Back to Arizona

HB2557 • 2026

candidate petitions; felony disclosure

HB2557 - (NOW: releasing medical records; promptness)

Crime Education Healthcare
Enacted

This bill passed the Legislature and reached final enactment based on the latest official action.

Sponsor
Quang H Nguyen, Selina Bliss, Michael Carbone, Pamela Carter, Gail Griffin, David Marshall, Sr., Beverly Pingerelli, Michael Way, Julie Willoughby
Last action
2026-06-04
Official status
Chapter 98
Effective date
Not listed

Plain English Breakdown

The official text specifies a thirty-day deadline as 'calendar days' rather than business days; this distinction was preserved in the summary but not explicitly detailed in every bullet point to maintain readability.

HB2557: Rules for Releasing Medical Records Quickly

This law sets specific time limits for health care providers to give patients their medical and payment records, with faster deadlines needed when the records are required for upcoming treatment.

What This Bill Does

  • Requires health care providers to provide access or copies of patient records within seven business days after receiving a written request as a general rule.
  • Mandates that requests made for upcoming medical treatment must be answered in ten business days if the records are less than one year old and stored electronically, or fifteen business days if they are older.
  • Sets a thirty-day deadline for responding to record requests used for purposes other than upcoming care, such as lawsuits, insurance applications, school requirements, personal copies available via patient portals, deceased patients, or payors.
  • Allows providers to deny access only under specific conditions where releasing records could endanger safety, harm others, reveal confidential sources, interfere with clinical research, or jeopardize correctional facility security.
  • Requires providers who deny a request to write down the reason in the record and provide any parts of the file that are not subject to denial.

Who It Names or Affects

  • Health care providers holding medical records
  • Patients requesting their own records or payment information
  • Legal health care decision makers acting on behalf of patients

Terms To Know

Upcoming medical treatment
A scheduled or anticipated health service where the requested records are needed to help with diagnosis, treatment, or coordinating care.
Health professional
A person defined by state law who is qualified to determine if releasing a record could cause harm or endanger safety.

Limits and Unknowns

  • The bill does not require providers to create new records that do not already exist.
  • Specific timeframes depend on whether the request is for upcoming treatment, how old the records are, and if they are stored in an electronic system.

Amendments

These notes stay tied to the official amendment files and metadata from the legislature.

Plain English: This amendment changes the rule for how quickly doctors must give patients their medical records from seven calendar days to seven business days.

  • Health care providers now have up to seven business days instead of seven calendar days to provide copies or access to a patient's medical and payment records.

Plain English: This amendment requires doctors and health providers to give patients their medical or payment records within seven days, unless specific safety risks exist.

  • Health care providers must provide access to or copies of a patient's medical and payment records promptly and no later than seven calendar days after a written request.
  • Providers can deny requests if giving the information might endanger someone's life, cause substantial harm to another person mentioned in the records, or reveal confidential sources.
  • Requests from patients involved in clinical research may be denied if they agreed not to see those specific records until the study is finished.
  • If a request is denied for any reason, the provider must write down why and still release any parts of the record that are safe to share.
  • The amendment text does not explain what happens if a patient disagrees with a denial or how long it takes to get records after seven days.
  • This is a proposed 'strike everything' amendment, meaning it replaces the entire original bill and has not yet been passed into law.

Plain English: This amendment changes the law to require health care providers in Arizona to give patients their medical and payment records within seven calendar days.

  • Health care providers must provide access or copies of patient records promptly, but no later than seven calendar days after a written request.
  • The provided text is incomplete because it cuts off mid-sentence in subsection B(4), so the full rules about denying requests based on confidentiality promises cannot be fully explained.
  • Because this amendment strikes everything and inserts new language, any previous deadlines or specific wording from the original bill are removed.

Plain English: This amendment changes the rules for how quickly doctors must give patients their medical records by setting different time limits based on why the patient needs them.

  • Doctors now have up to seven business days to provide records if a patient asks for them generally, unless specific exceptions apply.
  • If records are needed for upcoming treatment and stored electronically, doctors must respond within ten or fifteen business days depending on how old the records are.
  • For requests not related to immediate medical care, such as lawsuits or insurance applications, doctors have thirty calendar days to provide the information.
  • The amendment adds a definition stating that 'upcoming medical treatment' means scheduled services where the records are necessary for diagnosis or coordination of care.
  • This explanation is based only on the provided text and does not cover how this law interacts with other state laws.
  • The specific legal meaning of terms like 'health professional' refers to another section of the Arizona Revised Statutes (32-3201) which is not included in this document.

Plain English: This amendment changes the rules for how quickly doctors must give patients their medical records by setting different time limits based on why the patient needs them.

  • Doctors now have up to ten business days to send recent electronic records if a patient needs them for upcoming treatment, and fifteen days for older electronic records used for treatment.
  • Requests not related to immediate medical care, such as those for lawsuits or insurance, must be answered within thirty calendar days instead of the previous seven-day limit.
  • The amendment adds new definitions explaining what counts as a 'health professional' and clarifies that 'upcoming medical treatment' means records needed for scheduled appointments.
  • This explanation only covers changes to timing rules; it does not explain the specific reasons doctors can still deny access, which remain in other parts of the text.
  • The amendment removes a previous rule that required all requests to be answered within seven business days without distinguishing between different types of needs.

Bill History

  1. 2026-06-02 Senate

    Governor signed

  2. 2026-06-02 House

    House passed

  3. 2026-06-02 House

    House passed

  4. 2026-04-21 House

    House minority caucus

  5. 2026-04-13 House

    Transmitted to House

  6. 2026-04-13 Senate

    Senate third read passed

  7. 2026-04-13 Senate

    Senate committee of the whole

  8. 2026-03-31 Senate

    Senate minority caucus

  9. 2026-03-31 Senate

    Senate majority caucus

  10. 2026-03-16 Senate

    Senate second read

  11. 2026-03-11 Senate

    Senate Rules: PFC

  12. 2026-03-11 Senate

    Senate Judiciary and Elections: DPA

  13. 2026-03-11 Senate

    Senate first read

  14. 2026-03-04 Senate

    Transmitted to Senate

  15. 2026-03-04 House

    House third read passed

  16. 2026-03-02 House

    House committee of the whole

  17. 2026-02-24 House

    House minority caucus

  18. 2026-02-24 House

    House majority caucus

  19. 2026-01-26 House

    House second read

  20. 2026-01-22 House

    House Rules: C&P

  21. 2026-01-22 House

    House Judiciary: DPA/SE

  22. 2026-01-22 House

    House first read

Official Summary Text

HB2557 - 572R - Senate Fact Sheet

Assigned to
JUDE���������������������������������������������������������������������������������������������� AS
PASSED BY COMMITTEE

ARIZONA STATE SENATE

Fifty-Seventh
Legislature, Second Regular Session

AMENDED

FACT SHEET FOR
H.B. 2557

candidate
petitions; felony disclosure

(
NOW: releasing
medical records; promptness
)

Purpose

Requires a
health care provider to provide a patient with access to, or copies of, the
patient's medical records or payment records within specified timeframes after
receiving a written request.

Background

A health care
provider must provide a patient or the patient's health care decision maker
with access to or copies of the patient's medical records and payment records
on written request. A provider may deny access if a health professional
determines that access is reasonably likely to endanger the life or physical
safety of the patient or another person, cause substantial harm to another
person, or reveal information obtained under a promise of confidentiality with
someone other than a health professional, and access would be reasonably likely
to reveal the source of the information. A provider may also deny access in
circumstances related to clinical research or if the patient is an inmate and
access would jeopardize safety, security, custody or rehabilitation within a
correctional institution. If access is denied, the provider must document the
reason a provide a written explanation and must release any portions of the
record that are not subject to denial (
A.R.S.
� 12-2293
).

There is no anticipated fiscal impact to the state General Fund
associated with this legislation.

Provisions

1.

Requires a health care provider to provide a patient with access to, or
copies of, the patient's medical records or payment records within seven
business days of receiving a written request.

2.

Specifies
that if the medical records or payment records request is made by a patient or
the patient's health care decision maker and is for the purpose of upcoming
medical treatment, a health care provider must respond to a request within:

a)

10 business days after receiving the request if the medical records are
less than 12 months old and are maintained in the health care provider's
current electronic health record system; or

b)

15
business days after receiving the request if the medical records are 12 months
old or more and are maintained in the health care provider's current electronic
health record system.

3.

Specifies
that the health care provider must respond to a medical records or payment
records request within 30 days if the request is made for a purpose other than
upcoming medical treatment, including:

a)

litigation;

b)

a request that is made by a patient for medical records that are not
identified as necessary for upcoming medical treatment, including a request for
personal copies of the patient's medical records when the medical records are
otherwise available through a patient portal;

c)

requests for the purposes of life insurance or life insurance
underwriting;

d)

requests from payors, unless otherwise specified in a contract between
the provider and the payor;

e)

requests from schools or educational institutions;

f)

requests for records of a deceased patient; or

g)

any other request that is not related to current or upcoming medical
treatment.

4.

Defines

upcoming medical treatment
as a scheduled or anticipated health care
service or medical consultation for which the requested medical records are
reasonably necessary to facilitate diagnosis, treatment or coordination of
care.

5.

Makes
technical and conforming changes.

6.

Becomes
effective on the general effective date.

Amendments
Adopted by Committee

1.

Specifies
that, if the medical records or payment records request is made by a patient or
the patient's health care decision maker and is for the purpose of upcoming
medical treatment, a health care provider must respond to a request within:

a)

10 business days after receiving the request if the medical records are
less than 12 months old and are maintained in the health care provider's
current electronic health record system; or

b)

15 business days after receiving the request if the medical records are
12 months old or more and are maintained in the health care provider's current
electronic health record system.

2.

Specifies
that the health care provider must respond to a request within 30 days if the
request is made for a specified purpose other than upcoming medical treatment.

3.

Defines

upcoming medical treatment
as a scheduled or
anticipated health care service or medical consultation for which the requested
medical records are reasonably necessary to facilitate diagnosis, treatment or
coordination of care
.

4.

Makes
technical and conforming changes.

House Action
�������������������������������������������������������������
Senate
Action

JUD���������������� 2/18/26����� DPA/SE��� 9-0-0-0����������� JUDE���������� 2/25/26����� DPA���������� 5-2-0

3
rd

Read��������� 3/4/26������������������������� 37-16-6-0-1

Prepared by Senate Research

March 30, 2026

ZD/MY/ci

Current Bill Text

Read the full stored bill text
Chapter 0098 - 572R - S Ver of HB2557

Senate Engrossed
House Bill

candidate
petitions; felony disclosure

(now:� releasing
medical records; promptness)

State of Arizona

House of Representatives

Fifty-seventh Legislature

Second Regular Session

2026

CHAPTER 98

HOUSE BILL 2557

AN
ACT

amending section 12-2293, Arizona
Revised Statutes; relating to patient records.

(TEXT OF BILL BEGINS ON NEXT PAGE)

Be it enacted by the Legislature of the State of Arizona:

Section 1. Section 12-2293, Arizona Revised
Statutes, is amended to read:

START_STATUTE
12-2293.

Release of medical records and payment records to patients and
health care decision makers; definitions

A. Except as provided in subsections B and C of this
section, on the written request of a patient or the patient's health care
decision maker for access to or copies of the patient's medical records and
payment records, the health care provider in possession of the
medical
record or payment
record shall provide access to or copies of the
medical records or payment
records to the patient or the
patient's health care decision maker
promptly and within not
more than seven
business days
.

B. A health care provider may deny a request for
access to or copies of medical records or payment records if a health
professional determines that either:

1. Access by the patient is reasonably likely to
endanger the life or physical safety of the patient or another person.

2. The
medical records or payment
records
make reference to a person other than a health professional and access by the
patient or the patient's health care decision maker is reasonably likely to
cause substantial harm to that other person.

3. Access by the patient's health care decision
maker is reasonably likely to cause substantial harm to the patient or another
person.

4. Access by the patient or the patient's health
care decision maker would reveal information obtained under a promise of
confidentiality with someone other than a health professional and access would
be reasonably likely to reveal the source of the information.

C. A health care provider may deny a request for
access to or copies of medical records or payment records if the health care
provider determines that either:

1. The information was created or obtained in the
course of clinical research and the patient or the patient's health care
decision maker agreed to the denial of access when consenting to participate in
the research and was informed that the right of access will be reinstated on
completion of the research.

2. A health care provider is a correctional
institution or is acting under the direction of a correctional institution and
access by a patient who is an inmate in the correctional institution would
jeopardize the health, safety, security, custody or rehabilitation of the
patient or other inmates or the safety of any officer, employee or other person
at the correctional institution or of a person who is responsible for
transporting the inmate.

D. If the health care
provider denies a request for access to or copies of the medical records or
payment records, the health care provider must note this determination in the
patient's
medical records or payment
records and provide
to the patient or the patient's health care decision maker a written
explanation of the reason for the denial of access.� The health care provider
must release the medical records or payment records information for which there
is not a basis to deny access under subsection B of this section.

E. Notwithstanding any other
provision of this SECTION, a health care provider shall respond to a request
for medical records within the following time frames:

1. If the request is made by a
patient or the patient's health care decision maker and is for the purpose of
upcoming medical treatment:

(
a
) Within ten
business days after receiving the request if the medical records are less than
twelve months old and are maintained in the health care provider's current
electronic health record system.

(
b
) Within
fifteen business days after receiving the request if the medical records are
twelve months old or more and are maintained in the health care provider's
current electronic health record system.

2. Within thirty calendar days if the
request is for a purpose other than upcoming medical treatment, including:

(
a
) Litigation.

(
b
) A request
that is made by a patient for medical records that are not identified as
necessary for upcoming medical treatment, including a request for personal
copies of the patient's medical records when the medical records are otherwise
available through a patient portal.

(
c
) Requests
for the purposes of life insurance or life insurance underwriting.

(
d
) Requests
from payors, unless otherwise specified in a contract between the provider and
the payor.

(
e
) Requests
from schools or educational institutions.

(
f
) Requests
for records of a deceased patient.

(
g
) Any other
request that is not related to current or upcoming medical treatment.

F. Subsection E of this section does
not require a health care provider to create or compile records that do not
otherwise exist.

E.

G.
For
the purposes of this section
:
,

1.
"Health
professional" has the same meaning prescribed in section 32-3201.

2. "upcoming medical
treatment" means a scheduled or anticipated health care service or medical
consultation for which the requested medical records are reasonably necessary
to facilitate diagnosis, treatment or coordination of care.

END_STATUTE

APPROVED BY THE GOVERNOR JUNE 4, 2026.

FILED IN THE OFFICE OF THE SECRETARY OF STATE JUNE 5, 2026.