If patients request copies of their medical records as permitted by the Privacy Rule, they may be required to pay for the copies. The covered entity may impose reasonable, cost-based fees. The fee may include only the cost of copying (including supplies and labor) and postage, if the patient requests that the copy be mailed 10. The fee may not include costs associated with searching ….