Medical Record Retention and Media Formats for Medical Records

State laws generally govern how long medical records are to be retained. However, the Health Insurance Portability and Accountability Act (HIPAA) of 1996 (HIPAA) administrative simplification rules require a covered entity, such as a physician billing Medicare, to retain required documentation for six years from the date of its creation or the date when it last was in effect, whichever is later. HIPAA requirements preempt State laws if they require shorter periods. Your State may require a longer retention period.

CMS requires Medicare managed care program providers to retain records for 10 years.

The Medicare program does not have requirements for the media formats for medical records. However, the medical record needs to be in its original form or in a legally reproduced form, which may be electronic, so that medical records may be reviewed and audited by authorized entities. Providers must have a medical record system that ensures that the record may be accessed and retrieved promptly.