support:
Phone: 919-620-4555
Hours: 8:00 AM to 5:00 PM ET Monday, Tuesday, Wednesday, Friday; 8:00 AM to 4:00 PM ET Thursday
Radiology Image Library (for imaging studies):
Phone: 919-684-7860
Fax: 919-684-7139
Email: DUHSImageLibrary@dm.duke.edu
Address: Hock Plaza 1, Suite 402, Room 4041, 2424 Erwin Road, Durham, NC 27710
Faxing Medical Record Requests to Duke Health
When faxing requests:
Use the centralized fax number 919-620-5165 for all facilities
Include a cover sheet with patient name and date of birth
Confirm successful transmission with a phone call to 919-684-1700
Keep your fax confirmation receipt for documentation
Duke Health limits faxing records back to requesters. Fax transmission of records is typically reserved for urgent patient care situations involving hospitals, emergency departments, and physician offices. For legal requests, other delivery options are usually the better fit.
Codes Health manages provider outreach across calls, faxes, emails, portals, and other available channels until requested materials arrive. This provider follow-up can reduce the status-checking work required of law firm staff.
Understanding HIPAA and Your Rights When Requesting Duke Health Records
Your Right to Access Medical Records
For requests governed by HIPAA's patient right of access, Duke generally must act within 30 calendar days after receipt. One extension of up to 30 additional calendar days is allowed if written notice explaining the delay and expected completion date is provided within the initial period. Keep in mind that an attorney's authorization-based request isn't automatically identical to a patient right-of-access request.
Patients also have the right to:
Receive an accounting of certain disclosures made in the 6 years before the request
Request amendments to incorrect information
Request restrictions on certain uses and disclosures; Duke generally need not agree, except where HIPAA requires a restriction, such as qualifying disclosures to a health plan for services paid in full out of pocket
Receive confidential communications through alternative means
Authorizing Others to Receive Your PHI
When someone other than the patient needs records, proper authorization is essential. The form notes that non-patients who aren't a parent of a minor must attach documentation of their authority to act for the patient. Common examples include:
Power of Attorney holders must attach documentation
Legal guardians must provide court orders
Executors must include death certificates and letters of administration
Parents requesting minor records must confirm custodial status
The authorization expires one year from the signature date unless a different date or event is specified. Patients can revoke authorization at any time by submitting written notice.
Steps to Request Old or Archived Medical Records from Duke Health
Process for Records from Previous Duke Health Affiliations
Duke Health maintains records according to North Carolina retention requirements. When requesting older records:
Specify the date range as precisely as possible
Check "All Treatment Dates" if the exact dates are unknown, since the form otherwise defaults to the last two years
Ask about archive retrieval, but don't assume archived records automatically qualify for additional time beyond the applicable deadline
Confirm which facility treated the patient during the relevant period
For patients who received care before electronic health records were implemented, paper records may need to be retrieved from off-site storage.
Anticipating Longer Retrieval Times for Older Records
Duke's published instructions describe efforts to fulfill requests within 30 days. Confirm the expected completion date with Release of Information. Factors that affect archived requests include:
Storage location (on-site versus off-site)
Record format (electronic versus paper)
Volume of records requested
Current department workload
For long medical histories, Codes Health uses provider and facility data to help identify where records may exist, which helps when clients can't recall every treatment location.
Submitting Medical Record Requests to Duke Health for Legal Purposes
Requirements for Legal Entities Requesting Records
For authorization-based requests, attorneys and law firms should submit:
A completed Duke Health Enterprise Authorization form signed by the patient
"Legal" selected as the purpose in Part D
Specific date ranges or "All Treatment Dates" in Part C
Applicable sensitive information checkboxes in Part F if relevant to the case
Request the records relevant to the case. "Entire Record" excludes billing and imaging, which must be selected separately in Part C.
Fee Structure for Third-Party Requests: For requests subject to North Carolina General Statutes § 90-411, the following are statutory maximums, not a confirmed Duke price quote:
$0.75 per page for pages 1 to 25
$0.50 per page for pages 26 to 100
$0.25 per page for pages 101 and above
A provider may impose a minimum fee of up to $10, inclusive of copying costs
Confirm any applicable fee and payment instructions with Duke before processing.
Once records arrive, Codes Health automatically organizes, compiles, and summarizes case records chronologically. Its AI-powered case chronology groups patient encounters and bills by visit, helping legal teams handle large record sets without manually sorting thousands of pages.
Ensuring Completeness and Accuracy of Your Duke Health Medical Records
What to Do if Records Are Incomplete
Common causes of incomplete records include:
Sensitive information checkboxes left blank in Part F
A date range that doesn't cover all treatment periods, or the two-year default applying
Records at different Duke facilities not captured in the request
Imaging not selected ("Entire Record" doesn't include it)
Billing records not selected in Part C
If records appear incomplete, contact Release of Information at 919-684-1700 to identify what's missing. Submit a supplemental request for any additional materials needed.
Correcting Errors in Your Medical Record
Patients who identify errors in their records can request amendments through the Duke Health Privacy Office. Submit a written request specifying:
The information believed to be incorrect
The reason for the requested amendment
Supporting documentation if available
Duke Health has 60 days to respond to amendment requests, with one 30-day extension allowed with written notice.
Codes Health advertises completeness checks and missing-record detection to help legal teams identify gaps in returned documentation, reducing back-and-forth with providers.
Why PI Firms Use Codes Health for Duke Health Retrieval
Duke's single form still has traps: a two-year date default, an "Entire Record" option without billing or imaging, sensitive-record checkboxes, and a separate Radiology Image Library. Codes Health brings all of it into one managed workflow built for legal teams:
AI validation before submission: Authorizations are reviewed for misspellings, missing dates of service, signature issues, and unchecked boxes before they go out
Multi-channel follow-up: Persistent outreach through calls, faxes, emails, and portals until records arrive
Completeness verification: Gaps in facilities, date ranges, billing, or imaging are flagged before records reach your firm
Flat fee pricing: Predictable costs per case
Filevine integration: Following the July 2026 Filevine partnership, Filevine users can submit requests, track status, and receive completed records inside their case files
Custom integrations: For high-volume firms, Codes Health can build custom integrations with CRM platforms and other medical software
Speed claims deserve a closer look, too. According to Codes Health, competitors advertising same-day retrieval often return only immediately available records, leaving incomplete files that need extra client involvement and can contribute to client churn. Codes Health focuses on complete records in a couple of weeks, not months.
On general AI tools: General AI platforms like ChatGPT aren't designed for litigation-grade medical record review and can't reliably analyze complex medical records. Codes Health's purpose-built AI analyzes records with high precision, flagging potential breaches of care, pre-existing conditions, and future expenses for attorney review.
Codes Health's MIT-educated engineering team continuously builds new workflows and products, so the platform keeps evolving and growing more comprehensive to meet the changing demands of modern legal practices.
Bottom Line
Most Duke Health retrieval problems are preventable. They come from leaving the date field blank and getting only two years of records, assuming "Entire Record" includes billing and imaging, skipping the Part F checkboxes, and accepting a response without checking it against your request. Catch those early and you protect your timeline and your case value. Codes Health checks requests for errors before submission, keeps up provider follow-up, and flags gaps in returned records, typically delivering complete, organized records in a couple of weeks so your team can build cases instead of chasing paperwork.
Frequently Asked Questions
How long does it take to get medical records from Duke Health?
For patient right-of-access requests, Duke generally must act within 30 calendar days, with one possible 30-day extension after written notice. Duke's instructions describe efforts to fulfill requests within 30 days, so confirm the expected completion date with Release of Information. With Codes Health, firms typically receive complete, organized records in a couple of weeks.
Is there a fee to request my medical records from Duke Health?
Duke Health currently doesn't charge patients for copies of their own records. Third-party requests subject to N.C. Gen. Stat. § 90-411 fall under the statutory per-page caps listed above, with an optional minimum fee of up to $10, inclusive of copying costs. These are caps, not a Duke price quote. Confirm any applicable media charges with Duke.
Can my family member request my medical records from Duke Health on my behalf?
Yes, with proper documentation. Family members need a valid Power of Attorney, legal guardianship documentation, or a completed Duke Health authorization signed by the patient that names them as an authorized recipient. For deceased patients, Duke provides a notarized surviving-spouse or next-of-kin affidavit for circumstances in which, to the requester's knowledge, no estate administration has begun and no estate representative has been appointed. A next-of-kin requester must also confirm that no higher-priority survivor exists. Ask Duke what additional documentation is required.
What if I need records from multiple Duke Health facilities?
Check "All Duke Health Enterprise Entities" in Part C of the authorization form. The enterprise-wide selection broadens the request's facility scope. Confirm that the response includes the relevant providers, dates, and requested record types.
How do I request radiology images from Duke Health?
Radiology images require an explicit imaging request. Patients can request them through My Duke Health, and Duke also accepts requests through Health Information Management or the Radiology Image Library at 919-684-7860, fax 919-684-7139, or email DUHSImageLibrary@dm.duke.edu. Imaging requests received by HIM are forwarded to Radiology. Include the patient's name, date of birth, Duke MRN if available, the studies and dates requested, and a signed authorization.
How can I check the status of my medical record request from Duke Health?
Contact Release of Information at 919-684-1700 during business hours (Monday through Friday, 8:00 AM to 4:30 PM) or email ROI-Requestor3@dm.duke.edu with the patient name, date of birth, and date of submission. Legal teams using Codes Health get status tracking and automated follow-up, which can cut down on calls to the provider.
