Medical Records Retention Laws by State (2026 Guide)
No single federal law sets how long doctors and hospitals must keep patient records. State law controls retention, with periods ranging from 3 years in Wyoming to 20 years in Massachusetts. Most states require 5 to 10 years; HIPAA's 6-year rule covers only compliance documentation, not patient records.
Medical records retention laws determine how long hospitals, doctors, and other healthcare providers must keep your health information. These laws vary significantly from state to state.
For a complete overview of federal requirements, HIPAA rules, and a summary table of all 50 states, see our Medical Records Retention Laws by State hub page.
State-by-State Medical Records Retention Laws
Select your state for a detailed guide covering hospital and physician retention periods, minor patient records, HIPAA interaction, patient access rights, copy fees, destruction rules, and practice closure procedures.
Frequently Asked Questions
How long do hospitals keep medical records?
Hospital retention varies by state, from 3 years in Wyoming to 20 years in Massachusetts. Most states require 5 to 10 years. Medicare hospitals must keep records at least 5 years under federal rules.
Does HIPAA require records to be kept for a certain time?
No. HIPAA does not set a retention period for patient medical records. HIPAA only requires retention of administrative compliance documentation for 6 years. State law controls how long actual patient records must be kept.
How long are records kept for minors?
Most states extend retention for minors until the patient reaches age 18 to 30, depending on the state. North Carolina has the longest requirement: until the patient turns 30.
Can I access my old medical records?
Yes, if the records still exist within the retention period. HIPAA gives you the right to access your records. Providers must respond within 30 days and can charge no more than $6.50 for electronic copies.
What happens to records when a doctor retires?
The provider must ensure records are preserved for the remaining retention period. Most states require patient notification, and a custodian must be appointed to maintain the records.