Skip to content

How long are medical records kept?

In 2026, state law in 26 states and DC sets a general period for how long a doctor must keep an adult patient's records, most often 7 years (15 states). In 10 states the only rule we found covers some doctors, such as those paid by Medicaid; in 1 state there is only board guidance; in Nebraska we found no general rule, and 12 more are under review. For hospitals, state law in 33 states and DC sets a general period, so far most often 10 years (11 states and DC); 4 states have a rule for only some providers or records; in Delaware we found no general rule, 11 are under review, and in West Virginia we could not read the rule. HIPAA, the federal privacy law, sets no period for the record itself; hospitals in Medicare must keep records at least 5 years.

State laws as of ; federal rules read between and .

Not legal advice. This page says how long doctors and hospitals must keep medical records in the United States. It is general information, not a substitute for advice from a lawyer, and not medical advice. It shows state laws as of and federal rules read between and . Laws change, so read the law itself, or ask the doctor's office or hospital, before you rely on anything here.

How long doctors and hospitals must keep records, by state

So far, 7 years is the most common general period for doctors, and 10 years for hospitals
  • AA General rule
  • AA* Only for some patients, providers or records
  • AAG Board guidance, not law

Each code links to its row. The numbers under a column count general rules, rules for only some, and board guidance. Columns are the periods found in state law, side by side; the spacing is not to scale.

Doctors

WV
3 yr1
DCNVWIARIDKYMEMNUT
5 yr3+6
ILLAOKWY
6 yr2+2
AKALCTDEHIIAINMAMDMIMONDNHNJRIOHVTCO
7 yr15+2+1
GAKSMSNMSCTN
10 yr6
20 yr
26 yr

Not in the columns: 1 with no general rule found and 12 under review.

Hospitals

3 yr
ALGANVOHOKRIVA
5 yr†7
KYNYWY
6 yr2+1
AKHIINMDMEMIMNNEPAUTWI
7 yr10+1
ARCTDCKSLAMSMTNJSCSDTNVT
10 yr12
MA
20 yr1
WA
26 yr1

Not in the columns: 1 with no general rule found, 11 under review, 1 not researched and 3 with the period only in the law's words (1 general and 2 for only some).

† Medicare floor: hospitals in Medicare must keep records at least 5 years under federal rules (42 CFR 482.24), whatever state law says.

Source: state statutes, rules and board pages read on October 8, 2026. Each state's reading was checked by a second reader; a reading the check disputed is held back until our editors rule.

See the numbers

On a narrow screen, scroll the table sideways for hospitals.

So far, 7 years is the most common general period for doctors, and 10 years for hospitals
YearsDoctors, general ruleDoctors, only someDoctors, guidanceHospitals, general ruleHospitals, only someHospitals, guidance
31: WV00000
53: NV DC WI6: AR ID KY ME MN UT07: AL GA NV OH OK RI VA00
62: IL LA2: OK WY02: KY NY1: WY0
715: AL AK CT DE HI IN IA MD MA MI MO NH NJ ND RI2: OH VT1: CO10: AK HI IN ME MD MI MN NE PA UT1: WI0
106: GA KS MS NM SC TN0012: AR CT KS LA MS MT NJ SC SD TN VT DC00
200001: MA00
260001: WA00
Period only in words0001: IA2: FL ID0
No general rule found1: NE1: DE
Under review12: AZ CA FL MT NY NC OR PA SD TX VA WA11: AZ CA CO IL MO NH NM NC ND OR TX
Not researched01: WV
Total, the 50 states and DC5151

Each row gives the least time state law requires a doctor or hospital to keep an adult's full record, or says what we found instead. Some rows also list longer periods for children or for some kinds of record, and those apply where they fit. Rows that a second check disputed stay under review until our editors rule: 12 for doctors and 11 for hospitals. The table shows state laws as of October 8, 2026.

How to read a row

  • A number of years is the least time the law requires, counted from when the clock starts.
  • Clock starts gives the law's own words for when the time begins, often the last visit or the last entry in the record.
  • Children gives the law's words for a child's record. The age of majority is the age a child becomes a legal adult under state law.
  • Period in the law's words means the law sets a period without a number of years we can state, such as a period tied to the time limit for suing; the row quotes it.
  • Only for means the rule covers only some patients, providers or records, such as doctors paid by Medicaid; it is not a rule for everyone, and no general rule was found for the rest.
  • Board guidance, not law means the medical board recommends this; no law requires it.
  • No general rule found means we searched the state's laws, rules and board pages and found nothing covering every doctor or hospital. A rule for Medicaid providers, a federal rule or board advice may still apply.
  • Under review means we are holding the row back: a check found a detail our stored sources do not yet support, or a second reader disagreed with the first. We show it once our editors rule. Until then, ask the doctor's office or hospital.
  • Not researched means we could not read the law; the row says why.
How long state law says doctors and hospitals must keep an adult's medical records, as of October 8, 2026
StateDoctorsHospitalsLaw we read
AlabamaBack to the list of states7 yearsClock starts: from the physician's (and/or other providers within his or her practice) last professional contact with the patientChildren: records of minors shall be retained for a period of not less than two years after the minor reaches the age of majority or seven (7) years from the date of the physician's (and/or other providers within his or her practice) last professional contact with the patient, whichever is longer.
Other periods we found (4)
  • X-rays: 5 years
  • Mammography imaging and reports: 10 years
  • Immunization records not sent to the state registry (or 7 years from last contact: 2 years
  • Record of the destruction of records: 4 years
5 yearsThe law does not say when the time starts.Children: In the case of minor patients, records shall be retained for at least five years after the patient has reached the age of majority.Ala. Admin. Code r. 540-X-9-.10(2)(c); Ala. Admin. Code r. 540-X-9-.10(2)(c)3; Ala. Admin. Code r. 540-X-9-.10(2)(c)2; Ala. Admin. Code r. 540-X-9-.10(2)(c)1; Ala. Admin. Code r. 540-X-9-.10(2)(d)4; Ala. Admin. Code r. 420-5-7-.13(3)(a).
AlaskaBack to the list of states7 yearsClock starts: for at least seven years from the date of the last entry7 yearsClock starts: for at least seven years after discharge of the patientChildren: the records of minors must be kept until the minor has reached the age of 21 years, or seven years after discharge, whichever is longer.
Other periods we found (1)
  • X-ray film: 5 years
12 AAC 40.967(10); 7 AAC 12.770(i); 7 AAC 12.770(i)(1); 7 AAC 12.770(i)(2); AS 18.20.085(a).
ArizonaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.
ArkansasBack to the list of states5 yearsOnly for Arkansas Medicaid providersIn the law's words: Arkansas Medicaid providers' records of services to eligible beneficiariesClock starts: from the date of service or until all audit questions or review issues, appeal hearings, investigations or administrative or judicial litigation to which the records may relate are finally concluded, whichever period is laterNo general rule found for other doctors; ask the office.Quote not yet matched word for word to our stored copy of the page; a second reader confirmed it.10 yearsClock starts: for ten (10) years after the last dischargeChildren: Complete medical records of minors shall be retained for a period of two (2) years after the age of majority.Arkansas Medicaid Provider Manual Section I, 142.300(C); 20 CAR § 41-113(a)(19)(A); 20 CAR § 41-113(a)(19)(C); 20 CAR § 41-113(a)(19)(B); 20 CAR § 43-113(a)(19)(A).
CaliforniaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.
ColoradoBack to the list of states7 yearsBoard guidance, not lawClock starts: seven years after the last date of treatmentChildren: seven years after the last date of treatment or seven years after the patient reaches age 18- whichever occurs laterQuote not yet matched word for word to our stored copy of the page; a second reader confirmed it.Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Colorado Medical Board Policy 40-07, section I.C.1 (guidance); Colorado Medical Board Policy 40-07, section I.C.2 (guidance); C.R.S. 12-240-142(1)(a). Read .
ConnecticutBack to the list of states7 yearsClock starts: from the last date of treatment
Other periods we found (3)
  • deceased patient: 3 years
  • lab reports and PKU reports: 5 years
  • X-ray films: 3 years
10 yearsClock starts: after discharge of patients
Other periods we found (1)
  • DPH rule: 25 years
Regs. Conn. State Agencies § 19a-14-41; Regs. Conn. State Agencies § 19a-14-42; Regs. Conn. State Agencies § 19a-14-42(a); Regs. Conn. State Agencies § 19a-14-42(b); Regs. Conn. State Agencies § 19a-14-42(c); Regs. Conn. State Agencies § 19a-14-43; Regs. Conn. State Agencies § 19-13-D3(d)(6); Regs. Conn. State Agencies § 19-13-D4a(d)(4); Regs. Conn. State Agencies § 19-13-D5(d)(4). Read .
DelawareBack to the list of states7 yearsClock starts: for a period of 7 years from the last entry date in the patient’s medical recordNo general rule foundWhere we looked, searched October 8, 2026; 8 board or agency pages checked24 Del. C. § 1761(c).
FloridaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Period in the law's wordsOnly for emergency care and transfer recordsNo general rule found for other hospitals; ask the hospital.
Other periods we found (1)
  • Another rule: 5 years
Fla. Stat. s. 395.1041(4)(a)2.; Fla. Stat. s. 395.1041(4)(a)1..
GeorgiaBack to the list of states10 yearsClock starts: 10 years from the patient's last office visit5 yearsClock starts: at least until the fifth anniversary of the patients' dischargesChildren: If the patient is a minor, the records must be retained for at least five (5) years past the age of majority.Ga. Comp. R. & Regs. r. 360-3-.02(16)(a); O.C.G.A. § 31-33-2(a)(1)(A); Ga. Comp. R. & Regs. r. 111-8-40-.18(1)(h). Read .
HawaiiBack to the list of states7 yearsClock starts: a minimum of seven years after the last data entryChildren: minors whose records shall be retained during the period of minority plus seven years after the minor reaches the age of majority
Other periods we found (1)
  • Basic information kept after the full record is destroyed (HRS 622-58(e)); for physicians: name: 25 years
7 yearsClock starts: a minimum of seven years after the last data entryChildren: minors whose records shall be retained during the period of minority plus seven years after the minor reaches the age of majority
Other periods we found (1)
  • Basic information kept after the full record is destroyed (HRS 622-58(e)); for health care facilities: name: 25 years
Haw. Rev. Stat. 622-58(a); Haw. Rev. Stat. 622-58(e); Haw. Rev. Stat. 622-58(c); Haw. Rev. Stat. 671-1; Haw. Admin. R. 11-93-21(f).
IdahoBack to the list of states5 yearsOnly for providers in Idaho public assistance programsIn the law's words: providers of items or services under a public assistance programClock starts: from the date the item or service was providedNo general rule found for other doctors; ask the office.Period in the law's wordsOnly for lab test records and X-ray filmsNo general rule found for other hospitals; ask the hospital.
Other periods we found (2)
  • Clinical laboratory test records and reports: 5 years
  • X-ray films: 5 years
IDAPA 16.05.07.101.01.b; IDAPA 16.05.07.101.02; Idaho Code 39-1394(1)(b); Idaho Code 39-1394(1)(c).
IllinoisBack to the list of states6 yearsClock starts: at least 6 years after the last date of service for each patientChildren: for at least 6 years after the last date of service for each patient or until the patient reaches the age of 21, whichever date is longerUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.225 ILCS 60/70.
IndianaBack to the list of states7 yearsThe law does not say when the time starts.
Other periods we found (3)
  • x-ray image: 5 years
  • original mammogram films and reports: 5 years
  • original mammogram films and reports when no additional mammograms are performed: 10 years
7 yearsThe law does not say when the time starts.
Other periods we found (3)
  • x-ray image: 5 years
  • original mammogram films and reports: 5 years
  • original mammogram films and reports when no additional mammograms are performed: 10 years
IC 16-39-7-1(b); IC 16-39-7-2(c); IC 16-39-7-3(a).
IowaBack to the list of states7 yearsClock starts: for at least seven years from the last date of service for each patientChildren: for a period consistent with that established by Iowa Code section 614.8Period in the law's wordsClock starts: in accordance with the statute of limitations as specified in Iowa Code chapter 614Children: in accordance with the statute of limitations as specified in Iowa Code chapter 614Iowa Admin. Code r. 481-655.5(8)(a); Iowa Admin. Code r. 481-655.5(8)(b); Iowa Code 614.8(2); Iowa Admin. Code r. 481-51.10(1).
KansasBack to the list of states10 yearsClock starts: from the date the licensee provided the professional service recorded10 yearsClock starts: 10 years after the date of last discharge of the patientChildren: one year beyond the date that the minor patient reached the age of majority, whichever is longer
Other periods we found (1)
  • Summary of medical records that are destroyed: 25 years
K.A.R. 100-24-2(a); K.A.R. 28-34-9a(d)(1); K.A.R. 28-34-9a(d)(3).
KentuckyBack to the list of states5 yearsOnly for Kentucky Medicaid providersIn the law's words: Medicaid providers' health records for Medicaid recipientsClock starts: from the date of the service or until any audit dispute or issue is resolved beyond five (5) yearsNo general rule found for other doctors; ask the office.6 yearsClock starts: Six (6) years from date of dischargeChildren: If a minor, three (3) years after the patient reaches the age of majority under state law, whichever is the longest.907 KAR 3:005, Section 2(5)(a); 907 KAR 1:672, Section 4(3); 902 KAR 20:016, Section 3(11)(b)2.a.; 902 KAR 20:016, Section 3(11)(b)2.b..
LouisianaBack to the list of states6 yearsClock starts: from the date a patient is last treated by a physician or dentist
Other periods we found (1)
  • Graphic matter: 3 years
10 yearsClock starts: from the date a patient is discharged
Other periods we found (2)
  • Graphic matter: 3 years
  • Image records at Medicare or Medicaid participating hospitals (LDH hospital licensing rule note): 6 years
La. R.S. 40:1165.1(A)(3)(a); La. R.S. 40:1165.1(A)(3)(b); La. R.S. 40:1165.1(C)(1); La. R.S. 40:2144(F)(1); La. R.S. 40:2144(F)(2); LAC 48:I.9395(A); LAC 48:I.9395(B).
MaineBack to the list of states5 yearsOnly for MaineCare (Maine Medicaid) providersIn the law's words: MaineCare providers' records of services to MaineCare membersClock starts: from the date of serviceNo general rule found for other doctors; ask the office.7 yearsThe law does not say when the time starts.Children: If the patient is a minor, the record must be retained for at least six (6) years after the minor’s age of majority.10-144 C.M.R. Ch. 101, MaineCare Benefits Manual, Ch. I, Sec. 1.03-3(M)(3); 10-144 C.M.R. Ch. 112, § 3.5.5; 10-144 C.M.R. Ch. 112, § 3.5.9.
MarylandBack to the list of states7 yearsClock starts: for 7 years after the record or report is madeChildren: may not be destroyed until the patient attains the age of majority plus 7 years
Other periods we found (1)
  • Another rule: 5 years
7 yearsClock starts: for 7 years after the record or report is madeChildren: may not be destroyed until the patient attains the age of majority plus 7 years
Other periods we found (1)
  • Another rule: 5 years
Md. Code, Health-General § 4-403(b); Md. Code, Health-General § 4-403(c); COMAR 10.01.16.04B.
MassachusettsBack to the list of states7 yearsClock starts: from the date of the last patient encounterChildren: for a minimum period of either seven years from the date of the last patient encounter or until the patient reaches 18 years of age, whichever is the longer retention period20 yearsClock starts: 20 years after the discharge or the final treatment therein of the patient to whom it relates
Other periods we found (1)
  • DPH rule: 5 years
243 CMR 2.07(13)(a); M.G.L. c. 111, § 70; 105 CMR 130.370(B); 105 CMR 130.370(F).
MichiganBack to the list of states7 yearsClock starts: from the date of service to which the record pertains
Other periods we found (1)
  • Record of a medical service on or after Oct. 10: 15 years
7 yearsClock starts: from the date of service to which the record pertains
Other periods we found (1)
  • Service on or after Oct. 10: 15 years
MCL 333.16213(2)(a); MCL 333.16213(2)(b); MCL 333.16213(4)(a); MCL 333.20175(2)(a); MCL 333.20175(2)(b); MCL 333.20175(4)(a).
MinnesotaBack to the list of states5 yearsOnly for providers paid by Minnesota health care programsIn the law's words: health service records for which payment under a program was billedClock starts: for at least five years after the initial date of billingNo general rule found for other doctors; ask the office.7 yearsClock starts: may be divested and destroyed after seven yearsChildren: shall be maintained for seven years or until the individual reaches the age of majority, whichever occurs lastMinn. R. 9505.2190, subp. 1; Minn. R. 9505.0205; Minn. Stat. 145.32, subd. 1.
MississippiBack to the list of states10 yearsClock starts: from the date a patient is last treated by a physician
Other periods we found (2)
  • Graphic matter: 5 years
  • Graphic matter: 3 years
10 yearsClock starts: from the date a patient is discharged
Other periods we found (1)
  • Graphic matter: 3 years
Miss. Code Ann. § 73-43-11(k)(i); Miss. Code Ann. § 73-43-11(k)(ii); 2024 Miss. Laws, SB 2873, § 3; 30 Miss. Admin. Code Pt. 2635, Ch. 10, R. 10.3; Miss. Code Ann. § 41-9-69(1)(a), as amended by 2024 SB 2873, § 1; Miss. Code Ann. § 41-9-69(1)(b), as amended by 2024 SB 2873, § 1; 15 Miss. Admin. Code Pt. 16, Subpt. 1, R. 41.48.5.
MissouriBack to the list of states7 yearsClock starts: from the date of when the last professional service was providedUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.RSMo 334.097.2.
MontanaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.10 yearsClock starts: following the date of a patient's discharge or deathChildren: for not less than 10 years following the date the patient either attains the age of majority or dies, if earlier
Other periods we found (2)
  • diagnostic imaging film and electrodiagnostic tracings: 5 years
  • MCA 50-16-513: 1 year
ARM 37.106.402(1); ARM 37.106.402(4); ARM 37.106.402(6); MCA 50-16-513.
NebraskaBack to the list of statesNo general rule foundWhere we looked, searched October 8, 2026; 6 board or agency pages checked7 yearsClock starts: beginning with each service date175 NAC 1-008.03.
NevadaBack to the list of states5 yearsClock starts: for 5 years after their receipt or productionChildren: shall not destroy the health care records of a person who is less than 23 years of age on the date of the proposed destruction of the records5 yearsClock starts: for 5 years after their receipt or productionChildren: shall not destroy the health care records of a person who is less than 23 years of age on the date of the proposed destruction of the records
Other periods we found (1)
  • Items named by the hospital's medical staff (NAC 449.379): 10 years
NRS 629.051(1); NRS 629.051(7); NRS 629.051(3); NAC 629.070; NRS 629.016(1)(b); NAC 449.379(4); NAC 629.060(1)(b).
New HampshireBack to the list of states7 yearsClock starts: 7 years from the date of the patient’s last contact with the licenseeUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.N.H. Admin. Rules, Med 501.02(f)(8).
New JerseyBack to the list of states7 yearsClock starts: seven years from the date of the most recent entry10 yearsClock starts: for a period of 10 years following the most recent discharge of the patientChildren: or until the person confined therein reaches the age of 23 years, whichever is the longer period of time
Other periods we found (2)
  • Discharge summary sheet: 20 years
  • X-ray films: 5 years
N.J.A.C. 13:35-6.5(b); 43 N.J.R. 1359(b) (June 6, 2011); N.J.S.A. 26:8-5.
New MexicoBack to the list of states10 yearsClock starts: after the date of last treatmentChildren: Medical records for patients who are minors must be retained until the date that the patient is twenty-one (21) years old.
Other periods we found (1)
  • Another rule: 2 years
Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.16.10.17.10(D) NMAC; 16.10.17.10(E) NMAC.
New YorkBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.6 yearsClock starts: from the date of dischargeChildren: three years after the patient's age of majority (18 years), whichever is longer10 NYCRR 405.10(a)(4).
North CarolinaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.
North DakotaBack to the list of states7 yearsClock starts: from the last date of service for each patientUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.N.D.C.C. 43-17-27.2(1); N.D. Admin. Code 50-01-03-01(1).
OhioBack to the list of states7 yearsOnly for pain management clinicsIn the law's words: patient records of a pain management clinicClock starts: seven years from the last date of treatment of the patientNo general rule found for other doctors; ask the office.
Other periods we found (1)
  • Medicaid provider agreement rule: 6 years
5 yearsClock starts: for five years from the date of dischargeOhio Adm.Code 4731-29-01(E)(6)(b); Ohio Adm.Code 5160-1-17.2(D); Ohio Adm.Code 3701-22-29(E)(4); Ohio Adm.Code 3701-22-07(D).
OklahomaBack to the list of states6 yearsOnly for SoonerCare (Oklahoma Medicaid) providersIn the law's words: any records necessary to disclose the extent of servicesNo general rule found for other doctors; ask the office.
Other periods we found (4)
  • MD board guidance memo: 5 years
  • MD board guidance memo: 3 years
  • Osteopathic board guidance (2009 policy): 10 years
  • Osteopathic board guidance (2009 policy): 2 years
5 yearsClock starts: beyond the date the patient was last seenChildren: Records of newborns or minors shall be retained three (3) years past the age of majority.
Other periods we found (2)
  • deceased patient: 3 years
  • OHCA rule OAC 317:30-3-15: 6 years
OAC 317:30-3-15; Oklahoma Board of Medical Licensure and Supervision memo, Feb. 19, 2026 (guidance); Oklahoma Board of Medical Licensure and Supervision memo, Feb. 19, 2026, quoting OAC 310:667-19-14 (guidance); Oklahoma State Board of Osteopathic Examiners policy, adopted Dec. 10, 2009 (guidance); OAC 310:667-19-14(a).
OregonBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.
PennsylvaniaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.7 yearsClock starts: for a minimum of 7 years following the discharge of a patientChildren: If the patient is a minor, records shall be kept on file until his majority, and then for 7 years or as long as the records of adult patients are maintained.
Other periods we found (1)
  • records of a hospital that discontinues operation: 5 years
28 Pa. Code § 115.23(a); 28 Pa. Code § 115.23(b); 28 Pa. Code § 115.23(c).
Rhode IslandBack to the list of states7 yearsThe law does not say when the time starts.5 yearsClock starts: following discharge of the patientChildren: Records of minors shall be kept for at least five (5) years after such minor shall have reached the age of 18 years216-RICR-40-05-1, § 1.5.12(C); R.I. Gen. Laws § 23-4.9-1; 216-RICR-40-10-4, § 4.6.10(J); 216-RICR-40-10-4, § 4.6.10(J)(1).
South CarolinaBack to the list of states10 yearsClock starts: These minimum recordkeeping periods begin to run from the last date of treatment.Children: at least thirteen years for minors10 yearsThe law does not say when the time starts.Children: Records of minors must be retained until after the expiration of the period of election following achievement of majority as prescribed by statuteS.C. Code Ann. § 44-115-120; S.C. Code Regs. 60-16 § 1107(A); S.C. Code Regs. 60-16 § 1107(A)(1).
South DakotaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.10 yearsClock starts: from the actual visit date of service or patient careChildren: Records of minors must be retained until the minor reaches the age of eighteen plus an additional two years, but no less than ten years from the actual visit date of service or patient care.ARSD 44:75:09:06; ARSD 44:75:09:08.
TennesseeBack to the list of states10 yearsClock starts: from the physician’s or his supervisees’ last professional contact with the patientChildren: not less than one (1) year after the minor reaches the age of majority or ten (10) years from the date of the physician’s or his supervisees’ last professional contact with the patient, whichever is longer
Other periods we found (1)
  • X-rays: 4 years
10 yearsThe law does not say when the time starts.Children: or for the period of minority plus one year for newborns
Other periods we found (1)
  • X-rays: 4 years
Tenn. Comp. R. & Regs. 0880-02-.15(4)(f); Tenn. Comp. R. & Regs. 0880-02-.15(4)(f)4; Tenn. Comp. R. & Regs. 0880-02-.15(4)(f)1; Tenn. Comp. R. & Regs. 0880-02-.15(4)(f)2; Tenn. Comp. R. & Regs. 0880-02-.15(4)(f)3; Tenn. Comp. R. & Regs. 0720-14-.06(5)(e); Tenn. Comp. R. & Regs. 0720-14-.06(7)(h).
TexasBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.Under reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.
UtahBack to the list of states5 yearsOnly for Utah Medicaid providersIn the law's words: Medicaid providers' records of services provided to Medicaid membersNo general rule found for other doctors; ask the office.7 yearsThe law does not say when the time starts.Children: medical records of minors are kept until the age of 18 plus four years, but in no case less than seven yearsUtah Medicaid Provider Manual, Section I, Chapter 4-2, incorporated by Utah Admin. Code R414-1-5(2)(u); Utah Admin. Code R414-1-5(2)(u); Utah Admin. Code R432-100-34(4)(b); Utah Admin. Code R432-100-34(4)(f); Utah Admin. Code R432-100-34(4)(g). Read .
VermontBack to the list of states7 yearsOnly for osteopathic physicians (DOs)No general rule found for other doctors; ask the office.10 yearsThe law does not say when the time starts.3 V.S.A. § 129a(a)(9); 26 V.S.A. § 1842(b); 18 V.S.A. § 1905(8).
VirginiaBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.5 yearsClock starts: a minimum of five years following discharge of the patientChildren: Records of minors shall be kept for at least five years after such minor has reached 18 years of age.
Other periods we found (1)
  • Birth and death information: 10 years
12VAC5-410-370(F); 12VAC5-410-370(F)(1); 12VAC5-410-370(F)(2).
WashingtonBack to the list of statesUnder reviewHeld back: a check found a detail our sources do not yet support, or a second reader disagreed. Until then, ask the office.26 yearsClock starts: from the date the record was created
Other periods we found (1)
  • RCW 70.02.160: 1 year
RCW 70.41.190(1); RCW 70.02.160; WAC 246-320-166(4)(g).
Washington, DCBack to the list of states5 yearsClock starts: from the date of last contact for an adultChildren: a minimum period of 5 years after a minor reaches the age of majority
Other periods we found (1)
  • Another rule: 3 years
10 yearsClock starts: following dischargeChildren: in the case of minors, the records shall be kept until three years after the age of majority has been attainedD.C. Code § 3-1210.11(c); 17 DCMR § 4612.1; 22-B DCMR § 2030.7.
West VirginiaBack to the list of states3 yearsClock starts: from the date of the last patient encounterAn emergency rule, which can lapse; check that it is still in force.Not researchedHospital licensure rule 71CSR12 (effective June 5, 2025) is posted by the Secretary of State only as scanned images, so its text could not be read. No hospital retention statute found in Code 16B-3.W. Va. Code R. 11-1A-12.1.jj (emergency rule); West Virginia Board of Medicine guidance page (undated) (guidance).
WisconsinBack to the list of states5 yearsClock starts: after the date of the last entry7 yearsOnly for mental illness, developmental disability and substance use treatment recordsIn the law's words: treatment records for mental illness, developmental disabilities, or substance useClock starts: after treatment has been completedChildren: In the case of a minor, records shall be retained until the person becomes 19 years of age or until 7 years after treatment has been completed, whichever is longer.No general rule found for other hospitals; ask the hospital.
Other periods we found (1)
  • not a period the record must be kept: 5 years
Wis. Admin. Code Med 21.03(1); Wis. Stat. 146.817(2)(a); Wis. Stat. 146.817(2)(d); Wis. Admin. Code DHS 92.12(1); Wis. Admin. Code DHS 92.12(2); Wis. Admin. Code DHS 92.01; Wis. Stat. 50.36(1).
WyomingBack to the list of states6 yearsOnly for Wyoming Medicaid providers' recordsClock starts: after the end of the state fiscal year in which payment for services was renderedNo general rule found for other doctors; ask the office.6 yearsOnly for Wyoming Medicaid providers' recordsClock starts: after the end of the state fiscal year in which payment for services was renderedNo general rule found for other hospitals; ask the hospital.Wyo. Admin. Rules 048.0037.3, Section 8(c); Wyo. Admin. Rules 048.0061.17, Section 11(a)(vi); Wyo. Admin. Rules 048.0061.12, Section 23(c).

How long hospitals must keep records

State law in 33 states and DC sets a general period for hospitals; so far the most common is 10 years (11 states and DC). In Florida, Idaho, Wisconsin and Wyoming the rule we found covers only some providers or records. In Delaware we found no general state rule for hospitals. 11 more are under review, and in West Virginia we could not read the hospital rule.

Hospitals in Medicare must also keep records at least 5 years under federal rules, so a shorter state period does not shorten that.

Source: 42 CFR 482.24, Condition of participation: Medical record services (hospitals), read October 8, 2026; state laws as in the table.

How long children's records are kept

Of the 27 places with a general rule for doctors, the law in 8 keeps a child's record longer than an adult's: until the child reaches an age, or for a number of years after the child comes of age. In 3 it states another rule for children, and in 16 it states no separate rule.

For hospitals, the law in 20 of the 34 places with a general rule keeps a child's record longer. Each row gives the law's own words.

What HIPAA and Medicare require

HIPAA, the federal privacy law, sets no period for keeping the medical record itself. The Department of Health and Human Services puts it this way: “the HIPAA Privacy Rule does not include medical record retention requirements”, and “State laws generally govern how long medical records are to be retained”.

HIPAA does set a period of six years, but for a provider's own paperwork, such as the “policies and procedures” its privacy rule requires, not for your chart.

Hospitals that take part in Medicare must keep medical records “in their original or legally reproduced form for a period of at least 5 years.”

Other federal rules can set their own periods for some programs and kinds of record. This page does not list them.

Sources: HHS FAQ 580: Does the HIPAA Privacy Rule require covered entities to keep patients' medical records for any period of time?, read October 8, 2026; 45 CFR 164.530, Administrative requirements, read October 8, 2026; 42 CFR 482.24, Condition of participation: Medical record services (hospitals), read October 8, 2026.

Can you still get records from 20 or 30 years ago?

Only if the doctor or hospital, or whoever took over its records, still has them. The periods above are the least time state law requires for an adult's full record. When a period ends, the provider may be allowed to destroy the record but does not have to. Other rules can require it to keep the record, or a summary of it, longer: for a child, for some kinds of record, while a request is pending, or under a federal program.

HIPAA gives you the right to a copy from most health care providers “for as long as the protected health information is maintained in the designated record set”, with some exceptions, such as psychotherapy notes. If the practice has closed or the doctor has retired, see how to get old medical records. To ask a doctor's office or hospital for a copy, see how to get your medical records.

Sources: 45 CFR 164.524, Access of individuals to protected health information, read October 5, 2026; Protecting the Privacy and Security of Your Health Information When Using Your Personal Cell Phone or Tablet, read October 4, 2026.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

Health Record Rights Index by SuperTruth. Not legal or medical advice. State laws as of ; federal rules read between and . Our own words are CC BY 4.0; quoted law and page titles stay with their owners. This page last changed on . Terms of Use · Privacy Policy