How to Share GLP-1 Records With Your Primary Care Doctor

By WPG Research TeamPublished May 16, 2026Updated May 16, 2026

Last verified: May 16, 2026. Informational guide. Not medical or legal advice.

Affiliate disclosure: Some providers mentioned on this page may have affiliate relationships with our parent site. That doesn’t affect the records-request instructions, legal information, or safety information here — those are verified against public provider policies and primary federal sources.

If you searched how to share GLP-1 records with your primary care doctor, here’s the short version: send three things — what you’re taking, who prescribed it, and any recent labs — through your PCP’s patient portal, a MyChart “Share Everywhere” code, or a written records request to your telehealth provider. You’re not confessing anything. You’re updating a medication list.

One thing most pages skip: your PCP might already see some of your GLP-1 information through electronic record sharing — but assuming they do is risky. We’ll cover that below.

Pick your situation — jump to the right answer

Your situation	Best next step
I already have PDFs, screenshots, or a label photo	Send a portal message with the one-page summary
The GLP-1-related record is already in my MyChart	Try Share Everywhere first
My online provider needs to send official records	Use the formal HIPAA request
I'm nervous my doctor will judge me	Use the medication-update script
I have surgery or a procedure soon	Read the surgery section first
I'm on a compounded GLP-1	Read the compounded section first

Your rights, in 30 seconds

Your right	What it means	Source
30-day response	A HIPAA-covered provider must act on your records request within 30 calendar days (one 30-day extension allowed with written reason)	HIPAA, 45 CFR §164.524(b)(2)
Electronic format	You can ask for records as a PDF or electronic file, not just paper	HIPAA right of access
Patient-directed delivery	You can tell the provider to send records straight to your PCP	HIPAA, 45 CFR §164.524(c)(3)(ii)
No blocking allowed	Information blocking — practices that interfere with electronic access to your records — is prohibited	21st Century Cures Act, 45 CFR Part 171

Sources: U.S. Department of Health and Human Services (HHS Office for Civil Rights) and the Office of the National Coordinator for Health IT.

Can my doctor already see that I’m on a GLP-1?

Short answer: Sometimes — but you should never assume it. Your PCP may see outside records through an electronic health record (EHR) exchange, a pharmacy fill feed, or a shared portal connection. But cash-pay fills, compounded GLP-1s, and many telehealth-only prescriptions often don’t show up automatically in your PCP’s chart.

GLP-1 visibility matrix

Visibility path	Can appear automatically?	What has to be true	Why it may fail
Patient-uploaded portal message	Always (when you do it)	You upload records or send a message	You don't send it
MyChart "Share Everywhere"	Only when you generate a code	The relevant record is in your MyChart; you generate and share the temporary code	Code expires; only shows what's in MyChart; doesn't permanently import records
Care Everywhere / Carequality / CommonWell EHR exchanges	Sometimes	Both systems participate in the same network; your identifying details match; any required consent is captured	Non-participating systems; identity mismatches; consent gaps
Surescripts medication history feed	Sometimes	Your pharmacy participates in Surescripts; your PCP's office queries the feed	Pharmacy isn't connected; office doesn't pull the feed
Insurance / PBM claims feed	Sometimes	You used insurance; the PCP's office queries the pharmacy benefit feed	Cash-pay; pharmacy not connected
Compounded pharmacy fills	Rarely	The 503A or 503B pharmacy sends fill data to a connected network	Most compounders aren't on mainstream pharmacy data exchanges

When your GLP-1 may not show up automatically

Cash-pay fills. A cash-pay prescription can still appear if your pharmacy sends fill data through a network like Surescripts, but you can’t count on it — losing the insurance-claim signal removes one of the main visibility paths.
Compounded GLP-1s. Compounded products are dispensed by pharmacies that often aren’t connected to mainstream pharmacy data exchanges.
Telehealth-only prescribers with no EHR connection. Some online providers maintain their own internal records and don’t participate in Care Everywhere, CommonWell, or Carequality.
Identity mismatches. A different name, address, or date of birth across providers will quietly break record sharing.

What to do: Don’t gamble. Assume your PCP doesn’t have your GLP-1 records and send a short update yourself. Even if some of it is already in their system, a clean one-page summary makes their visit prep easier and reduces the risk of a medication-reconciliation error.

What GLP-1 records does your PCP actually need?

Short answer: Not everything. Your PCP needs the facts that change clinical decisions: what you’re taking, who prescribed it, where it’s filled, any recent labs, your side effects, your other medications, and any upcoming procedures.

The minimum record set

Medication name. Semaglutide, tirzepatide, liraglutide, orforglipron (Foundayo), or another GLP-1 — and whether it’s brand-name or compounded.
Label details, exactly as written. Strength or concentration, instructions, and any additives if compounded.
Start date and most recent dose-change date.
Prescriber name and clinic. And whether they have a direct contact your PCP can use.
Pharmacy name. Plus 503A or 503B status if compounded.
Recent labs. A1C if diabetes or prediabetes is in your history. Comprehensive metabolic panel or kidney function if available. Lipids if your plan includes cardiometabolic monitoring.
Side effects. Nausea, vomiting, diarrhea, constipation, abdominal pain, dehydration symptoms, low blood sugar symptoms, injection-site reactions.
Other medications. Especially insulin, sulfonylureas (glipizide, glyburide), oral contraceptives, and anything where absorption timing matters.

What to share by situation

Your situation	Records that matter most
Routine visit / new PCP / medication reconciliation	Prescription history, recent visit notes (last 6–12 months), current dose
Annual physical	Prescription history, last A1C/lipids, weight trend, any side effects
Upcoming surgery, endoscopy, or colonoscopy	Drug name, current dose, date of last dose, GI symptoms in the past 2 weeks, dose-escalation status
Transferring prescribing to PCP	Full dose-titration timeline, current dose, side effect log, insurance history, pregnancy/contraception status
Symptom workup (GI, gallbladder, pancreatitis flags, mood)	Timeline of symptoms vs dose changes, all visit notes mentioning side effects, prior lipase/amylase/glucose labs
Pregnancy planning	Current medication, last dose, prescriber contact, and contraception details. Wegovy/semaglutide labeling says to stop at least 2 months before a planned pregnancy. Zepbound/tirzepatide labeling says to discontinue when pregnancy is recognized and warns that oral hormonal contraceptives may be less effective for 4 weeks after starting or increasing the dose.

Why the details matter

GLP-1-related medicines — including GLP-1 receptor agonists like semaglutide and the new oral orforglipron, and dual GIP/GLP-1 receptor agonists like tirzepatide — affect care decisions because their FDA-submitted labeling flags several issues your PCP should know about: delayed gastric emptying, common gastrointestinal side effects, low blood sugar risk when combined with insulin or sulfonylureas, pancreatitis warnings, gallbladder warnings, and kidney injury risk from dehydration.

Foundayo (orforglipron) was approved by the FDA on April 1, 2026, as the first once-daily oral small-molecule GLP-1 receptor agonist for chronic weight management in adults with obesity or overweight with at least one weight-related condition.

Short answer: Most people use one of three routes — a portal message with attachments (fastest if you already have the records), a MyChart “Share Everywhere” code, or a formal HIPAA records request to your telehealth provider (slowest but most complete).

GLP-1 PCP record-sharing matrix

Route	Best for	What to send	Timing	Catch
PCP portal message + attachments	You already have PDFs, label photos, or screenshots	One-page summary + medication label + recent labs + visit note if available	Office-specific; often faster than a formal records request, but not federally guaranteed	Not every office accepts portal attachments; call to confirm
MyChart "Share Everywhere"	You have the relevant record in MyChart	Medications, allergies, conditions, test results, recent visits	Temporary access after you generate and share the code	Only shows what's in MyChart; doesn't permanently import the record
Provider-to-provider EHR exchange	Both organizations are on connected EHRs (Care Everywhere, Carequality, CommonWell)	Visit notes, meds, labs, diagnoses	Varies; may be automatic or office-initiated	Fails if systems don't connect or demographic details don't match
Formal HIPAA records request	Your online provider is slow, or your PCP wants official records	Written request naming the PCP, what records, the date range, your signature	No later than 30 calendar days for covered entities	You have to put it in writing — but the law is on your side
Telehealth provider support request	Your GLP-1 prescriber has a documented records process	Medical record, prescription history, visit summaries, lab orders	Provider-specific (see the verified table below)	Some require their own consent form
Pharmacy fill history	Your PCP needs proof of dispensed medication	Pharmacy label, fill history, drug name, strength, quantity, prescriber, pharmacy	Pharmacy-specific	Some pharmacy portals don't show 12+ months of history
Lab portal results	GLP-1 monitoring labs were done outside the PCP's system	A1C, CMP, kidney function, lipids, pregnancy test if applicable	Lab-specific; depends on when the lab releases results	Lab portals show results but not the clinician's interpretation

Sources: HHS Office for Civil Rights; 45 CFR §164.524; MyChart documentation; ONC patient access guidance.

How to send GLP-1 records through your PCP’s portal

Short answer: Open a portal message to your PCP, attach any records you already have, and use a short three-sentence note that frames this as a medication update — not a confession. Most offices will add the medication to your active list, scan the attachments, and either reply or flag it for your next visit.

The script — copy and paste this

Subject: Medication update — GLP-1 record summary Hi Dr. [Name], I'm updating my chart because I'm currently taking [medication name] prescribed by [provider/clinic] and filled through [pharmacy]. I've attached the prescription, visit note, and lab results I have available. Please add this to my active medication list and let me know if you'd like any labs, a visit, or anything else based on my history. Quick summary: • Medication: [name] • Strength (exactly as on the label): [text] • Start date: [date] • Most recent dose change: [date or "n/a"] • Prescriber/clinic: [name] • Pharmacy: [name] • Side effects: [none / list] • Upcoming surgery or procedure: [yes/no] • Other medications you should know about: [list or "see chart"] Thanks, [Your name]

Three things this script does well: it leads with “I’m updating my chart” (a medication update, not a request for approval), it’s short enough for the PCP to read in 20 seconds, and it ends with a clear ask.

If your portal won’t accept attachments

Call the office and ask: “What’s the best way to send outside medication records for continuing care?”
Common answers: a HIPAA-compliant fax line, a secure email address, or a paper drop-off.
Avoid sending sensitive medical details to a regular email unless the office confirms it’s their accepted process.

How to use MyChart Share Everywhere

Short answer: If the relevant GLP-1 record is in your MyChart account, you can generate a temporary share code that lets any provider view a subset of your record in any web browser — they don’t need to use MyChart themselves. It’s useful for a quick look, but it’s not the same as permanently transferring records into your PCP’s chart.

How it works

MyChart’s documentation describes Share Everywhere as a feature where a patient generates a share code that gives a care provider temporary access to the record in any web browser. The provider enters the share code and the patient’s date of birth to view the information and can write a note back to the patient’s care team. (MyChart documentation)

Step-by-step

Log into MyChart on your phone or laptop.
Find “Share Everywhere” in the menu (sometimes under “Sharing” or “Share My Record”).
Generate a share code. Tell MyChart who you’re sharing with.
Give the share code (and your date of birth, which they’ll be prompted to enter) to your PCP or office staff.
The code is temporary. It expires.

What Share Everywhere doesn’t solve

It only shows what’s already in your MyChart. If your GLP-1 was prescribed entirely through a non-Epic telehealth provider with no MyChart presence, Share Everywhere won’t surface it.
Some clinical notes (especially mental health and substance use treatment notes) may be excluded.
It’s a snapshot view, not a permanent transfer. If your PCP needs the record permanently in their own chart, you still need a portal message with attachments or a formal records request.

How to request records from your online GLP-1 provider

Short answer: Most major GLP-1 telehealth providers have a documented records-request path — usually a support email, an in-portal request form, or a privacy contact. The table below splits routes we verified against published provider policies as of May 16, 2026 from routes we have not yet verified.

Record-request routes we verified

Provider	Documented route	What the source says
Ro	Email Ro with your consent plus the receiving provider's name, address, and phone number	Ro's Consent to Telehealth states patients can have telehealth records sent to other providers by emailing Ro and providing consent plus provider details
Hims	Email [email protected] with "Medical Records Request" in the subject line	Hims support says patients can request medical records or prescriptions at any time and recommends sharing updates with a primary care provider
Hers Medical Groups	Submit a written request to the applicable Hers Medical Group at [email protected]	Hers Medical Groups' privacy notice says patients can request access to inspect or copy PHI in a designated record set
WeightWatchers Clinic / Sequence	Request an electronic or paper copy through WW privacy	WW's Notice of Privacy Practices says users can ask for a copy or summary of information, usually within 30 days, and a reasonable cost-based fee may apply
Noom	Contact Noom's privacy contact for access to PHI in your designated record set	Noom's HIPAA Notice says patients have the right to inspect and copy PHI in a designated record set, including medical and billing records
Form Health	Request records to be sent to your PCP through the Form Health app	Form Health's Informed Consent says patients sign a release allowing Form to obtain recent PCP records, and that patients can request records to be sent to a PCP through the app
Sesame	HIPAA / state-law access process via Sesame support	Sesame's provider terms state that individuals have a right to access PHI in a designated record set and that Sesame responds according to HIPAA and state law. Patient-facing request path warrants direct support verification for urgent needs.
PlushCare	Medical-record request through PlushCare-affiliated telehealth clinics	PlushCare's privacy page points patients to telehealth clinic Notices of Privacy Practices for record requests

Routes to verify before relying on them

Provider	Status
Eden, MEDVi, Henry Meds, Mochi Health, SHED, TrimRx, Found, knownwell	Patient-facing records-request route not yet verified for publish. Contact each provider’s support directly and reference your HIPAA right of access (45 CFR §164.524). We re-check this list quarterly.

What to ask for in your request

All clinical visit notes and consultation summaries from your start date forward
Complete prescription history (drug, dose, route, frequency, prescriber name and credentials, dispensing pharmacy, and 503A/503B status if compounded)
Any laboratory results, vital signs, or measurements they hold
Any care plan or treatment-goal documentation

The formal HIPAA records request — copy and paste

Short answer: If your online provider is slow or your PCP needs official records, send a written request that cites your HIPAA right of access. Under HIPAA, a covered provider has 30 calendar days to act on it, with one possible 30-day written extension. Use the template below.

The template

Subject: HIPAA Right of Access Request — Records Release To: [Provider name] Privacy / Medical Records Department I'm submitting a request under the HIPAA Privacy Rule's right of access (45 CFR §164.524). Please process any electronic health information access consistent with the information blocking regulations at 45 CFR Part 171, where applicable. Patient: [Full legal name] Date of birth: [DOB] Account email / patient ID: [Identifier] I'm requesting the following records from my designated record set: 1. All clinical visit notes and consultation summaries from [start date] to present 2. Complete prescription history, including drug name, dose, route, frequency, prescriber name and credentials, and the dispensing pharmacy (503A or 503B status if compounded) 3. Any laboratory results, vital signs, or measurements you hold 4. Any care plan or treatment-goal documentation Preferred format: PDF, delivered electronically to [email] or made available through my patient portal. Recipient: I'm requesting this for my own records and to share with my primary care physician, [PCP name], at [practice / fax / secure email]. Please send a copy directly to my PCP under 45 CFR §164.524(c)(3)(ii). Per 45 CFR §164.524(b)(2), please complete this request within 30 calendar days. If you need an extension, please notify me in writing within the initial 30-day period with the reason and the expected completion date. Thank you, [Patient name and signature] [Date]

Why this template works

It cites the specific federal rule, so the recipient knows you know your rights.
It names the recipient — your PCP — so the provider can ship records directly to them. Under HIPAA’s right of access, a patient can direct a covered entity to send PHI to a designated person or entity if the request is in writing, signed, and clearly identifies where to send it. (HHS guidance)
It states your preferred format. Under HIPAA, you can request electronic delivery if records are readily producible that way.

How long should this take?

Short answer: Under HIPAA, a covered provider must act on your records request within 30 calendar days, with one possible 30-day extension if they notify you in writing. Self-downloaded portal records are usually available the same day. Plan for the legal ceiling if your appointment is far out, and escalate by phone if it’s close.

The legal ceiling

HHS guidance is clear: a covered entity must act on an individual’s access request no later than 30 calendar days after receipt. If they can’t act in that time, they may take one additional 30-day extension — but only if they give you, within that first 30-day period, a written reason for the delay and the date they’ll complete the request. (HHS FAQ on access timing)

If you have a procedure scheduled in the next two weeks

Don’t use the 30-day timeline as your plan. Try the portal self-download first, then escalate by phone and reference your procedure date. Most teams move faster when there’s a clear clinical urgency.

If you’re heading into surgery, read this first

Short answer: Tell your surgical team and your anesthesiologist that you’re on a GLP-1, and put it in writing in your chart. Most patients can keep taking GLP-1 medication before surgery or a procedure, but the anesthesia and surgical team should screen for higher-risk situations and may use steps like avoiding solid food for 24 hours, a stomach ultrasound, full-stomach precautions, or postponement.

Why this matters

GLP-1 medications can delay gastric emptying — meaning food and liquid stay in your stomach longer than normal. Under anesthesia, that creates an aspiration risk (stomach contents going into your airway). The original 2023 American Society of Anesthesiologists guidance recommended holding GLP-1s before surgery; the 2024 multi-society update took a more nuanced position based on individual risk.

What the 2024 multi-society guidance actually says

In October 2024, the American Gastroenterological Association, American Society for Metabolic and Bariatric Surgery, American Society of Anesthesiologists, International Society of Perioperative Care of Patients with Obesity, and Society of American Gastrointestinal and Endoscopic Surgeons issued joint perioperative guidance for GLP-1 use. The ASA’s patient-facing summary explains that most patients can keep taking GLP-1 medications before surgery, but the surgical and anesthesia team should evaluate risk and may use steps such as avoiding solid food for 24 hours, ultrasound to check the stomach, full-stomach precautions, or postponement in higher-risk patients. For urgent or emergency procedures, anesthesia teams treat the patient as having a full stomach and manage accordingly.

What to send your surgical and anesthesia team

Drug name and current dose
Date of last dose
Whether you’re in dose escalation or maintenance
Any GI symptoms (nausea, fullness, vomiting) in the past two weeks
Prescriber name and contact

Send this through your surgical office’s portal a few days before the procedure. Don’t rely on a verbal mention at pre-op intake — get it in the chart.

If you’re using compounded semaglutide or compounded tirzepatide

Short answer: Share the pharmacy label, prescriber name, pharmacy name, and exact medication wording with your PCP. Compounded GLP-1 products are not FDA-approved and are not the same as branded medications like Wegovy or Zepbound, even when the active ingredient name is similar.

Why the distinction matters

Compounded medications are made by compounding pharmacies — either 503A pharmacies (which compound for individual patients with prescriptions) or 503B outsourcing facilities. They are not FDA-approved. The FDA does not review them for safety, effectiveness, or quality the way it does branded drugs. The FDA has stated that compounded GLP-1 drugs should not be marketed as the same as approved drugs.

On April 30, 2026, the FDA proposed excluding semaglutide, tirzepatide, and liraglutide from the 503B bulks list after finding no clinical need for outsourcing facilities to compound them from bulk substances. As of May 16, 2026, this is a proposed action — not a final rule — with a public comment deadline of June 29, 2026.

What to share with your PCP

Pharmacy name (and 503A or 503B status if you know it)
Prescriber or clinic
Exact medication wording from the label — concentration, instructions, and any additives (e.g., B12 is sometimes added to compounded semaglutide; your PCP should know)
Start date and dose history
Note that this is a compounded product, not an FDA-approved finished product

For more on compounded vs. FDA-approved GLP-1 medications, see our GLP-1 telehealth safety checklist.

What if you’re nervous your doctor will judge you?

This is the part of the conversation that keeps people searching at 11 p.m. So let’s deal with it directly.

Reframe before you walk in

The reframe: you’re updating a medication list, not confessing a sin. People share new medications with their PCPs all the time. Antibiotics from urgent care. Blood pressure pills from a cardiologist. Birth control from a gynecologist. Statins from a specialist. A GLP-1 from a telehealth provider is the same thing.

The opening line

“I’m updating my medication list because I started [medication] through [provider]. I wanted you to have the full picture for safety and follow-up.”

That’s it. No apology. No explanation of why you didn’t come to them first. Just a fact.

If the PCP pushes back

“I hear your concern. I’m not asking you to endorse every decision today. I’d still like the medication documented so you can make informed decisions about my labs, side effects, procedures, and interactions.”

This works because it separates two different conversations: “do you approve of this medication” (not the goal of this visit) from “do you have accurate information about my care” (the goal of this visit).

If the PCP refuses to discuss it at all

If your PCP won’t add the medication to your chart, won’t review your records, or treats you with hostility, that’s a signal worth taking seriously. This isn’t doctor shopping. It’s needing a collaborative care relationship. Many PCPs in 2026 are increasingly comfortable with GLP-1s as the medications have become standard care for weight, diabetes, and cardiovascular risk.

Context that might help

A 2025 survey by Omada Health of more than 2,000 U.S. primary care physicians found that many PCPs have concerns about third-party telehealth GLP-1 prescribing — particularly around overprescribing, continuity of care, incomplete medical history, drug interactions, and side-effect management. (Omada Health 2025 survey) The American Academy of Family Physicians has similarly published guidance encouraging open, nonjudgmental communication when patients are getting GLP-1s from outside providers.

Can your PCP take over GLP-1 prescribing?

Short answer: Sometimes, especially when the medication is FDA-approved and your PCP is comfortable managing the indication. Sharing records makes the conversation possible, but it doesn’t obligate your PCP to prescribe.

What sharing records can do

✓Help your PCP understand your treatment history
✓Avoid duplicate labs
✓Add the medication to your active list
✓Surface drug-interaction or side-effect concerns
✓Support future insurance appeals or specialist referrals
✓Help your PCP decide whether they're comfortable managing continuation

What sharing records can’t guarantee

✕Prescription continuation
✕Insurance approval
✕Your PCP agreeing with the outside provider's plan
✕Coverage for branded GLP-1s (a separate insurance fight)
✕A PCP being willing to manage a compounded medication

What makes a PCP more likely to take over prescribing?

Factor	More likely	Less likely
Medication type	FDA-approved (Wegovy, Zepbound, Ozempic, Mounjaro, Foundayo)	Compounded semaglutide or tirzepatide
Dose status	Stable maintenance dose	Active escalation
Lab data available	Recent A1C, CMP, lipids	No outside labs
Insurance status	Covered with prior authorization	Cash-pay with no coverage path
Side effects	Tolerated, controlled	Active GI issues, dehydration, or other complications
PCP comfort with weight medication	Manages obesity medicine routinely	Doesn't typically prescribe GLP-1s
Records quality	Clean handoff packet + visit notes	Fragmented or missing prescriber documentation

Compounded-to-branded transitions

If you’re on a compounded semaglutide or tirzepatide and want your PCP to take over, expect them to write a new prescription for an FDA-approved product if they take you on at all. Coverage will depend on your plan’s formulary and prior authorization rules. Your full dose history gives them a starting point, but your PCP or new prescriber still has to choose an FDA-approved product and dose using that product’s labeling and your clinical history.

What to do if your online provider stalls or refuses

Short answer: Put the request in writing, document everything, and escalate. If your provider doesn’t respond within 30 calendar days, doesn’t deliver records in your requested format, or denies access without a written explanation, you have three escalation paths: file a complaint with the HHS Office for Civil Rights, file a report with ONC’s Information Blocking Portal, or escalate to the relevant state medical board.

The follow-up after 7–10 days

“I’m following up on my medical records request submitted on [date]. Please confirm receipt and provide the expected completion date. This request is for continuing care with my primary care physician.”

Escalation steps

Ask for the privacy officer or medical records department directly. Many telehealth providers route initial requests through general support, which can be slower.
Re-send the written request with a date, destination, and the records you want. Reference HIPAA 45 CFR §164.524.
Ask for records to be released in pieces if a full release is delayed. You’re allowed to receive partial records as they become available.
File a complaint with HHS OCR. OCR handles HIPAA right-of-access complaints and has fined providers tens of thousands of dollars for repeated violations. (HHS OCR complaint portal)
File a report through ONC’s Information Blocking Portal. Under the 21st Century Cures Act, information blocking is prohibited. (ONC information blocking page)

Don’t wait for perfect records if care is needed. If your PCP appointment or procedure is soon, send what you have plus your one-page summary. Official records can follow later.

Your one-page GLP-1 PCP handoff sheet — print and fill

Short answer: A PCP visit is short. A one-page summary your doctor can scan in 30 seconds — with your medication, dose, prescriber, last dose date, side effects, and any safety-relevant notes — is the single most useful thing you can bring. Print this template, fill it in, and hand it to the front desk or upload it to the portal.

GLP-1 MEDICATION SUMMARY — FOR YOUR DOCTOR

Patient:

DOB:

Today’s date:

Current Medication

Drug: ☐ Semaglutide ☐ Tirzepatide ☐ Liraglutide ☐ Orforglipron (Foundayo) ☐ Other:

Type: ☐ FDA-approved brand:

☐ Compounded (pharmacy: 503A/503B: )

Strength (exactly as on label):

Dose / frequency:

Route: ☐ Subcutaneous injection ☐ Oral

Started: Last dose:

Prescriber & Pharmacy

Prescriber / clinic:

Pharmacy name:

Side Effects & Other Medications

Side effects:

Other medications:

Safety Notes

Upcoming surgery / procedure: ☐ Yes (date: ) ☐ No

Pregnancy planning: ☐ Yes ☐ No

Recent labs (A1C / CMP / lipids):

Please ask your doctor to: ☐ Add to med list ☐ Review labs ☐ Order new labs ☐ Discuss continuation

Or upload this page to your patient portal as a PDF

Legal background: HIPAA and the 21st Century Cures Act

HIPAA right of access

The HIPAA Privacy Rule gives individuals the right to inspect and obtain a copy of their protected health information in a covered entity’s designated record set. Under 45 CFR §164.524, a covered entity must act on an access request within 30 calendar days, with one possible 30-day extension. Under 45 CFR §164.524(c)(3)(ii), patients can direct the covered entity to send their records to a designated third party — including their PCP — with a written, signed request.

21st Century Cures Act — the electronic-access backstop

The Cures Act, signed in 2016, went into broader force in April 2021. It defines “information blocking” as a practice likely to interfere with the access, exchange, or use of electronic health information (EHI) — and prohibits it for covered providers, health IT developers, and health information networks. As of October 2022, the rule covers the entire electronic health information set. A portal-only workflow that blocks downloads, high fees, or extra procedural barriers may raise HIPAA right-of-access or information-blocking concerns depending on the facts. If a provider’s behavior crosses that line, you can report it through ONC’s Information Blocking Portal.

State law

Some states give you stronger or faster rights than HIPAA. California’s Confidentiality of Medical Information Act, for example, has additional protections. State laws can layer on top of HIPAA — they can’t take rights away.

What we actually verified

We built this page from primary federal sources, FDA-submitted drug labeling, EHR sharing documentation, published telehealth provider policies, and clinical society guidance.

What we verified directly

—HIPAA right of access rules — confirmed against HHS.gov Office for Civil Rights guidance and the eCFR text of 45 CFR §164.524
—21st Century Cures Act information blocking provisions — confirmed against HealthIT.gov / ONC documentation
—2024 multi-society perioperative GLP-1 guidance — confirmed against the published joint guidance from AGA, ASMBS, ASA, ISPCOP, and SAGES
—FDA-submitted drug labeling — confirmed against current labels on DailyMed for Wegovy/semaglutide and Zepbound/tirzepatide
—FDA compounding statements — confirmed against the FDA's April 30, 2026 proposed action
—Foundayo (orforglipron) approval — confirmed against the April 1, 2026 FDA press announcement
—MyChart Share Everywhere / Care Everywhere functionality — confirmed against MyChart.org documentation
—Telehealth provider records policies — confirmed against published policies for Ro, Hims, Hers Medical Groups, WeightWatchers, Noom, Sesame, Form Health, and PlushCare as of May 2026

What we didn’t verify

Universal provider response times. The 30-calendar-day HIPAA ceiling is the verified rule.
Patient-facing record-request routes for Eden, MEDVi, Henry Meds, Mochi Health, SHED, TrimRx, Found, and knownwell.
State-specific medical records laws beyond HIPAA.
Individual physician office policies (these vary widely).

Update cadence

Provider record-request routes: re-verified quarterly
FDA compounding status: re-verified monthly while policy is active
Drug labeling on DailyMed: re-checked quarterly
Surgery / anesthesia guidance: re-checked quarterly
HIPAA / Cures Act rules: re-checked semiannually

Last verified: May 16, 2026.

Frequently asked questions

Can my primary care doctor see my GLP-1 prescription automatically?

Sometimes — but not always. If both your PCP and your telehealth provider use compatible electronic record systems, some information can flow automatically through networks like Epic's Care Everywhere or via pharmacy-claim feeds. But cash-pay fills, compounded GLP-1s, and many telehealth-only prescriptions often don't appear in your PCP's chart. The safest move is to assume they don't have your records and send a short update yourself.

Do I have to tell my doctor I'm on Wegovy, Ozempic, or Zepbound?

For care purposes, yes — put it on your medication list. Your PCP can't manage anesthesia planning, drug interactions, pregnancy planning, gallbladder or pancreatitis symptom workups, or lab interpretation accurately without knowing what you're taking.

Can I just send screenshots of my telehealth portal?

Screenshots can help, but a pharmacy label, visit summary, lab result, or official record is better. Use a screenshot as a starting point and follow up with the official records.

What if I paid cash and my insurance was never involved?

Cash-pay medications are usually less visible to your PCP's office through automated medication histories — though they can still appear if your pharmacy participates in a network like Surescripts. Self-reporting is especially important.

Can my PCP call my GLP-1 provider directly?

They may be able to coordinate provider-to-provider for treatment purposes — HIPAA permits covered providers to share PHI for treatment without separate patient authorization in many situations. Office processes vary, and many PCP offices prefer the patient initiate the records request.

Do I need a HIPAA release form?

For a formal patient-directed transfer, use the provider's records release process. HIPAA's patient-directed-delivery right (45 CFR §164.524(c)(3)(ii)) lets you direct records to a third party with a written, signed request that identifies where to send them — no separate 'release form' required by federal law, though some providers ask for their own.

How long does a medical records request take?

HIPAA generally gives covered entities up to 30 calendar days, with one possible 30-day written extension if they explain the delay in writing.

What if my provider ignores my records request?

Follow up in writing, ask to be routed to the privacy officer or medical records department, keep copies of everything, and escalate to HHS OCR or ONC's Information Blocking Portal if needed.

Should I share compounded GLP-1 records differently?

Yes. Include the pharmacy label, prescriber, pharmacy name, exact medication wording (concentration, instructions, additives), and 503A/503B status. Compounded products aren't FDA-approved and aren't equivalent to branded medications even when the active ingredient name is similar.

Do I have to tell my surgeon or anesthesiologist too?

Yes. Planned surgery, endoscopy, colonoscopy, general anesthesia, or deep sedation should trigger a direct medication update to the procedure team, not just your PCP. The 2024 multi-society perioperative guidance is built around your surgical team having this information in advance.

Can my PCP make me stop taking my GLP-1?

Your PCP can advise you to stop, decline to prescribe or manage it themselves, document safety concerns, refuse to clear a procedure until the care team has a plan, or refer you elsewhere. If they recommend stopping for a clear clinical reason — a contraindication, planned pregnancy, serious side effect, or procedure risk — take that seriously and discuss it with your prescriber.

What if I'm switching PCPs?

Bring the same handoff sheet. Your new PCP needs the same information your old one did. If you can, transfer your full medical record at the same time so the GLP-1 history sits in context with the rest of your care.

A few last things

Sharing GLP-1 records with your primary care doctor isn’t a confession. It’s a medication update. The hardest part is usually the 30 seconds before you hit “send” on the portal message. Once that’s done, the rest is administrative.

Don’t assume your PCP can already see your GLP-1. Cash-pay, compounded, and telehealth-only prescriptions often don’t show up in their chart automatically.
Lead with facts, not apologies. “I’m updating my medication list” is the entire script.
You have legal rights. A HIPAA-covered telehealth provider has 30 calendar days to act on a records request, has to send records to your PCP if you ask, and can’t make access unreasonably hard.

If your visit is in the next two weeks, fill in the handoff sheet above, take a photo of your pharmacy label, screenshot any recent visit notes, and send a portal message tonight. The rest can follow.