How to Get Prison Medical Records After Death

HIPAA Doesn't End at Death

The Health Insurance Portability and Accountability Act protects medical records for 50 years after a person dies. This means the correctional facility, the private healthcare contractor, and any outside hospital that treated your loved one can't simply hand over records because you're family. You need either authority recognized under applicable state law or a qualifying carepartner relationship — and the pathway you use determines what information may be disclosed.

Pathway 1: Personal Representative

If you've been formally appointed as the administrator or executor of the deceased's estate, or otherwise have authority under state law to act for the estate, HIPAA generally requires the provider to treat you as the individual for protected health information relevant to your role. The authority and proof required depend on applicable state law; court-issued Letters of Administration are one common way to establish it.

Full probate can take weeks or months, but many states offer expedited alternatives for smaller estates. California allows small estate affidavits for estates valued at $208,850 or less when the person died on or after April 1, 2025 (Probate Code § 13100), with a 40-day waiting period after death. New York's threshold is $50,000 or less in personal property. Florida uses a simplified "Disposition Without Administration" petition through the clerk of court. A small-estate procedure for property does not by itself appoint you as a personal representative for HIPAA access; confirm the authority it gives under state law.

For families seeking medical records to support a potential wrongful death claim, getting appointed as personal representative is the stronger route — it generally gives you access to protected health information relevant to your role, which can include medical charts, progress notes, medication administration records, and billing documents.

Pathway 2: Carepartner/Involved Person

Under 45 CFR § 164.510(b)(5), healthcare providers can disclose limited medical records to a family member or close friend who was actively involved in the deceased's care or payment for care before death, without requiring formal estate appointment.

This pathway is faster but narrower. You don't get the complete medical history — only records directly relevant to your involvement in their care. For a custody death, this typically means clinical notes and billing records from the period immediately before the death. The provider retains discretion over what falls within the scope of "relevant" disclosure, and they can deny the request if they believe it conflicts with the deceased's prior expressed preferences.

The carepartner pathway is a stopgap, not a substitute for personal representative status. Use it when you need to see what happened in the days before the death while the probate process is still underway.

Who Holds the Records

Correctional medical records are fragmented across multiple custodians, and requesting from only one leaves gaps:

The correctional facility maintains intake screening documents, housing medical records, and any grievances or sick call slips that went through the facility's internal system.

The private healthcare contractor (Wellpath, YesCare/Corizon, NaphCare, or others) maintains its own clinical charts, medication administration records, provider notes, and withdrawal monitoring documentation. These records are separate from the facility's institutional records. A request to the prison won't capture the contractor's files.

Outside hospitals that treated the inmate on emergency transfers maintain their own medical records under standard HIPAA rules. If your loved one was transferred to a community hospital before death, that hospital is a separate records custodian.

The medical examiner's office holds autopsy-related medical documentation — forensic examination notes, toxicology results, and tissue sample records.

Send separate records requests to each entity. Gaps between the records often reveal exactly where the system failed — a contractor's notes may show a medication was ordered that the facility's logs show was never administered, or the facility's transfer request timeline may not match the hospital's intake records.

What to Look For

Medical neglect in custody usually shows up in the records as absences rather than actions. Look for:

• Intake screening forms that failed to document substance use history or mental health conditions
• Sick call slips with no documented response or delayed follow-up
• Missing or incomplete withdrawal monitoring scale scores (CIWA-Ar for alcohol, COWS for opioids)
• Medication administration records that show gaps or missed doses
• Nursing notes that describe symptoms without escalation to a physician
• Absence of transfer authorization requests when the condition exceeded the facility's capability

These patterns establish the "deliberate indifference" standard required for constitutional claims under the Eighth and Fourteenth Amendments.

The After a Death in Prison or Jail toolkit includes HIPAA request templates for each records custodian, a medical records checklist, and guidance on identifying negligence patterns in correctional health records.