Medical Records Clerk Job Description Templates for Clinics
6 free templates for practices that run their own chart room: clinic standard, small practice, release of information, scanning and chart prep, remote, and lead clerk. Download as DOCX.
The first medical records clerk job description most clinic owners find online was written for a hospital health information department. It assumes a records director, a coding team, a privacy officer down the hall, and a dedicated release of information desk. A four-provider clinic has none of that. It has one person, a scanner, an EHR queue, and a tray of attorney letters nobody has opened.
That gap matters more than it looks. The chart maintenance half of the job is forgiving: an unindexed lab result gets found. The release of information half is not. Requests carry a legal clock, and the Office for Civil Rights has closed more than fifty enforcement actions under its Right of Access Initiative, many of them against small providers who did not refuse a request so much as never get to it.
At FirstHR we write hiring templates for practices without an HR department. The six below cover a standard clinic clerk, a small or solo practice hybrid role, a release of information specialist, a scanning and chart prep clerk, a remote clerk, and a lead clerk, each with the HIPAA and classification language the generic versions leave out.
TL;DR
A medical records clerk in a clinic does two jobs: indexing documents into the right chart, and releasing records correctly. Patient access requests carry a 30 day federal deadline with one written extension. The role is non-exempt and hourly. National median for the occupation is $51,140 (BLS OEWS, May 2025). Six templates below.
What the Role Actually Covers
A medical records clerk keeps patient charts accurate and controls who receives copies of them. In a clinic that splits cleanly into chart maintenance, which is a workflow problem, and release of information, which is a compliance problem with a deadline attached.
Job titles in this corner of a practice overlap constantly, and hiring the wrong one wastes a month. Federal wage data lumps records clerks in with coders, which is also why salary figures for the occupation read higher than a chart room job usually pays.
Medical records clerk
Owns the chart
Indexes incoming documents to the right patient and encounter, keeps charts complete, pulls prior records for visits, and processes requests for copies. The record itself is the product.
Medical coder
Owns the codes
Reads clinical documentation and assigns diagnosis and procedure codes that drive reimbursement. Same federal occupation in the wage data, very different day and a different skill test.
Medical biller
Owns the claim
Submits claims, posts payments, and works denials. A biller touches the record to support a claim; a records clerk maintains the record and controls who else gets to see it.
Unit clerk or medical secretary
Owns the flow
Runs the administrative hub of a unit or front office: phones, scheduling, check-in, supplies. Records work is one task among many rather than the whole job.
Records candidates screen postings by system before they read anything else. Someone who has spent three years in your EHR will be productive in days, and someone who has not will need weeks on document types, indexing rules, and where the release module lives. Write the system name, whether the chart is electronic, paper, or hybrid, and roughly how much paper still arrives each week. It costs you one sentence and it changes who applies.
Release of Information Carries the Risk
Release of information is where a records job stops being clerical. A patient asking for their own chart triggers the HIPAA right of access, which requires the practice to act within 30 calendar days of receiving the request, with one extension of up to 30 more days available only if the patient gets a written reason and a completion date inside the first window.
The Department of Health and Human Services publishes detailed guidance on the individual right of access covering scope, format, verification, and fees. Two points from it belong in the job description. First, a patient does not need to complete an authorization form to get their own records. Second, the fee for a patient access request is limited to a reasonable, cost-based amount covering labor for copying, supplies, and postage.
Requests routed to a third party sit differently. After a 2020 federal court order, which the Office for Civil Rights summarized in a public notice, the patient-rate fee limitation applies to an individual requesting their own records and does not extend to requests to transmit records to a third party. Attorney and insurer requests also need a valid authorization under 45 CFR 164.508, not a letterhead demand.
Request type
What the clerk confirms before releasing
Clock
Patient asking for their own chart
Identity and a written request; no authorization form required
30 calendar days, one written 30-day extension
Patient directing records to a third party
Signed written direction naming the recipient
Same access clock applies
Attorney, employer, or insurer
A valid HIPAA authorization with every required element
Set by practice policy, not the access rule
Another provider for treatment
Normal verification; treatment disclosures are permitted
As fast as the care requires
Payer, tied to a claim
Permitted for payment; limited to the minimum necessary
Payer deadline
Subpoena or court order
Route to the privacy officer; a subpoena alone is not a court order
No release on the clerk’s judgment
Substance use disorder treatment records
Consent meeting the stricter Part 2 rules
Confirm before any release
Substance use disorder records deserve their own line in the posting. The 2024 final rule under 42 CFR Part 2 aligned much of that framework with HIPAA and set a compliance date of February 16, 2026, and HHS maintains a fact sheet on the Part 2 final rule. Consent rules there remain stricter than HIPAA, so the safe instruction to a clerk is to escalate rather than interpret.
What Belongs in the Posting
A records posting does four jobs: it describes the chart, it filters for accuracy, it protects the practice, and it closes the candidate. Most clinic postings do only the first, and vaguely, which is how you end up interviewing people who have never seen a request log.
The parts candidates read first
Specialty, number of providers, and locations
Your EHR by name
Whether charts are electronic, paper, or hybrid
Onsite, hybrid, or remote, stated plainly
The parts that filter applicants
Chart maintenance duties separated from request duties
Release of information experience, required or preferred
Medical terminology expectation
Records volume so nobody is surprised in week one
The parts that protect you
Non-exempt classification stated on the posting
Training before records access, written as a condition
Escalation duty for subpoenas and court orders
Equal opportunity statement
The parts that win the hire
An hourly rate or a good-faith range
Schedule and overtime expectations
Who the clerk reports to
A named person and a real deadline to apply
The most common omission is volume. Candidates want to know how many documents land in the queue each day and how many requests arrive each week. Leaving it out reads as a practice that has not measured its own backlog. Our guide to writing a job description covers the general structure in more depth.
6 Medical Records Clerk Job Description Templates to Download
Download all six as one file or copy them individually. Each follows the same structure: practice overview, position summary, key responsibilities split by function, required qualifications, a compliance note, an equal opportunity statement, and how to apply. The bracketed fields are the only parts you change.
Download All 6 Medical Records Clerk Job Description Templates
Clinic standard, small practice, release of information, scanning and chart prep, remote, and lead clerk. All in one download.
Clinic Standard
Multi-provider practice
The general clinic role split into chart maintenance, release of information, and compliance, with the response deadline written in.
Small or Solo Practice
Records plus front desk
For the practice where one person owns the chart room and covers check-in, with the minimum necessary problem that hybrid creates addressed directly.
Release of Information
Request queue specialist
For practices with real request volume: intake, validation, fulfillment, escalation, and the disclosure log, written as separate duty blocks.
Scanning and Chart Prep
Paper into the EHR
For conversions and hybrid charts: prep, scan, index, quality check, chain of custody, and approved destruction.
Remote Records Clerk
Offsite, on a set schedule
For remote indexing and request work, with the security expectations and the non-exempt timekeeping rules stated up front.
Lead Clerk / HIM Coordinator
Owns the function
For the person who runs the queue, the retention schedule, and audit response, with an honest note on why a lead title is not an exemption.
Template 1: Medical Records Clerk (Clinic)
The standard multi-provider clinic role, with chart maintenance, release of information, and compliance duties written as separate blocks.
Medical Records Clerk Job Description (Clinic)
MEDICAL RECORDS CLERK JOB DESCRIPTION
Practice: __ ([City, State])
Department: [Health Information / Medical Records / Front Office]
Reports to: [Practice Manager / Privacy Officer / HIM Supervisor]
[Practice Name] is a [specialty] clinic in [City, State] with [number] providers
across [number] locations. We use [EHR name] and keep [electronic only / hybrid
paper and electronic] charts. We are hiring a Medical Records Clerk to keep the
chart room accurate and to handle records requests on time.
POSITION SUMMARY
The Medical Records Clerk maintains patient charts in [EHR name], indexes
incoming clinical documents to the correct patient and encounter, processes
release of information requests within legal deadlines, and protects patient
health information under HIPAA and clinic policy.
KEY RESPONSIBILITIES
Chart maintenance
•Create, update, and retire patient records in [EHR name]
•Index incoming faxes, labs, imaging, consult notes, and outside records to the
correct patient, encounter, and document type
•Run daily work queues for unindexed documents and unsigned notes
•Merge duplicate patient records under the approved resolution process
•Track deficient or incomplete charts and follow up with providers
•Prepare charts and prior records for upcoming visits and referrals
Release of information
•Log every request for records with date received, requester, and scope
•Verify the identity and authority of the requester before any disclosure
•Confirm that requests from third parties carry a valid written authorization
•Release only the minimum necessary information for the stated purpose
•Meet the response deadline on every patient access request and document any
extension in writing
•Calculate and collect permitted fees under clinic policy
•Route subpoenas, court orders, and law enforcement requests to the [Privacy
Officer / Practice Manager] without releasing anything first
Compliance and records handling
•Follow clinic HIPAA policies and complete assigned privacy training
•Report any suspected privacy incident to the Privacy Officer immediately
•Keep the records area secured, and store and destroy records per policy and
state retention rules
•Maintain the request log and disclosure accounting used in audits
REQUIRED QUALIFICATIONS
•High school diploma or equivalent
•[Number] year(s) of medical records, front office, or clinic administrative
experience
•Working knowledge of medical terminology and clinical document types
•Comfort with an EHR and general computer skills
•Accuracy under volume; this role is judged on indexing errors, not speed alone
•Must complete HIPAA training before being granted access to patient records
Preferred
•Experience with [EHR name]
•Release of information experience in a clinic or hospital setting
•[RHIT / records or health information credential] preferred, not required
COMPLIANCE NOTE (read before posting)
This role is non-exempt under the Fair Labor Standards Act: it is hourly, hours
must be tracked, and overtime is owed past forty hours in a workweek. Records
access is granted on a minimum necessary basis and only after training. Patient
access requests carry a statutory response deadline and a limited, cost-based
fee ceiling. Confirm your state medical record retention period and any state
law that gives patients faster access or lower fees than federal law. This is
general information, not legal advice.
EEO STATEMENT
[Practice Name] is an equal opportunity employer and provides reasonable
accommodations for the essential functions of this role.
COMPENSATION AND HOW TO APPLY
Compensation: $_ per hour, [benefits summary], [schedule]
To apply, email __ with your resume.
Template 2: Medical Records Clerk, Small or Solo Practice
For the practice where one person owns the chart room and covers the front desk. If the balance tips toward reception and scheduling, the medical secretary templates describe that job more honestly.
Medical Records Clerk, Small or Solo Practice
MEDICAL RECORDS CLERK JOB DESCRIPTION (SMALL OR SOLO PRACTICE)
[Practice Name] receives [volume] records requests per [week / month] from
patients, other providers, attorneys, insurers, and disability programs. This
role exists to process those requests correctly and on time, and to keep the
practice out of the enforcement statistics.
POSITION SUMMARY
The ROI Specialist receives, validates, and fulfills requests for protected
health information, verifies requester identity and authority, applies the
minimum necessary standard, tracks statutory response deadlines, and maintains
the disclosure log.
KEY RESPONSIBILITIES
Intake and validation
•Log every request on receipt with date, requester, patient, and scope
•Verify the identity of the requester and, for personal representatives, the
legal authority to act for the patient
•Confirm that third-party requests carry a valid, signed authorization with all
required elements and an unexpired date
•Return incomplete or invalid authorizations with a written explanation
Fulfillment
•Determine what falls inside the designated record set for the request
•Release only the minimum necessary information for the stated purpose
•Provide records in the form and format requested when readily producible
•Meet the response deadline on patient access requests, and issue a written
extension notice with a reason and a completion date when needed
•Calculate permitted fees under the practice fee schedule and inform the
requester in advance
•Send records through approved secure channels only
Escalation and records
•Route subpoenas, court orders, and law enforcement requests to the Privacy
Officer before any release
•Escalate requests involving substance use disorder treatment records, mental
health notes, HIV status, or minors under a parent access question
•Maintain the disclosure accounting and the request log for audits
•Report any wrong-patient send or misdirected fax immediately
REQUIRED QUALIFICATIONS
•High school diploma or equivalent
•[Number] year(s) of release of information or medical records experience
•Demonstrated knowledge of HIPAA authorization requirements and the patient
right of access
•Precision with names, dates of birth, and document scope
•Must complete HIPAA training before being granted access to patient records
Preferred
•[RHIT or health information credential]
•Experience with an ROI tracking system or [EHR name] records module
COMPLIANCE NOTE
Patient access requests carry a federal response deadline with one written
extension available, and the fee a practice may charge for a patient's own
records is limited to a reasonable, cost-based amount. Requests routed to third
parties on a signed authorization sit outside that fee limit. A subpoena is not
a court order and does not by itself permit release. Substance use disorder
treatment records carry stricter consent rules than HIPAA. Several states also
set faster deadlines or lower fees than federal law, and the stricter rule wins.
This is general information, not legal advice.
EEO STATEMENT
[Practice Name] is an equal opportunity employer and provides reasonable
accommodations for the essential functions of this role.
COMPENSATION AND HOW TO APPLY
Compensation: $_ per hour, [benefits summary], [schedule]
To apply, email __ with your resume.
Template 4: Medical Records Clerk, Scanning and Chart Prep
For conversions and hybrid charts: prep, scan, index, quality check, chain of custody, and approved destruction. The general office version of this work lives in the file clerk templates.
Medical Records Clerk, Scanning and Chart Prep
MEDICAL RECORDS CLERK JOB DESCRIPTION (SCANNING AND CHART PREP)
[Practice Name] runs an electronic chart in [EHR name] and processes records
requests through [system]. This role works remotely from [approved states], on a
set schedule that overlaps clinic hours, with all work performed on a
practice-issued device.
POSITION SUMMARY
The Remote Medical Records Clerk indexes incoming clinical documents, processes
release of information requests, and maintains chart completeness, working
entirely inside approved systems on a practice-issued device.
KEY RESPONSIBILITIES
•Work the document indexing queue to a daily zero-backlog target
•Process records requests end to end and track response deadlines
•Verify requester identity and authorization before any disclosure
•Request outside records for new and referred patients
•Flag chart deficiencies and follow up with providers by [channel]
•Attend a daily [stand-up / check-in] and respond in [messaging tool] within
[time] during scheduled hours
•Record all working time accurately in [timekeeping system]
REMOTE WORK AND SECURITY REQUIREMENTS
•Work only on the practice-issued device through the approved connection
•Work in a private space where screens and conversations are not visible or
audible to anyone else in the household
•No printing, no personal cloud storage, no personal email for patient
information, and no photographs of screens
•Lock the screen whenever you step away
•Broadband meeting [speed] and a working headset
•Report a lost or stolen device or a suspected privacy incident immediately
REQUIRED QUALIFICATIONS
•High school diploma or equivalent
•[Number] year(s) of medical records or release of information experience;
remote records work is not an entry-level assignment here
•Demonstrated self-management and written communication
•Residence in [list of approved states]
•Must complete HIPAA training before being granted access to patient records
COMPLIANCE NOTE
Remote records work is legal and common, and it moves the risk rather than
removing it. Grant access through the practice device and approved systems only,
and treat the home workspace as an extension of the records room. Non-exempt
remote employees must record all hours worked, including time before and after
the scheduled shift, and overtime is owed past forty hours in a workweek.
Employing someone in another state can create payroll tax, paid leave, and wage
notice obligations in that state, so approve the state before you make the
offer. This is general information, not legal advice.
EEO STATEMENT
[Practice Name] is an equal opportunity employer and provides reasonable
accommodations for the essential functions of this role.
COMPENSATION AND HOW TO APPLY
Compensation: $_ per hour, [benefits summary], [schedule and time zone]
To apply, email __ with your resume.
Template 6: Lead Medical Records Clerk / HIM Coordinator
For the person who owns the queue, the retention schedule, and audit response. If the scope is really the whole practice, the medical office manager templates are the better starting point.
Lead Medical Records Clerk / HIM Coordinator
LEAD MEDICAL RECORDS CLERK / HIM COORDINATOR JOB DESCRIPTION
Practice: __ ([City, State])
Reports to: [Practice Manager / Privacy Officer]
Employment type: Full-time, onsite
FLSA status: Non-exempt unless the practice can support an exemption on duties
Compensation: $_ per hour
ABOUT THIS ROLE
[Practice Name] needs one person who owns the health information function: the
chart room workflow, the records request queue, the retention schedule, and the
day-to-day privacy practices that keep the practice audit-ready.
POSITION SUMMARY
The Lead Medical Records Clerk coordinates the records team, sets and monitors
turnaround standards, handles escalated and complex requests, and works with the
Privacy Officer on policy, training, and audit response.
KEY RESPONSIBILITIES
•Coordinate daily work assignments and coverage for the records function
•Monitor request turnaround against the response deadline and report metrics to
[Practice Manager] [weekly / monthly]
•Handle escalated requests: attorney demands, disputed authorizations, personal
representative questions, and record amendment requests
•Own the retention schedule and approve destruction batches
•Maintain the disclosure accounting and pull records for audits
•Write and update records workflow procedures with the Privacy Officer
•Train new records staff and refresh the team on policy changes
•Manage the release of information fee schedule and its documentation
•Serve as the records point of contact during an EHR change or migration
REQUIRED QUALIFICATIONS
•High school diploma or equivalent; associate degree preferred
•[Number] years of medical records or health information experience, including
release of information
•Working knowledge of HIPAA authorization, access, and minimum necessary rules
•Experience training or coordinating other staff
•Must complete HIPAA training before being granted access to patient records
Preferred
•[RHIT or health information credential]
•Experience with an EHR migration or a records audit
COMPLIANCE NOTE
Do not assume a lead title makes this role exempt. An exemption turns on actual
duties and a salary that meets the federal floor, and coordinating a queue while
doing the same records work as the team usually does not clear that bar. When in
doubt, classify as non-exempt, track hours, and pay overtime. If this person is
your practical privacy contact, put that in writing along with the formal
Privacy Officer designation, and document the training that supports it. This is
general information, not legal advice.
EEO STATEMENT
[Practice Name] is an equal opportunity employer and provides reasonable
accommodations for the essential functions of this role.
COMPENSATION AND HOW TO APPLY
Compensation: $_ per hour, [benefits summary], [schedule]
To apply, email __ with your resume.
HIPAA Duties to Write Into the Job
Four HIPAA obligations belong in the job description itself rather than in a policy binder the clerk reads once. They are the deadline, the minimum necessary standard, authorization validation, and the training sequence that has to happen before records access is granted.
The access clock starts on receipt
Under the HIPAA right of access at 45 CFR 164.524, a practice must act on a patient’s request for their own records no later than 30 calendar days from receipt. One extension of up to 30 additional calendar days is available, and only if the practice gives the patient a written statement of the reason for the delay and the date it will complete the request, inside that first 30-day window. The Department of Health and Human Services describes the 30 calendar days as an outer limit and encourages covered entities to respond as soon as possible. Practically, this means the request has to be logged the day it arrives, not the day someone opens the folder. Several states set shorter deadlines, and the stricter rule applies. Write the deadline into the job description so the person doing the work knows the clock exists.
Minimum necessary, and its exceptions
The minimum necessary standard at 45 CFR 164.502(b) requires reasonable efforts to limit the use and disclosure of protected health information to the least amount needed for the purpose, and it applies to how much of the record a clerk can see internally as well as what goes out the door. The exceptions matter just as much: minimum necessary does not apply to disclosures to or requests by a health care provider for treatment, to disclosures to the patient, to uses or disclosures made under a valid authorization, or to disclosures required by law. That is why a records clerk can send a full chart to a treating specialist without trimming it first. An attorney request is limited by a different mechanism: the authorization itself sets the scope, so a form asking for two visit dates does not permit sending the whole chart, and releasing beyond what the authorization describes is an impermissible disclosure. Give the role a written scope of access rather than blanket EHR permissions.
Authorization is not the same as a request
A patient asking for their own records is exercising the right of access and does not need to fill out an authorization form. A third party asking for the same records needs a valid HIPAA authorization signed by the patient, with the core elements listed at 45 CFR 164.508: a specific description of the information, who may disclose it, who may receive it, the purpose, an expiration date or event, the patient signature and date, and the required statements about revocation and redisclosure. Missing elements make the authorization invalid, and releasing on an invalid authorization is an impermissible disclosure. Train the clerk to check the form against a written checklist and to return incomplete forms in writing rather than calling the requester and taking a verbal fix.
Training first, access second
HIPAA requires a covered entity to train every workforce member on its privacy policies and procedures as necessary and appropriate for the person’s job, and to train new workforce members within a reasonable period after they join, under 45 CFR 164.530(b). The rule also requires documentation of that training, and 45 CFR 164.530(j) requires the documentation be kept for six years from creation or last effective date, whichever is later. For a records clerk the practical sequence is simple and worth writing into the offer: privacy training and a signed confidentiality acknowledgment come before the EHR credentials are issued, not during the first busy week. Auditors ask for the training record and the access grant date, and the order of those two dates is the answer.
Two more belong in the onboarding checklist rather than the posting. Breach notification runs on its own clock: individuals must be notified without unreasonable delay and no later than 60 days after discovery, and breaches affecting fewer than 500 individuals are reported to the Secretary within 60 days after the end of the calendar year. And medical record retention is set by state law, separate from the six-year federal documentation requirement, so confirm your state period before anyone approves a destruction batch.
A Subpoena Is Not a Court Order
This is the trap a new records clerk walks into fastest. An attorney sends something official-looking on legal paper, the clerk assumes a legal document compels release, and the chart goes out without a valid authorization or the protections the rules require for litigation requests. Write one sentence into the job description: subpoenas, court orders, and law enforcement requests go to the privacy officer or practice manager before anything is released. Then make sure that person exists and is named. A clerk should never be the last check on a legal demand.
What to Pay a Medical Records Clerk
Benchmark the hourly rate against the federal occupation, then adjust down for a pure chart room role and up for release of information depth. The published median sits above what most clinics pay a records clerk, because the same occupation includes coders and credentialed health information staff.
National Wage Data for the Occupation
According to the Bureau of Labor Statistics Occupational Employment and Wage Statistics survey (May 2025), medical records specialists had a national median annual wage of $51,140, roughly $24.59 per hour, with the lowest 10 percent earning under $37,000 and the highest 10 percent over $81,150 (U.S. Bureau of Labor Statistics, OEWS occupation profile).
Reference point
Figure
How to use it
Occupation median (BLS OEWS, May 2025)
$51,140 per year
Ceiling reference; coders inside the occupation pull it upward
Lowest 10 percent
Under $37,000 per year
Closer to an entry-level clinic clerk with no release duties
Highest 10 percent
Over $81,150 per year
Credentialed health information staff, not chart room clerks
Median hourly equivalent
About $24.59 per hour
Post an hourly rate; the role is non-exempt
Projected growth (BLS, 2024 to 2034)
About 7 percent
Roughly 14,200 openings a year across the occupation
Overtime
1.5 times the regular rate past 40 hours
Budget for backlog weeks, conversions, and audit response
Pay a premium for two things specifically: fluency in your EHR, which removes weeks of ramp, and genuine release of information experience, which is scarcer than general records experience and carries the compliance risk. Publish a good-faith range where pay transparency laws apply.
Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
A medical records clerk is non-exempt in almost every case: hourly, with hours tracked and overtime owed past forty hours in a workweek. Records work is production and clerical work, not the exercise of independent judgment on matters of significance that the administrative exemption requires.
The federal salary floor for the white-collar exemptions is $684 per week, or $35,568 a year, after the 2024 overtime rule was vacated and then formally rescinded through a Department of Labor technical amendment in May 2026. Clearing that floor does not create an exemption on its own, and neither does a lead title. Our breakdown of exempt versus non-exempt classification works through both tests.
Two hour-tracking traps show up in records roles. Backlog weeks and EHR conversions generate real overtime that gets waved off as catching up, and remote clerks answer messages before and after the scheduled shift. Both are compensable hours worked. Say so in the posting so nobody treats unpaid catch-up as normal.
Hiring for the Chart Room Without an HR Department
Records hiring in a small practice fails in three predictable places: the job was never defined, requests age out quietly, and system access gets granted before privacy training happens. Each has a fix that costs almost nothing.
The records job was never actually defined, it just accumulated
In most clinics the records function grew out of whoever had a free afternoon. Someone at the front desk started indexing faxes, then started answering attorney letters, then became the person who knows where the old paper charts live. Nothing about that arrangement is written down, so when the person leaves, the practice discovers it cannot describe the job it is trying to replace. Writing the job description is the fix and the audit at the same time: list the document types that arrive, the systems they land in, the request types you receive, and who signs off on the hard ones. Half the value shows up before you post anything, because you find the steps that only lived in one person’s head.
Requests sit in a folder and the deadline runs out quietly
The records request deadline is the single most common failure point in a small practice, and it fails silently. A letter arrives, it goes into a tray, the person who handles it is out for a week, and by the time anyone looks the response window is mostly gone. The Office for Civil Rights has closed more than fifty enforcement actions under its Right of Access Initiative, and a recurring pattern is a small provider that simply never responded rather than one that refused. Put a dated log in the job description as a named duty, give the role authority to escalate anything at risk, and review the open queue on a fixed day each week. A log costs nothing and is the first thing anyone asks to see.
Access gets granted on day one and training happens whenever
Clinics are short-staffed, so the new records clerk gets EHR credentials on the first morning and privacy training gets scheduled for later. That order is backwards and it is exactly what an audit surfaces, because the training date and the access grant date are both timestamped. FirstHR was built for this sequence in a practice without an HR department. The onboarding wizard runs the same steps for every hire, training modules deliver privacy and records orientation before access is issued, built-in e-signature captures the confidentiality acknowledgment and the handbook sign-off, and document management stores training records and credential copies against each employee profile with renewal dates attached. Applicant tracking is coming soon to FirstHR. Note that FirstHR is an onboarding and HR platform, not a payroll provider.
Screen for precision rather than speed. A short practical exercise beats an interview question: hand candidates a stack of sample documents with realistic name and date-of-birth near-matches, and see who catches the mismatch. Pair it with a background check appropriate to a role with full access to patient information, then run a written onboarding checklist so training, acknowledgments, and access grants happen in the right order.
Key Takeaways
A clinic medical records clerk does two different jobs: indexing documents into the correct chart, and releasing records correctly, and the posting should describe them as separate duty blocks.
Patient access requests carry a 30 calendar day federal deadline under 45 CFR 164.524, with one extension of up to 30 more days available only with a written reason and completion date inside the first window.
A patient asking for their own records does not need an authorization form; a third party does, and it must carry every required element under 45 CFR 164.508.
Subpoenas, court orders, and law enforcement requests go to the privacy officer before any release, and that escalation duty belongs in the job description itself.
The national median for the occupation was $51,140 a year, about $24.59 per hour (BLS OEWS, May 2025), but coders inside the same occupation pull that number above a typical chart room rate.
The role is non-exempt and hourly, so track hours including remote catch-up work, and pay overtime past forty hours in a workweek.
Privacy training has to land before EHR credentials do, and an auditor can see both dates. FirstHR runs the same onboarding sequence for every hire, with training modules before access, e-signature for the confidentiality acknowledgment, and document storage that keeps training records against each employee profile. Applicant tracking is coming soon to FirstHR.
Frequently Asked Questions
What does a medical records clerk do in a clinic?
A medical records clerk maintains patient charts and handles requests for copies of them. In a clinic the job splits into two halves. The first is chart maintenance: indexing incoming faxes, labs, imaging, and outside records to the correct patient and encounter, working the unindexed document queue, merging duplicate patient records, chasing incomplete charts, and pulling prior records ahead of visits and referrals. The second is release of information: logging every request, verifying who the requester is and whether they have authority, checking authorizations, releasing only what the request covers, tracking the response deadline, and escalating subpoenas and court orders instead of answering them. Smaller practices add front desk coverage on top. The role is administrative rather than clinical, but a misindexed document is both a privacy problem and a patient safety problem, so accuracy matters more than volume.
What should a medical records clerk job description include?
Seven things, in this order. Name the practice, the specialty, the number of locations, and your EHR by name, because candidates screen on the system they already know. State whether charts are electronic, paper, or hybrid. Separate chart maintenance duties from release of information duties, since they use different skills. State the release deadline and the escalation rule for subpoenas and court orders. Mark the FLSA classification as non-exempt with an hourly rate or a good-faith range. Write privacy training before records access as a condition of the role, not a nice-to-have. Close with the equal opportunity statement, a named person to apply to, and a deadline. The six templates on this page follow that structure, so the only parts you rewrite are the practice-specific fields in brackets.
How much does a medical records clerk make?
According to the Bureau of Labor Statistics Occupational Employment and Wage Statistics survey (May 2025), medical records specialists, the federal occupation that covers this work, had a national median annual wage of $51,140, about $24.59 per hour, with the lowest 10 percent under $37,000 and the highest 10 percent over $81,150. Read the median as a ceiling reference rather than a target for a clinic chart room, because the same occupation includes medical coders and credentialed health information staff who pull the middle upward. A records clerk without coding duties usually sits in the lower half of that spread, with release of information experience, hybrid paper conversions, and a lead role moving pay up. Employment in the occupation is projected to grow about 7 percent from 2024 to 2034, with roughly 14,200 openings a year. Post a real hourly range and check current market data for your area.
Is a medical records clerk exempt or non-exempt under the FLSA?
Non-exempt in almost every case, meaning hourly, with hours tracked and overtime owed past forty hours in a workweek. The white-collar exemptions require both a duties test and a salary at or above the federal floor, which the Department of Labor restored to $684 per week, or $35,568 a year, after the 2024 overtime rule was vacated and then formally rescinded in May 2026. Records work is production and clerical work rather than the exercise of independent judgment on matters of significance, so the administrative exemption is a poor fit even when the pay clears the salary floor. A lead clerk title does not change the analysis by itself. Classify on the actual duties, track hours honestly including any work done at home, and remember that some states set their own higher salary thresholds and daily overtime rules. This is general information, not legal advice.
How long does a clinic have to respond to a records request?
Thirty calendar days from receipt, under the HIPAA right of access at 45 CFR 164.524. A practice that cannot meet that deadline may take one extension of up to thirty additional calendar days, but only if it gives the patient a written statement inside the first thirty days explaining the reason for the delay and the date it will complete the request. The Department of Health and Human Services treats thirty days as an outer limit rather than a target. Several states require a faster response, and where state law is stricter, state law applies. Denials also have to be written and delivered inside the same window. The practical consequence for a clinic is that requests must be logged on arrival with a due date attached, because the clock runs from receipt regardless of who is out that week. This is general information, not legal advice.
What is the difference between a medical records clerk and a medical coder?
A records clerk maintains the record; a coder translates it into billable codes. The clerk indexes documents to the right patient and encounter, keeps charts complete, and controls disclosure of protected health information to patients, providers, attorneys, and payers. The coder reads clinical documentation and assigns diagnosis and procedure codes that drive reimbursement, which requires code set knowledge and usually a certification. Both sit inside the same federal wage occupation, medical records specialists, which is why national salary figures look higher than what a clinic chart room typically pays. Hire for different signals: precision, follow-through, and comfort with rules for a records clerk, and code accuracy testing for a coder. Small practices sometimes combine the two, and if you do, say so in the posting and pay for the coding skill rather than hoping it comes free.
Do I need a separate release of information role, or can one clerk do everything?
One clerk can do everything in a small practice, and most do. The question is volume and risk, not headcount philosophy. If records requests arrive occasionally and mostly come from patients and other providers, a single clinic clerk template covers it, with a written escalation path to the privacy officer for anything unusual. Split the role once attorney, insurer, and disability requests become regular, because those carry authorization validation, fee calculation, and scope decisions that reward a specialist and punish improvisation. The middle path many clinics take is one clerk who owns both, plus a lead or practice manager who reviews every third-party release before it goes out. Whatever you choose, write it down: the failure mode is not a bad decision, it is nobody knowing who decides. Applicant tracking is coming soon to FirstHR.
