You Own Your Medical Images (Kind Of)

Here is something most patients do not know: your medical images belong to you.

Legally, you have the right to access your own imaging data. In the United States, HIPAA gives you the right to obtain copies of your medical records, including CT scans, MRIs, X-rays, and any other imaging studies. In Europe, GDPR goes even further — you can request your data in a portable, machine-readable format.

On paper, this is clear. In practice, it is a different story.

What the law says

Under HIPAA, healthcare providers must give you access to your medical records within 30 days of a request. This includes your imaging files — the actual DICOM data, not just the radiology report. They can charge a reasonable fee for copying, but they cannot refuse your request.

The 21st Century Cures Act, which went into full effect in 2022, went further. It introduced information blocking rules that prohibit healthcare providers from interfering with access to electronic health information. In theory, this means hospitals cannot make it unreasonably difficult for you to get your own data.

In theory.

What actually happens

I have requested my imaging data from multiple hospitals over the years. Every time, it is a process.

Some hospitals require you to fill out a paper form — in person, at the medical records office, during business hours. Some have online request portals, but the turnaround is days or weeks. Some will only give you a CD, which, as I have written about before, you probably cannot open.

I have been told I need to submit a request in writing. I have been told it would take two to four weeks. I have been told I needed to come back with a different form of ID. I have never once been told “here are your files, right now, in a format you can use.”

The friction is not always intentional. Hospitals run on systems that were built decades ago. PACS servers — the systems that store medical images — were designed for internal use by radiology departments, not for patient access. Getting data out of these systems and into a patient's hands is genuinely difficult with existing infrastructure.

But the effect is the same whether the friction is intentional or not. Patients who have a legal right to their own data face enough barriers that most of them give up.

Why it matters

This is not an abstract issue. When you cannot easily access your imaging history, real problems follow.

If you switch doctors, your new physician may not have your previous scans. They order new ones. You get exposed to additional radiation. You pay for imaging you have already had. And nobody is comparing the new scan to the old one, because the old one is locked in a system at your previous hospital.

If you want a second opinion, you need to get your images to another radiologist. That means navigating the request process all over again, waiting days or weeks, and hoping the files arrive in a format the second doctor can use.

If you simply want to understand your own scan — to see what the radiologist saw and what their report is describing — you are largely out of luck. The data is yours by law, but the tools to view it have never been built for you.

What you can do

Request your imaging data after every scan. Do not wait until you need it. Make it a habit, the same way you might download your bank statements or save important documents.

Ask specifically for the DICOM files, not just the radiology report. The report is a summary. The DICOM files are the actual images — the raw data that contains everything.

If your hospital offers a patient portal with image access, use it. The viewing experience will be basic — flat, grayscale slices — but it is a starting point for getting your data into your own hands.

And when you have your files, upload them to KAYMO. Because having the legal right to your data is only the first step. The second step is being able to actually see and understand what is in it.