In most cases, yes—but where that right comes from depends on what kind of record you want. Your medical records and X-rays (including dental X-rays) are almost always yours to copy under federal health-privacy law, regardless of who paid for the visit. Your personnel file from an employer is governed mostly by state law, and roughly half the states give private-sector workers a clear right to inspect or copy it. This article explains both, names the laws that actually control, and walks you through how to make the request.
The Short Answer for Medical Records and X-rays
If you are asking "Am I entitled to a copy of my X-rays?" or "Am I entitled to a copy of my dental X-rays?", the answer is almost always yes—and the relevant law is the Health Insurance Portability and Accountability Act (HIPAA), enforced by the U.S. Department of Health and Human Services Office for Civil Rights (OCR), not the Department of Labor.
HIPAA gives patients a right of access to their own medical records held by "covered entities"—doctors, dentists, hospitals, imaging centers, and most health plans. That right includes diagnostic images such as X-rays, MRIs, and CT scans, along with the radiologist's or dentist's reports interpreting them. The provider must give you the records in the form and format you ask for if it is readily producible, including electronic copies on a disc or through a patient portal.
- You do not have to explain why you want them. A provider cannot require you to state a reason or to come in for an appointment first.
- A past-due bill is not a valid reason to refuse access. Under HIPAA, a provider generally cannot withhold your records because you owe money for treatment.
- They can charge a reasonable, cost-based fee. The fee may cover labor for copying, supplies (such as a disc), and postage—but it cannot be used as a barrier, and many states cap it. The actual amount varies by state and by provider.
- Timing is regulated. HIPAA sets an outer limit of 30 days to respond to a written access request, with one possible 30-day extension if they notify you. Many states require faster turnaround. The exact deadline varies by state.
Original films or images may stay with the provider, but you are entitled to a usable copy. For physical X-ray films, a digital copy on a disc is standard today. If a dentist or imaging center says you cannot have your dental X-rays, that is usually incorrect—ask specifically for a copy of the images and the accompanying notes.
Why This Matters: Records Are Your First Piece of Evidence
In an injury claim, a workers' compensation case, a disability matter, or a wrongful-termination dispute, your medical records and your personnel file are the foundation of the entire case. They establish when an injury happened, what a doctor observed, what your employer knew, and how your performance was actually documented over time. Getting clean copies early—before anything is lost, edited, or "cleaned up"—protects you. Memories fade and files get thinned; a contemporaneous record does not.
Personnel Files: It Depends on Your State
There is no general federal law giving private-sector employees the right to see their entire personnel file. Instead, access depends on the law of the state where you work, and the rules differ significantly. This varies by state, but the common patterns are:
- Inspection and copying rights. Many states (including a number of larger ones) give current and sometimes former employees the right to inspect their personnel file and to receive copies, often within a set number of days after a written request. Some let the employer charge a reasonable copying fee.
- What counts as the "file." States that grant access usually cover records used to determine your qualifications, pay, promotion, discipline, or termination—performance reviews, warnings, attendance records, and the like. They frequently exclude certain items: investigation notes, references obtained in confidence, records about other employees, and management planning documents.
- States with no statute. In states without an access law, whether you get your file is governed by your employer's own policy, an employee handbook, or a union contract. You can still ask.
Because these statutes—and the specific deadlines and fees—differ so much, check with your state labor department or your state's official statutes for the exact rule that applies to you. Do not assume a deadline you read about for one state applies to yours.
Medical Records Held by Your Employer
Employers sometimes hold health-related information: results of a pre-employment physical, fitness-for-duty exams, drug-test results, or documentation you submitted for leave or an accommodation. Two federal laws shape this:
- The Americans with Disabilities Act (ADA), enforced by the Equal Employment Opportunity Commission (EEOC), requires employers to keep employee medical information in separate, confidential files, apart from the regular personnel file. Many state personnel-file access laws also give you the right to obtain medical records your employer keeps about you.
- The Family and Medical Leave Act (FMLA), enforced by the U.S. Department of Labor Wage and Hour Division, similarly requires confidential handling of medical certifications you submit for leave.
Note that HIPAA generally does not cover records once they are in your employer's hands as an employer—it covers them while held by the doctor, clinic, or health plan. So for the clinic's copy, use HIPAA; for the employer's copy, use your state's personnel-records law and the ADA's confidentiality rules.
Workplace Injuries and OSHA Records
If you were hurt on the job, the Occupational Safety and Health Act, enforced by OSHA, gives you specific access rights. You are entitled to:
- Your own exposure and medical records that your employer creates or maintains under OSHA rules, generally provided within 15 working days of your request.
- Information from the OSHA 300 injury and illness log and your own 301 incident report describing how your injury occurred.
Separately, if you filed a workers' compensation claim, that state-run system has its own process for obtaining the medical records and reports in your claim file. The treating physician's records—including X-rays—remain accessible to you under HIPAA as well.
How to Request Your Records: A Practical Walkthrough
Whether you are after X-rays, a medical chart, or a personnel file, the process is similar. Be specific, put it in writing, and keep proof.
- Put the request in writing. Email or a signed letter creates a dated record. State clearly what you want: "a complete copy of my personnel file," or "copies of all dental X-rays taken on [dates] and the accompanying reports."
- Be specific about format. Ask for electronic copies on a disc or via portal for images, and PDF or paper for documents. Specify whether you want everything or a date range.
- Address it to the right office. For medical records, contact the provider's medical-records or health-information department. For a personnel file, contact HR or the records custodian named in your handbook.
- Ask about the fee up front so a charge does not delay you, and confirm whether your state caps it.
- Keep a copy of your request and note the date. If the law in your state or HIPAA sets a deadline, you will know when the clock started.
- Follow up in writing if you do not hear back within the applicable window. Reference your original request date.
What to Document While You Still Can
- For an injury or comp claim: dates of treatment, every provider and facility you saw, and which images were taken (X-ray, MRI, CT). Request each facility separately—imaging centers often hold the actual films.
- For a termination or discipline dispute: performance reviews, written warnings, emails about your work, and any policy you are accused of violating. Request your file before resigning or being walked out, if you can.
- For an accommodation or leave issue: copies of the medical certification you submitted and any employer response.
If You Are Refused
A flat refusal is often a misunderstanding—but you have options when it is not:
- Medical records and X-rays: If a covered provider denies your HIPAA access request or stonewalls you, you can file a complaint with the HHS Office for Civil Rights. OCR has actively enforced the patient right of access.
- Personnel file: If your state grants access and your employer refuses, contact your state labor department; some states impose penalties for noncompliance.
- OSHA records: If your employer won't provide injury or exposure records you are entitled to, you can contact OSHA.
- Retaliation: It is generally unlawful for an employer to punish you for asserting these rights, filing a workers' comp claim, or complaining to a labor agency. If discipline or termination follows your request, document the timing—it can matter.
One practical tip: if you anticipate a dispute or litigation, consider sending a written litigation-hold request asking the employer to preserve relevant records. Even without one, destroying records after a claim is on the horizon can carry legal consequences.
A Quick Word on Accuracy
Deadlines, fee caps, and the exact scope of "personnel file" genuinely vary from state to state, and the federal rules above set floors that states often build on. This is general information to help you ask the right questions and find the right office—not legal advice about your specific situation. For a high-stakes injury, comp, or termination matter, a one-time consult with an employment or workers' comp attorney in your state can confirm the precise deadlines that apply to you.
The law behind your rights at work
Most workplace rights come from federal statutes enforced by the U.S. Department of Labor and the EEOC, with many states adding stronger protections.
Key federal laws:
Where to get help or file a complaint:
Your state and city matter. Federal law is the floor — many states and cities require higher pay, more leave, and broader protections. Always check your state’s rules (and any local ordinances) in addition to the federal laws above. This is general legal information, not legal advice.
Frequently asked questions
Am I entitled to a copy of my X-rays?
Yes, in almost all cases. Under HIPAA, you have a right of access to your own medical records held by a doctor, hospital, or imaging center, and that includes diagnostic images like X-rays plus the report interpreting them. The original film may stay with the provider, but you are entitled to a usable copy—typically a digital copy on a disc or through a patient portal. They can charge a reasonable, cost-based fee, and they generally cannot refuse just because you have an unpaid bill.
Am I entitled to a copy of my dental X-rays?
Yes. Dental X-rays are medical records held by a HIPAA covered provider, so the same right of access applies. Send a written request to your dentist's office asking for copies of the images from specific dates along with any accompanying notes, and specify whether you want them on a disc or electronically. If the office says no, that is usually a mistake—ask again in writing, and if needed you can file a complaint with the HHS Office for Civil Rights.
Can my employer refuse to give me my personnel file?
It depends on your state. There is no general federal law requiring private employers to hand over your full personnel file. About half the states give employees a right to inspect or copy it, often within a set number of days, while others leave it to company policy or a union contract. Check with your state labor department for the rule that applies, and make your request in writing either way.
Does HIPAA cover medical records my employer keeps about me?
Generally no. HIPAA covers your records while a doctor, clinic, or health plan holds them. Once health information is in your employer's files—like a fitness-for-duty exam or a leave certification—it is covered instead by your state's personnel-records law and by the ADA, which requires employers to keep medical information in separate, confidential files. You can often still obtain your own copy through your state's access law.
How long does a provider or employer have to give me my records?
For medical records, HIPAA sets an outer limit of 30 days to respond to a written access request, with one possible 30-day extension if they notify you, though many states require faster turnaround. For OSHA-covered employee medical and exposure records, the deadline is generally 15 working days. For personnel files, the deadline is set by state law and varies, so confirm your state's specific timeframe.
This article is general legal information, not legal advice, and may not reflect the most current law or the law in your jurisdiction. Laws vary by state and change over time. For advice about your specific situation, consult a licensed attorney.
