To admit medical records into evidence at trial, you need to obtain certified copies from the provider, satisfy the rules on relevance and hearsay, authenticate the records (usually through a written business records certification), meet your pre-trial disclosure deadlines, redact protected personal information, and then formally offer the records as an exhibit in court. Each step has its own rule, and skipping any one of them can keep the records out. The federal framework below is the model most state courts follow, with local variations.
Request Certified Records From the Provider
Everything downstream is easier if you get the records the right way the first time. Whichever method you use, specifically ask for “certified records” or “records with a business records certification.” Skipping that phrase is the single most common mistake, and it forces you to call a live custodian at trial to lay the foundation.
HIPAA Authorization
If your client is the patient, the provider will require a signed authorization that meets the HIPAA Privacy Rule. A valid authorization must include a specific description of the information being released, the name of the person or entity authorized to disclose it, the name of the recipient, the purpose of the disclosure, an expiration date, and the patient’s signature. It must also tell the patient about the right to revoke and warn that the recipient may re-disclose the information.1eCFR. 45 CFR 164.508 – Uses and Disclosures for Which an Authorization Is Required
A vague authorization gives the provider grounds to refuse. Name the specific facility, identify the date ranges and types of treatment you want, and send it well before any court deadline.
Subpoena Duces Tecum
When the records belong to someone who is not your client’s provider, or a patient authorization is not workable, a subpoena duces tecum compels production. Before serving it on the provider, give notice and a copy to every other party in the case.
Clear the Hearsay Rule
Hearsay is any out-of-court statement offered to prove the truth of what it says.2Legal Information Institute. Federal Rules of Evidence Rule 802 – The Rule Against Hearsay A chart note saying “patient reports neck pain after rear-end collision” is hearsay if you offer it to prove the patient had that pain. Two exceptions do the work of getting medical records past this barrier.
The Business Records Exception
This is the primary route. The exception applies when the record was made at or near the time of the event by someone with knowledge, was kept as part of the provider’s regular business activity, and making that type of record was a routine practice.3Legal Information Institute. Federal Rules of Evidence Rule 803 – Exceptions to the Rule Against Hearsay Hospital charts, lab results, nursing notes, and discharge summaries almost always qualify.
Statements for Medical Diagnosis or Treatment
A second exception covers statements a patient makes to a provider when they are reasonably related to getting a diagnosis or treatment and describe medical history, symptoms, or the general cause of the condition.3Legal Information Institute. Federal Rules of Evidence Rule 803 – Exceptions to the Rule Against Hearsay Without this exception, nearly every patient-reported complaint in a chart could be attacked as hearsay layered inside hearsay.
Show the Records Are Relevant
Evidence is relevant if it makes any fact that matters to the case more or less likely to be true.4Legal Information Institute. Federal Rules of Evidence Rule 401 – Test for Relevant Evidence Emergency room records from the day of an accident are clearly relevant in a crash case. Records from a routine visit five years earlier are harder to justify unless a pre-existing condition is in play.
Even relevant evidence can be excluded if its value is substantially outweighed by unfair prejudice, jury confusion, or wasted time.5Legal Information Institute. Federal Rules of Evidence Rule 403 – Excluding Relevant Evidence for Prejudice Expect this objection when the file contains graphic surgical photos, psychiatric notes, substance abuse treatment records, or vivid descriptions of disfiguring injuries. Judges have wide discretion, and opposing counsel knows it.
Authenticate the Records
Authentication just means proving the document is what you say it is.6Legal Information Institute. Federal Rules of Evidence Rule 901 – Authenticating or Identifying Evidence For medical records, that means showing they came from the provider and were not altered.
Self-Authentication by Written Certification
Under the federal rules, a domestic business record authenticates itself when a custodian or other qualified person provides a written certification confirming the record was made at or near the time by someone with knowledge, kept in the regular course of business, and created as a routine practice.7Legal Information Institute. Federal Rules of Evidence Rule 902 – Evidence That Is Self-Authenticating This is the “business records affidavit” that comes back with certified records.
There is a catch many litigants miss. You must give the opposing party reasonable written notice before trial that you intend to offer the records through certification, and you must make both the records and the certification available for inspection so the other side has a fair opportunity to challenge them.7Legal Information Institute. Federal Rules of Evidence Rule 902 – Evidence That Is Self-Authenticating Miss the notice and the judge can refuse the certification, leaving you scrambling for a live witness. Build this notice into your pre-trial calendar.
Live Custodian Testimony
If you cannot get a certification, or the certification is defective, the fallback is calling the records custodian to the stand. Often the director of health information management, this witness testifies that the records are genuine copies from the provider’s files, were created and maintained in the ordinary course of business, and that making such records is a routine practice. It satisfies both authentication and the business records exception at once. It is also expensive and logistically painful.
Electronic Health Records
Most medical records today are generated and stored electronically. EHR systems maintain audit trails that log every interaction with a patient’s file: who accessed it, what they viewed or changed, and when, using synchronized timestamps and tamper-resistant storage. If the other side challenges whether an electronic record was altered after the fact, the audit trail metadata can help demonstrate authenticity. When you request certified records, ask the provider to include information confirming the integrity of the electronic record-keeping system.
Watch for Physician-Patient Privilege
Even records that clear relevance and hearsay can be blocked by physician-patient privilege. Most states recognize some form of it, protecting confidential communications between patient and doctor from forced disclosure. The privilege belongs to the patient, so only the patient can waive it.
In personal injury and medical malpractice cases, the plaintiff typically waives the privilege by filing suit. Putting your physical condition at issue lets the other side examine the medical evidence behind your claims. The waiver is not unlimited, though. It generally covers only the conditions relevant to what you are claiming. If you sue for a broken leg, the opposing party can reach your orthopedic records but not, automatically, unrelated psychiatric treatment files. Courts protect this boundary, and you can push back on overbroad discovery requests.
Meet the Pre-Trial Disclosure Deadlines
Getting the records is not enough. You have to disclose them to the other side on schedule, or the court can bar you from using them.
In federal court, disclosure happens in two stages. Early in the case, you must describe all documents you may use to support your claims or defenses. Then, at least 30 days before trial (unless the court sets a different deadline), you must identify every exhibit you plan to offer, separating those you definitely intend to use from those you might use if the need arises.8Legal Information Institute. Federal Rules of Civil Procedure Rule 26 – Duty to Disclose
The penalty for missing these deadlines is severe. A party that fails to disclose evidence as required is prohibited from using it at trial unless the failure was substantially justified or harmless. The court can also order attorney fees, inform the jury of the failure, or impose other sanctions.9Legal Information Institute. Federal Rules of Civil Procedure Rule 37 – Failure to Make Disclosures or to Cooperate in Discovery “I didn’t get the records back from the hospital in time” almost never counts as substantial justification. Request records months before you need them.
Redact Protected Information Before Filing
Federal court rules require redaction of certain sensitive data before any document is filed with the court. Reduce Social Security numbers and taxpayer identification numbers to the last four digits, show only the year of birth rather than the full date, use only initials for minors’ names, and truncate financial account numbers to the last four digits.10Legal Information Institute. Federal Rules of Civil Procedure Rule 5.2 – Privacy Protection for Filings Made with the Court
These rules apply to paper and electronic filings alike. With PDFs, a black box laid over text is not enough if the underlying text layer remains searchable or copyable. Use a real redaction tool that permanently removes the data. Courts have sanctioned attorneys for botched redactions that leaked confidential information. Check every page.
Offer the Exhibit at Trial
Once the records are certified, authenticated, properly disclosed, and redacted, the courtroom sequence is predictable. Have the clerk mark the records with an exhibit number, hand copies to the judge and opposing counsel, and formally offer the exhibit: “Your Honor, I offer Plaintiff’s Exhibit 1 into evidence.” Identify what it is (“the certified emergency room records from Memorial Hospital dated March 15, 2025”) and note that the accompanying certification satisfies the business records exception.
Opposing counsel then has a chance to object. The common objections to medical records are:
- Relevance, when the records do not relate to a condition at issue.
- Unfair prejudice, when graphic or inflammatory content outweighs what the records actually prove.5Legal Information Institute. Federal Rules of Evidence Rule 403 – Excluding Relevant Evidence for Prejudice
- Incomplete foundation, when the certification is missing, defective, or was not provided to the other side with adequate advance notice.
- Hearsay within hearsay, when the record contains statements from someone other than the treating provider that do not fit any exception on their own.
The judge rules on each objection. If the foundation holds, the exhibit comes in. If an objection is sustained, you may be able to offer a redacted version with the problem portions removed.
One more rule to know before you offer only a slice of a chart: if you introduce part of a medical record, the opposing party can require you to introduce any other portion that fairness demands be considered with it.11Legal Information Institute. Federal Rules of Evidence Rule 106 – Remainder of or Related Writings or Recorded Statements Cherry-picking favorable pages while omitting context that cuts the other way is a fast route to having the rest come in on your opponent’s terms. If the full record helps, offer it all. If parts hurt, prepare to deal with them rather than hoping the other side will let them sit.