Paper Before Treatment: How Insurers Use Medical Records Requests to Delay the Care You Need

When a physician recommends a course of treatment, most patients reasonably assume the next step is receiving that treatment. What they may not anticipate is a detour through a documentation review process controlled entirely by their insurance company — one that can introduce weeks of delay before a single procedure is approved or a specialist is seen.

Medical records requests from insurers are common, legally permitted, and, in some cases, clinically appropriate. But they are also increasingly recognized by patient advocates and healthcare professionals as a mechanism that — whether by design or by consequence — slows access to care in ways that can directly harm patients.

What Is a Medical Records Request, and Why Do Insurers Issue Them?

When an insurer receives a prior authorization request or a claim for services, it may ask a provider to submit supporting medical records before rendering a coverage decision. The stated purpose is generally to verify that the requested service is medically necessary — a standard embedded in nearly every commercial health plan and Medicare Advantage contract.

In principle, this process has merit. A health plan reviewing a request for a complex surgical procedure may reasonably want to confirm that a patient has exhausted conservative treatment options. An insurer evaluating a specialty medication request may seek documentation of a prior diagnosis. These are defensible uses of the records review process.

In practice, however, the scope and frequency of such requests has expanded well beyond these narrowly justified scenarios. Insurers now routinely request extensive records for routine referrals, repeat prescriptions, and services that treating physicians consider clinically straightforward. The result is a system in which the burden of proof falls heavily on patients and providers — and in which delay becomes the default.

The Timeline Problem: How Long Does This Actually Take?

Federal regulations governing prior authorization timelines vary by plan type. Under the Affordable Care Act, commercial plans are generally required to respond to urgent prior authorization requests within 72 hours and non-urgent requests within 15 calendar days. Medicare Advantage plans face similar standards under CMS guidelines.

But these clocks do not always start when a patient or physician might expect. When an insurer issues a records request, the authorization clock is frequently paused — or reset entirely — pending receipt of the documentation. If a provider's office is slow to respond, if records are incomplete, or if the insurer requires additional clarification, that pause can extend indefinitely.

A 2023 report from the American Medical Association found that 94 percent of physicians reported that prior authorization delays negatively affected patient care, and that 80 percent of physicians reported that the process led to treatment abandonment in at least some cases. Medical records requests are a significant contributor to those delays.

Legitimate Requests Versus Fishing Expeditions

Not every records request is created equal. Patients and providers should be aware of the distinction between requests that are narrowly tailored to the service under review and those that appear designed to uncover grounds for denial rather than to evaluate medical necessity.

A legitimate records request will typically ask for documentation directly relevant to the condition being treated and the intervention being requested — recent office notes, diagnostic test results, or records of prior treatments. It will specify a defined time frame and a clear clinical rationale.

By contrast, a records request that demands years of comprehensive medical history, psychological records unrelated to the condition at issue, or documentation from providers who have not been involved in the relevant care may reflect a broader audit strategy rather than a focused medical necessity review. Patients have the right to ask their insurer — in writing — to explain the specific clinical basis for any records request that appears disproportionate to the service being authorized.

The Legal Framework Patients Should Know

Several federal and state-level protections are relevant here. Under HIPAA, patients have the right to access their own medical records and to understand how those records are being used and disclosed. Insurers are required to handle records in accordance with their privacy notices, and patients may file complaints with the U.S. Department of Health and Human Services Office for Civil Rights if they believe their health information has been misused.

The No Surprises Act and subsequent CMS rulemaking have introduced additional transparency requirements for prior authorization processes, including new mandates for Medicare Advantage plans to articulate the clinical criteria used in coverage decisions. While these rules do not eliminate records-related delays, they provide a foundation for patient challenges when the process appears arbitrary.

State insurance commissioners also have authority over commercial plan practices in many cases. If a records request appears designed to create delay rather than to evaluate a legitimate clinical question, filing a complaint with your state's department of insurance is a concrete step that creates an official record and may prompt regulatory scrutiny.

Practical Steps to Protect Your Timeline

Patients who find themselves caught in a records review cycle are not without recourse. The following strategies can meaningfully reduce delays:

Request written confirmation of what is needed. Ask your insurer to provide, in writing, the specific records it is requesting, the clinical rationale for the request, and the exact timeline it is applying. Vague or open-ended requests are harder to fulfill and easier to dispute.

Work directly with your provider's office. Many delays originate not with the insurer but with the provider's medical records department, which may be managing dozens of similar requests simultaneously. Ask your physician's staff to confirm receipt of the request and to provide records electronically whenever possible, as this typically accelerates transmission.

Invoke the urgency standard. If your condition is time-sensitive, ask your physician to formally designate the authorization request as urgent. This triggers a shorter regulatory response window and may prompt faster processing of any associated records request.

Keep your own records. Maintain copies of your relevant medical history, including recent test results, specialist notes, and prescription records. In some cases, patients can provide supporting documentation directly to the insurer, reducing dependence on provider office timelines.

Document every interaction. Note the date and content of every call or correspondence with your insurer regarding the records request. This documentation is essential if you need to file a grievance or pursue an appeal.

When Delay Becomes Denial in Disguise

Patient advocates have long observed that a sufficiently prolonged authorization delay can produce the same practical outcome as an outright denial — a patient who does not receive care. When records requests extend a review process beyond the point at which treatment is clinically useful, or when a patient ultimately abandons a referral or procedure because the administrative burden is too great, the insurer has effectively achieved a denial without formally issuing one.

This pattern has attracted increasing attention from federal and state regulators. The Centers for Medicare and Medicaid Services has cited inappropriate authorization delays as a compliance concern in Medicare Advantage plan audits. Several states have enacted or are considering legislation that would impose stricter timelines and transparency requirements on records-related delays specifically.

Your Care Should Not Wait for a Filing Cabinet

The medical records request is a legitimate tool in the insurance coverage process. It becomes problematic when it is deployed broadly, without clear clinical justification, or in ways that predictably delay necessary care. Patients who understand the mechanics of this process — and who know their rights within it — are better positioned to push back when the system is not working in their interest.

CFH Info encourages patients to treat every step of the authorization process as something they have both the right and the responsibility to monitor. Your diagnosis should drive your treatment timeline. A records review queue should not.