Where do I Find Medical Record Retention Laws for My State?

A Wooden Judge Gavel And Stethoscope On A Medical Chart. Medical

Need to meet EMR medical retention mandates?

Most healthcare organizations are aware that records must be retained for HIPAA purposes for six years from the date of its creation or the date it was last in effect. What may be less commonly known, however, is that each state determines the laws for its jurisdiction. The length of time states require records to be retained varies from as short as five years to as long as ten. For states requiring less than six years, health organizations must still retain HIPAA information for six years.

A variety of factors impact medical record retention regulations. They vary depending on the type of patient with different rules for adults and minors. For patients under 18, the records must be retained for a specified length of time after the age of majority. Some states, such as Oklahoma and New York, have requirements for records of deceased patients as well. Certain states also have differing laws for medical practices and hospitals. It is important to note that accrediting agencies also have separate regulations that health organizations should understand and follow.

To find the medical record retention regulations for your state, consult this government table provided by HealthIT.gov which details the conditions for record retention. Since the laws can be modified by the state legislature, check regularly to make sure that new legislation is not being considered on record retention. If you have questions, refer to the HealthIT.gov website for local representatives and common questions.

When determining how to comply with state regulations, be sure to carefully consider your strategy for retaining the data. Some retention options include:

  • maintaining the legacy system (which can be costly)
  • EHR data conversion – converting the data into your go-forward system (which can be costly and complex)
  • printing/scanning the records (which is labor intensive)
  • migrating and storing discrete data elements in an electronic data archive

Many health organizations choose archiving because of the long term return on investment and ease of retrieving the records.  Go here to learn more about EMR archiving and to get tips on creating a medical record retention policy for your healthcare organization.

Medical Record Retention Laws by State

Rollover each state for suggested adult and minor medical record retention requirements.

{{ tooltip.state }}

Adult Patients: {{ tooltip.adult ? tooltip.adult : 'No specific information found' }}

Minor Patients: {{ tooltip.minor ? tooltip.minor : 'No specific information found' }}

Download: State Retention Policy Laws Reference

Editor’s Note: This blog has been updated from a post in 2015.

Medical Record Retention Laws
This information is intended to serve as a starting point for investigating medical record retention laws in your state. It is important to note the laws govern in some states govern hospitals and doctors together and in some states separately. This differentiation was noted where this information was evident.
The contents of this blog are intended to convey general information and not to provide legal services or opinions. Organizational Policies and Procedures should not be created relying on information provided in this blog. The information on this blog post may not reflect the most current statutes, regulations or legal developments. An attorney should be contacted for advice on specific legal issues.
This was last updated February 2020.

Visit Our Resource Center

Feb 15 2020

Ready to learn more?

Contact us today to learn more about our healthcare data management solutions.

First Name *
Last Name *
Email *

Healthcare IT tips, guides, news & more delivered to your inbox

Sign me up