Map Options
Federal requirements set a minimum of 6 years for both hospital and medical records. This is the basic HIPAA regulation, but some states do not use this as a guideline. Most states do adhere to this rule though, and often are more stringent or at par in terms of their legislature. Federal guidelines also set the basic structure for the necessary destruction of records, such as those that have to do with abortions, ambulatory services, rehabilitation, veteran affairs, diagnostics, and comprehensive outpatient facilities.
As with most healthcare requirements, there are general rules and guidelines that are set on a federal level to ensure each state can build upon this structure. Some states prefer to keep it simple and follow federal guidelines, while others have different interpretations or more stringent rules.
Connecticut, for instance, is much more stringent in its approach to the law. While certain states adopt the HIPAA guideline that 6 years is enough, Connecticut adopts the approach that medical records must be held for 7 years from the last date of treatment. If the person were to be deceased, then their records could be retained for 3 years before disposing of the information.
Hospital records are usually more uniform in their requirements, outlining a specific time and date. Many states, such as Connecticut, Illinois, and Louisiana require records to be held for up to 10 years after the patient is discharged, treated, or contacted. Other states, such as Hawaii, fully disclosed exactly what types of medical documentation should be on the record, and for how long. Full medical records must be kept at the hospital up to 7 years after the last entry of data, but basic information must be kept for up to 25 years following the final entry.
There are usually different retention periods for the records of minors. Many of these limits are tied to the age of the patient; most records will be retained until age 18, 19, or 21. Some states have higher limits, as high as 28 years in Colorado.
In some jurisdictions, medical doctors are allowed to practice their vocation as they see fit. Alabama stipulates that medical doctors must retain all medical records for as long as necessary to treat the patient, both for medical and legal purposes. This is an extremely vague interpretation that may be disputable in court. However, it allows medical professionals to properly utilize their expertise as to what standards and practices they can set for their clinic.
While it is extremely uncommon for a state not to directly specify a time frame, it does exist beyond Alabama. South Dakota is most vague, stipulating that records can be dismissed if they have become inactive, or when the whereabouts of the patient have become unknown to the physician.
New Mexico is another interesting case, which requires medical professionals to keep records for two years beyond the requirement of state insurance laws, and Medicaid and Medicare requirements. For minors, it is 2 years after the patient turns legal age, usually meaning 20 years of age. This is similar to Wyoming, where doctors must keep medical records for three years.
All retention times begin on the date upon which the recorded medical service was rendered. Retention times vary depending upon the age of the patient and whether the record is held by a doctor or a hospital.
State | Doctors For Adult Patients | Doctors For Minor Patients | Hospitals For Adult Patients | Hospitals For Minor Patients | Notes |
---|---|---|---|---|---|
Alabama | 5 years | 5 years | Doctors: As long as may be necessary to treat the patient and for medical legal purposes. [Ala. Admi... | ||
Alaska | 6 years | 6 years | 7 Years | 7 Years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 7 Years after... |
Arizona | 6 years | 6 years | 6 years | 6 years | Doctors: Adult patients: 6 years after the last date of services from the provider. Minor patients: ... |
Arkansas | 6 years | 6 years | 10 year | 2 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 10 years afte... |
California | 6 years | 6 years | 7 years | 7 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 7 years follo... |
Colorado | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 10 years afte... |
Connecticut | 7 years | 7 years | 10 years | 10 years | Doctors: 7 years from the last date of treatment, or, upon the death of the patient, for 3 years [Co... |
Delaware | 7 years | 7 years | 6 years | 6 years | Doctors: 7 years from the last entry date on the patient’s record [Del. Code Ann. tit. 24, §§ 1761 a... |
District of Columbia | 3 years | 3 years | 10 year | 10 year | Doctors: Adult Patients: 3 years after last seeing the patient. Minor patients: 3 years after last s... |
Florida | 5 years | 5 years | 7 years | 7 years | Doctors: 5 years from the last patient contact [Fla. Admin. Code Ann. 64B8-10.002(3) (2008)].
Hospi... |
Georgia | 10 years | 10 years | 5 years | 5 years | Doctors: 10 years from the date the record item was created [Ga. Code Ann. § 31-33-2(a)(1)(A) and (B... |
Hawaii | 7 years | 7 years | 7 years | 7 years | Doctors: Adult patients: Full medical records: 7 years after last data entry. Basic information (i.e... |
Idaho | 6 years | 6 years | 5 years | 5 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Clinical laboratory test reco... |
Illinois | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: 10 years [210 Ill. Comp. Stat... |
Indiana | 7 years | 7 years | 7 years | 7 years | Doctors: 7 Years. [Burns Ind. Code Ann. § 16-39-7-1 (2008)].
Hospitals: 7 Years. [Burns Ind. Code A... |
Iowa | 7 years | 1 years | 6 years | 6 years | Doctors: Adult patients: 7 years from the last date of service. Minor patients: 1 year after the min... |
Kansas | 10 years | 10 years | 10 years | 10 years | Doctors: 10 years from when professional service was provided. [Kan. Admin. Regs. § 100-24-2 (a) (20... |
Kentucky | 6 years | 6 years | 5 years | 5 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 5 years from ... |
Louisiana | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years from the date a patient is last treated. [La. Rev. Stat. Ann. § 40:1299.96(A)(3)(a)... |
Maine | 6 years | 6 years | 7 years | 6 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 7 years. Mino... |
Maryland | 5 years | 5 years | 5 years | 5 years | Doctors: Adult patients: 5 years after the record or report was made. Minor patients: 5 years after ... |
Massachusetts | 7 years | 7 years | 30 years | 30 years | Doctors: Adult patients: 7 years from the date of the last patient encounter. Minor patients: 7 year... |
Michigan | 7 years | 7 years | 7 years | 7 years | Doctors: 7 years from the date of service. [Mich. Comp. Laws § 333.16213 (2008)].
Hospitals: 7 year... |
Minnesota | 6 years | 6 years | 7 years | 7 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Most medical records: Permane... |
Mississippi | 6 years | 6 years | 10 years | 7 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: Discharged in... |
Missouri | 7 years | 7 years | 10 years | 10 years | Doctors: 7 years from the date the last professional service was provided. [Mo. Rev. Stat. § 334.097... |
Montana | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: Entire medica... |
Nebraska | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 10 years foll... |
Nevada | 5 years | 5 years | 5 years | 5 years | Doctors: 5 years after receipt or production of health care record. [Nev. Rev. Stat. § 629.051 (2007... |
New Hampshire | 7 years | 7 years | 7 years | 7 years | Doctors: 7 years from the date of the patient’s last contact with the physician, unless the patient ... |
New Jersey | 7 years | 7 years | 10 years | 10 years | Doctors: 7 years from the date of the most recent entry. [N.J. Admin. Code § 13:35-6.5(b) (2008)].
... |
New Mexico | 2 Years | 2 Years | 10 Years | 1 year | Doctors: Adult patients: 2 years beyond what is required by state insurance laws and by Medicare and... |
New York | 6 years | 6 years | 6 years | 3 year | Doctor: Adult patients: 6 years. Minor patients: 6 years and until 1 year after the minor reaches th... |
North Carolina | 6 years | 6 years | 11 years | Until 30th birthday | Doctor: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 11 years follo... |
North Dakota | 6 years | 6 years | 10 years | 10 years | Doctor: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 10 years after... |
Ohio | 6 years | 6 years | 6 years | 6 years | Doctor: 6 years as stipulated by basic HIPAA regulations.
Hospitals: 6 years as stipulated by basic... |
Oklahoma | 6 years | 6 years | 5 years | 3 years | Doctor: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 5 years beyond... |
Oregon | 6 years | 6 years | 10 years | 10 years | Doctor: 6 years as stipulated by basic HIPAA regulations.
Hospitals: 10 years after the date of las... |
Pennsylvania | 7 years | 7 years | 7 years | 7 years | Doctor: Adult patients: At least 7 years following the date of the last medical service. Minor patie... |
Rhode Island | 5 years | 5 years | 5 years | 5 years | Doctor: 5 years unless otherwise required by law or regulation. [R.I. Code R.14-140-031, § 11.3 (200... |
South Carolina | 10 years | 13 years | 10 years | 10 years | Doctor: Adult patients: 10 years from the date of last treatment. Minor patients: 13 years from the ... |
South Dakota | 10 years | 10 years | Doctor: When records have become inactive or for which the whereabouts of the patient are unknown to... | ||
Tennessee | 10 years | 10 years | 10 years | 10 years | Doctor: Adult patients: 10 years from the provider’s last professional contact with the patient. Min... |
Texas | 7 years | 7 years | 10 years | 10 years | Doctors: Adult patients: 7 years from the date of the last treatment. Minor patients: 7 years after ... |
Utah | 6 years | 6 years | 7 years | 7 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 7 years. Mino... |
Vermont | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: 10 years [Vt. Stat. Ann. tit.... |
Virginia | 6 years | 6 years | 5 years | 5 years | Doctors: Adult patients: 6 years after the last patient contact. Minor patients: 6 years after the l... |
Washington | 6 years | 6 years | 10 years | 10 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: Adult patients: 10 years foll... |
West Virginia | 6 years | 6 years | 6 years | 6 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: 6 years as stipulated by basi... |
Wisconsin | 5 years | 5 years | 5 years | 5 years | Doctors: 5 years from the date of the last entry in the record [Wis. Admin. Code Med. § 21.03 (2008)... |
Wyoming | 6 years | 6 years | 6 years | 6 years | Doctors: 6 years as stipulated by basic HIPAA regulations.
Hospitals: 6 years as stipulated by basi... |