List of Forms and Contact Details Required to Request Medical Records in Sacramento (PI Lawyers' Checklist)
California sets specific deadlines for patient and pre-litigation record access, yet manual retrieval can still take weeks or months, especially when authorizations get rejected. This checklist covers the authorization elements, healthcare system contacts, fee rules, and procedural steps Sacramento PI lawyers need. Platforms like Codes Health work toward complete, organized records in a couple of weeks through AI-assisted validation, persistent provider follow-up, and completeness verification.
Key Takeaways
Under Health & Safety Code § 123110, copies requested by a patient or personal representative generally must be transmitted within 15 days. Attorneys may have separate rights under Evidence Code § 1158 in qualifying pre-litigation requests
Use a HIPAA- and CMIA-compliant authorization or the provider's own form for hospital and physician records. The DHCS form covers records held by that department, not every Sacramento provider
For patient-access requests under § 123110, providers may charge up to $0.25 per paper page or $0.50 per page from microfilm. Different rules can apply to § 1158 attorney requests
Kaiser, Dignity Health, UC Davis Health, and Sutter each publish their own request procedures and contact channels
Defective authorizations are a common cause of delay, and a defect can mean the processing period only starts once a valid request arrives
Codes Health's AI platform works toward organized records in a couple of weeks on a flat fee, with pre-submission error checking and persistent follow-up
1. Understanding Medical Records Release Forms in Sacramento
What Is a HIPAA Authorization Form?
A HIPAA authorization permits a covered entity to release protected health information to a third party, in this case your firm. HIPAA generally permits disclosure pursuant to a valid written authorization, alongside disclosures otherwise permitted by the Privacy Rule. California's Confidentiality of Medical Information Act adds its own requirements, and the two are not identical.
One clarification worth making early: for records held by the Department of Health Care Services, including Medi-Cal information, use the applicable DHCS form. For hospital or physician records, use a HIPAA and CMIA-compliant authorization or the provider's own release form. Evidence Code § 1158 contains a statutory form for qualifying attorney requests. The DHCS form is not a universal authorization every Sacramento hospital must accept.
Key Elements of a Valid Release Form
Under HIPAA (45 C.F.R. § 164.508), an authorization needs all core elements and required statements:
Patient identification sufficient for the provider to find the correct record, commonly full name and date of birth. A Social Security number is not a HIPAA requirement, though providers may ask for more identifiers
Specific description of the information disclosed, such as treatment notes, diagnostic reports, labs, imaging, billing, and prescriptions
Provider identification and recipient identification, meaning who discloses and your firm's name, address, and contact information
Expiration date or event
Patient signature and date
Required statements on the right to revoke, conditioning of treatment or payment, and potential redisclosure
Under California Civil Code § 56.11, additional validity requirements apply, including separate authorization language in handwriting or minimum 14-point type, signature and date, specific use limitations, and recipient and provider identification. Signatures may be electronic or handwritten. The statute also requires an expiration date or event, generally limited to one year or less unless the signer requests a later date or another exception applies.
Avoiding Common Authorization Errors
Incomplete or defective authorizations are a common cause of rejection and delay. A defect forces resubmission, which may mean the processing period only begins once a valid request is received. Common triggers:
Signature missing a date
Sensitive-record categories not properly addressed, including mental health, substance use, HIV-related, and genetic testing records
Vague date ranges, such as "all records" with no dates
Missing firm contact information, or an authorization already past its expiration
Missing identity documentation where the channel requires it. Sutter's online process requires a photo ID upload, though neither HIPAA nor California law makes that universal
Codes Health's AI validation reviews authorizations before submission, flagging misspellings, missing dates of service, signature issues, and provider-specific requirements that cause rejections.
2. Navigating Sacramento's Healthcare Landscape
Kaiser Permanente Sacramento Medical Center
Kaiser handles records through its Regional Release of Medical Information function, which operates virtually rather than as a walk-in desk. Its online request process is the channel Kaiser directs requesters to, and a compliant authorization is required.
Address: 2025 Morse Ave, Sacramento, CA 95825
Main Phone: (916) 973-5000
Kaiser Permanente South Sacramento Medical Center
Address: 6600 Bruceville Rd, Sacramento, CA 95823
Main Phone: (916) 688-2000
Kaiser describes release of information here as a virtual department and directs record requests to its online process. Same authorization requirements as Sacramento Medical Center.
Dignity Health Greater Sacramento
Address: 3400 Data Drive, Suite 1064, Rancho Cordova, CA 95670
Phone: (916) 854-2000
Fax: (916) 854-2497
Medical groups: Sacramento (916) 735-4670, Woodland (530) 338-2640, Grass Valley (916) 363-4040
Required Forms: a Patient Access Request Form and an Authorization to Disclose Form, in English and Spanish on the Dignity Health site. Centralized processing does not mean one authorization covers every facility, so specify each one and follow its requirements.
UC Davis Health
UC Davis Health has virtualized its release of information services. Walk-in service is not available.
Address: 2315 Stockton Blvd, Sacramento, CA 95817
Phone: (916) 734-5205
Fax: (916) 734-2126
Email: roi@health.ucdavis.edu
Hours: Monday to Friday, 8:00 AM to 4:00 PM, excluding holidays
Patient Portal: MyUCDavisHealth
Email or fax is encouraged given call volume. UC Davis states established patients are automatically opted into health information exchange sharing with participating providers unless they opt out. That supports provider-to-provider exchange and is not an attorney retrieval channel.
Sutter Health Sacramento-Area Facilities
Sutter offers an online request tool plus centralized submission.
Central fax: (916) 736-5499
Mail: PO Box 619091, Roseville, CA 95661
Patient Portal: MyHealth Online
Processing Time: Allow up to 15 calendar days after receipt of the written request, per Sutter
Strategies for Locating Provider Information
Accident victims often treat across unaffiliated systems, which means separate authorizations and follow-up for each. Review explanation of benefits statements and billing for facility names, check pharmacy records for prescribing physicians, build a full provider list at intake, and read treatment notes for specialist referrals.
Codes Health provider data helps identify where records may exist, which matters most for cases involving multiple facilities, long histories, or incomplete client recollection.
Retrieval Channels: Portals Versus Direct Contact
Patient portals let clients download portions of their records immediately, while a formal request for the complete set takes longer. Direct contact by email or fax gives documented submission proof. Centralized processing, as at Dignity Health, routes multiple hospitals through one point, though each facility still needs specifying. Processing time varies, so follow each provider's published instructions rather than assuming a common turnaround.
3. Streamlining Your Request Process
Days 1 to 2: Client meeting
Execute an authorization satisfying applicable HIPAA and California requirements, using the provider's form or another compliant one
Build a provider list covering primary care, emergency, specialists, therapy, imaging, pharmacy, and mental health
Obtain signatures on enough authorizations to cover anticipated providers
Verify demographic information and document known treatment dates
Days 3 to 4: Request preparation
Create a tracking log capturing provider, contact, submission date and method, follow-up date, and status
Draft individualized requests specifying exact records and date ranges
Verify contact information and estimate fees for each provider
Day 5: Batch submission
Submit through the most efficient method each provider accepts
Save every confirmation, including fax and email receipts and mail tracking
Set follow-up reminders rather than waiting for a status update
Consistent Follow-Up
The cadence below is an internal practice recommendation, not a statutory timetable. Which deadline applies depends on whether the request is a § 123110 access request, a qualifying § 1158 attorney request, or something else.
Day 7: call each provider that has not confirmed receipt and resubmit immediately if a defect is identified.
Day 12: written follow-up citing the statute that actually governs your request.
Day 15: escalate to the facility compliance officer or patient advocate. A demand letter is an optional internal step, not a legal requirement, and counsel should determine the appropriate remedy based on the request mechanism.
Verifying Completeness
On receipt, check that all requested date ranges are covered without gaps, every record type is present including treatment notes, billing, imaging, and labs, pages are legible, the patient name is correct throughout, and imaging is enclosed rather than just radiology reports.
Codes Health verifies completeness against the original request before delivery, identifying missing facilities, date ranges, or billing records before the set is treated as complete.
4. Accelerating Retrieval to Build Stronger Cases
The Impact of Timely Records
Retrieval that runs weeks or months delays expert review, pushes back demand preparation, and compresses trial prep. Causation rests on pre-incident baseline records and progression notes; damages rest on billing with procedure codes, therapy notes documenting functional limitations, and future treatment recommendations. Each depends on the record set arriving complete.
Leveraging Summarized Records
Reviewing a thousand-page file can require substantial attorney or paralegal time. AI-assisted tools materially reduce that effort by organizing records and surfacing relevant information for review.
Codes Health's AI chronologies organize and summarize records chronologically, grouping encounters and bills by visit so gaps become visible. The platform extracts diagnoses, treatments, providers, dates, and expenses from unstructured records, surfacing potential breach-of-care indicators, documented future medical needs, missed appointments, and pre-existing conditions for attorney review.
A note on general AI tools: general AI platforms like ChatGPT are not designed for litigation-grade medical record review, and are not built for end-to-end retrieval, request validation, or completeness workflows. Codes Health is purpose-built for plaintiff litigation, including personal injury, mass tort, and medical malpractice.
5. Advanced Strategies for Difficult Records
Legal Avenues for Compelling Disclosure
A deposition subpoena for production of business records can compel a nonparty custodian to produce records in litigation, subject to California discovery procedures under Code of Civil Procedure §§ 2020.410 to 2020.440 and patient-privacy requirements. Court orders may apply where a provider disputes authorization validity. Evaluate remedies based on provider type, request mechanism, and governing statute rather than defaulting to one escalation path.
Broader Retrieval Channels
Codes Health uses custodian connections, claims clearinghouse and payor data, provider portals, and traditional channels to locate records across systems, and manages outreach across calls, faxes, emails, and portals until materials arrive.
A note on same-day promises: Codes Health notes that services advertising same-day retrieval often return only the records immediately available electronically. That leaves the rest of the chart outstanding, pushes the chasing back onto your client, and, per Codes Health, contributes to churn. Codes Health does not offer same-day delivery, and works toward the complete set in a couple of weeks.
6. Handling Sacramento Medical Records Securely
HIPAA applies directly to covered entities and certain business associates. A PI firm that receives records under its client's authorization is not automatically either one; it depends on the firm's relationship and functions. Regardless, safeguard confidential medical information under applicable ethical, contractual, privacy, and security obligations, including access controls, audit trails, encryption, physical security, training, and incident response.
Similarly, determine whether a business associate agreement is legally required based on the parties' HIPAA status and relationship. It is not automatic simply because a firm hires a vendor handling client medical records. Either way, contractually require appropriate safeguards.
Codes Health states that its platform is HIPAA compliant, with secure document storage and e-signature workflows for intake documents including releases and authorization forms.
7. Technology and the Filevine Integration
What AI-Assisted Retrieval Changes
Manual retrieval consumes substantial staff time, and authorization defects and missed follow-ups create preventable delays. AI-assisted platforms address that through pre-submission validation, persistent follow-up across calls, faxes, email, and portals, real-time visibility, chronological organization, and analysis that surfaces buried diagnoses for review.
Codes Health's MIT-educated engineering team continuously builds out additional workflows and products, so the platform keeps evolving, improving, and becoming more comprehensive to meet the changing demands of modern legal practices.
Retrieval Inside Your Case File
On July 13, 2026, Filevine announced a strategic partnership with Codes Health embedding retrieval into the Filevine case management environment. The integration is available now and supports medical, billing, and imaging requests.
Firms can submit requests from the relevant project, validate authorizations, date ranges, and provider requirements before submission, track outreach in real time, communicate with the Codes Health team in the case workflow, receive completed records and billing in the project, and review completeness status without leaving Filevine. That keeps everything attached to the right matter. For high-volume firms, Codes Health can also build custom integrations with CRM platforms and other medical software.
8. Cost-Effective Retrieval: Balancing Speed and Expense
California Fee Rules
For patient-access requests governed by § 123110, providers may charge up to $0.25 per paper page, or $0.50 per page copied from microfilm. The same statute addresses electronic copy costs, including media costs, and imaging is subject to reasonable cost not exceeding actual cost. Different cost rules can apply to attorney requests under Evidence Code § 1158.
Certification fees vary by provider and request type, so confirm the amount first. Total cost varies by provider, record volume, format, imaging, and which fee rules apply, which is why a per-provider budget figure is not worth relying on.
No-Fee Exceptions
Section 123110(d) provides no-cost copies for specified public-benefit and immigration-related claims, currently including Medi-Cal, CalWORKs, SSI and SSP, Social Security disability, In-Home Supportive Services, veterans disability benefits, CalFresh, certain assistance for aged, blind, and disabled legal immigrants, housing subsidies, U status, and VAWA relief.
Two qualifications matter. The subdivision does not apply where the patient is represented by a private attorney paying costs related to the claim pending its outcome, with private attorney defined as one not employed by a nonprofit legal services entity. And qualifying no-cost requests carry a 30-day transmission requirement rather than 15.
Cost Optimization
Request electronic format where supported, since it may reduce mailing delays and simplify tracking. Include prepayment where required, and specify each facility even within a centralized system. Codes Health's flat fee structure provides cost predictability while working toward records in a couple of weeks, helping firms move case preparation forward sooner.
The Bottom Line for Sacramento PI Firms
Most records delays in a Sacramento practice are not bad luck. They are preventable failure modes that repeat until the process changes.
The first is the deadline assumption, treating § 123110's 15-day rule as a universal attorney deadline when it is framed around patient and personal-representative access, with § 1158 governing qualifying pre-litigation attorney requests instead. The second is the form assumption, where a state agency form gets sent to a hospital with no obligation to accept it. The third is the authorization defect, where one missing date means the clock only starts when a valid request finally lands. The fourth is mistaking delivery for completeness, which surfaces in trial prep when the imaging or billing file turns out never to have arrived.
Each is fixable in advance. Confirm which statute and fee rule governs the request you are actually sending. Use the provider's own form or another compliant authorization rather than a generic one. Validate before submission rather than after rejection. And check what came back against what you asked for.
Codes Health is built around those checkpoints: AI validation before the request goes out, persistent follow-up while it is pending, and completeness verification with missing-record detection before anything reaches your firm. A couple of weeks, on a flat fee.
Schedule a demonstration to see how Codes Health handles Sacramento records retrieval for your caseload.
Frequently Asked Questions
What forms are required for medical record requests in Sacramento for a personal injury case?
Use an authorization satisfying HIPAA's § 164.508 requirements and California Civil Code § 56.11, either the provider's own release form or another compliant authorization. Evidence Code § 1158 contains a statutory form for qualifying attorney requests. The DHCS form applies to records held by the Department of Health Care Services, not hospital or physician records generally. Kaiser, Dignity Health, and UC Davis Health each publish their own forms.
How long does it take to retrieve medical records in Sacramento?
Under § 123110, copies requested by a patient or personal representative generally must be transmitted within 15 days. Attorneys may have separate rights under Evidence Code § 1158 in qualifying pre-litigation requests. In practice, manual retrieval takes weeks or months. Codes Health works toward organized records in a couple of weeks through pre-submission validation and persistent follow-up.
Can I use a patient's online portal for a legal case?
Patients can often download portions of their records through a portal and forward them, but a formal request for the complete set takes longer and portals may not include everything. Attorney requests go through the provider's release of information process.
What are the most common reasons for request delays or rejections?
Incomplete or defective authorizations are a common cause: missing signatures or dates, sensitive-record categories not properly addressed, vague date ranges, and missing identity documentation where the provider requires it. A defect forces resubmission, which can mean the processing period only starts once a valid request arrives. Codes Health's AI validation catches these before submission.
How does HIPAA affect a PI lawyer's ability to obtain medical records?
HIPAA generally permits a covered entity to disclose PHI pursuant to a valid written authorization, alongside disclosures otherwise permitted by the Privacy Rule. California's CMIA adds requirements including an expiration date or event and separate authorization language in 14-point type. HIPAA applies directly to your firm only if it is a covered entity or business associate, though ethical, contractual, and state privacy obligations apply regardless.
Are there free options for obtaining records in California?
Section 123110(d) provides no-cost copies for specified public-benefit and immigration-related claims. The subdivision does not apply where the patient is represented by a private attorney paying costs related to the claim pending its outcome, and qualifying no-cost requests carry a 30-day transmission requirement. For locating records, Codes Health provider data helps identify treatment sources across systems.
