HIPAA Medical Records Retention Schedule

A state-by-state table of adult medical records retention requirements, minor records retention periods, mental health records where different, and HIPAA compliance documentation retention (6 years per 45 CFR § 164.530(j)). Structured as a decision tool for practice administrators managing retention schedules.

Short answer

A state-by-state retention table covering adult medical records, minor records (held until adulthood plus standard period), mental health records where different, and HIPAA policy and procedure documentation (6 years per 45 CFR § 164.530(j)).

What is inside

  • State-by-state table of adult medical records retention periods — ranging from 5 to 10 years depending on state — with statutory citations for each entry
  • Minor records retention rules: most states require records to be held until the patient reaches the age of majority plus the standard adult period — this section shows the calculation for every covered state
  • Mental health records retention where state law sets a different (typically longer) period than the general medical records rule
  • HIPAA compliance documentation retention requirements: 45 CFR § 164.530(j) requires policies, procedures, and related documentation to be retained for 6 years from creation or last effective date — regardless of state medical records law
  • Practical decision guide: what to do when HIPAA's 6-year documentation requirement and the state's medical records period point to different retention lengths

We publish the same practical templates and decision tools that clinics use to structure recurring HIPAA work. No enterprise gate. No resource-library gimmicks. Just practical material delivered quickly.

Editorial details

Written by: Angel Campa

Reviewed by: PHIGuard Compliance Research

Updated: April 28, 2026

Best next step: Open the matching product path

Sources