Florida Statute 456.057 is the state’s core medical records law for licensed healthcare practitioners. It makes your patient records confidential, requires your written authorization before a provider can share them with anyone outside your care team, gives you a right to timely copies of your own file, and caps what you can be charged for those copies. Every exception to the consent rule is written into the statute itself.
Who the Statute Covers
Section 456.057 applies to every healthcare practitioner licensed by the Florida Department of Health or by a board within the Department. That reach covers physicians, nurses, dentists, psychologists, chiropractors, and the other professions the Department regulates. Hospitals and other licensed facilities are governed by a parallel statute, Section 395.3025, which tracks the practitioner rule closely but has its own list of permitted disclosures.1The Florida Legislature. Florida Code 395.3025 – Patient and Personnel Records; Copies; Examination
The Written-Consent Rule
The default under 456.057 is simple. Your records cannot be furnished to anyone other than you, your legal representative, or other healthcare practitioners and providers involved in your care unless you give written authorization.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished Everything outside that circle requires either your signed consent or one of the specific exceptions the statute lists. There is no general “legitimate interest” release; if the situation isn’t in the statute, written consent is required.
When Records Can Be Released Without Your Consent
The statute carves out a limited set of situations where a practitioner can share your records without asking you first.
Subpoenas and Court Orders
Records can be released in any civil or criminal case through a subpoena from a court of competent jurisdiction, provided proper notice is given to you or your legal representative. Compulsory physical examinations ordered under the Florida Rules of Civil Procedure also trigger disclosure, with copies going to both parties.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished The notice requirement is important: it gives you a chance to object before the records change hands.
Research With Identifiers Removed
Records can be shared for statistical and scientific research when identifying details are stripped out, or when the patient has given written permission.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished
Poison Control
Information can go to a regional poison control center for the management of a poison case.
Mandatory Abuse Reporting
Separate Florida statutes require healthcare providers to report suspected abuse, abandonment, neglect, or exploitation. Section 39.201 requires immediate reporting of suspected child abuse to the Department of Children and Families’ central abuse hotline.3Florida Senate. Florida Code 39.201 – Mandatory Reports of Child Abuse, Abandonment, or Neglect Section 415.1034 imposes a parallel duty for vulnerable adults.4Florida Senate. Florida Code 415.1034 – Mandatory Reporting of Abuse, Neglect, or Exploitation of Vulnerable Adults Relevant medical records can be provided to the investigating authorities.
Public health reporting to disease surveillance authorities is similarly carved out, limited to what the public health purpose actually requires.
Your Right to Copies
You are entitled to copies of all reports and records in your file, and the statute tells practitioners to furnish them in a timely manner. The provider cannot sit on your request for legal review before releasing the records, and the provider cannot condition the release on your paying any outstanding bill for services. The right to your records is independent of your account balance.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished
Federal law adds a firmer clock on top of the state’s “timely” language. Under HIPAA, a covered provider must act on your access request within 30 days, with one 30-day extension permitted if you receive a written explanation for the delay.5eCFR. 45 CFR 164.524 – Access of Individuals to Protected Health Information
What You Can Be Charged
For practitioners under 456.057, the copy fee cannot exceed the actual cost of copying, which can include reasonable staff time, or the amount set by the applicable licensing board’s rules, whichever applies.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished
If your request is going to a hospital or other licensed facility rather than an individual practitioner, the fee limits in Section 395.3025 apply instead: no more than $1 per page for paper, no more than $2 for nonpaper records such as imaging files, and up to $1 per year of records for the search. If you need the copies to continue your medical care, a facility cannot charge you for the copies or the search at all.1The Florida Legislature. Florida Code 395.3025 – Patient and Personnel Records; Copies; Examination
Psychiatric Records: Summary or Full File
The statute treats psychiatric, psychological, and psychotherapeutic records a little differently. When you request these records, the practitioner may provide a summary report of your examination and treatment in place of the complete file. The one firm exception: if your written request asks for the full psychiatric records to be sent to a subsequent treating psychiatrist, the practitioner must comply with that request.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished
How Long Records Are Kept
Retention rules sit in the licensing boards’ administrative rules rather than in the statute itself. The Board of Medicine requires physicians to maintain patient records for at least five years from the last patient contact.6Legal Information Institute. Florida Administrative Code R 64B8-10.002 – Written Records; Minimum Content; Retention Other boards within the Department of Health may set different periods for the professions they regulate, and some record types can carry longer retention under other state or federal rules. If you anticipate needing an older record, request a copy before the retention window closes.
Penalties When the Statute Is Violated
Section 456.057(15) states that any licensee who violates the statute will be disciplined by the appropriate licensing authority.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished The discipline available to the Board of Medicine and the other health profession boards includes administrative fines up to $10,000 per offense, license suspension or revocation, practice restrictions, probation, and required corrective action.7The Florida Legislature. Florida Code 456.072 – Grounds for Discipline; Penalties; Enforcement
Not every records owner is a licensed practitioner. For records owners who fall outside the licensing boards’ authority, the Attorney General can bring an action for injunctive relief and civil fines of up to $5,000 per violation.2Justia Law. Florida Code 456.057 – Ownership and Control of Patient Records; Report or Copies of Records to Be Furnished State discipline under 456.057 can also run alongside federal HIPAA enforcement by the U.S. Department of Health and Human Services Office for Civil Rights, which has its own civil and criminal penalty structure for the same underlying conduct.
How to Make a Request or File a Complaint
A records request should be in writing and should identify the records you want and where they should be sent. If you need a full copy of your psychiatric file forwarded to a new treating psychiatrist, say so in the request; that written instruction is what overrides the summary-report option.
If a licensed practitioner refuses to produce your records, demands payment of an unrelated bill before releasing them, delays unreasonably, or discloses your records to someone outside the statute’s permitted recipients, you can file a complaint with the Florida Department of Health, which investigates complaints against the practitioners it regulates and enforces the applicable state laws.8Florida Department of Health. Complaints and Enforcement The Board of Medicine has adopted its own rules on what medical records must contain and how they are maintained, which guide what a physician’s file is expected to look like.9Florida Administrative Rules. Florida Administrative Code 64B8-9.003 – Standards for Adequacy of Medical Records
What 456.057 Does Not Cover
Some categories of health information carry additional restrictions that sit on top of 456.057 rather than within it. HIV test results and the identity of the person tested are governed by Section 381.004, which forbids redisclosure without specific written consent and makes certain violations criminal, up to a third-degree felony where disclosure is malicious or for monetary gain.10The Florida Legislature. Florida Code 381.004 – HIV Testing Clinical records created under the Baker Act are protected by Section 394.4615, and they remain confidential even if improperly released.11The Florida Legislature. Florida Code 394.4615 – Clinical Records; Confidentiality Substance use disorder treatment records are governed by federal rules at 42 CFR Part 2, which impose their own consent requirements.12eCFR. 42 CFR Part 2 – Confidentiality of Substance Use Disorder Patient Records And a therapist’s psychotherapy notes, kept separate from the main chart, require their own standalone HIPAA authorization that cannot be bundled with a general records release.13eCFR. 45 CFR 164.508 – Uses and Disclosures for Which an Authorization Is Required If your request involves any of these categories, the general 456.057 rules are only the starting point.