Wednesday, October 14, 2015

HIPAA Related Record Retention

Many offices have asked this very question, so we are here to clarify this issue.

Q: How long must we retain the list of authorized and unauthorized disclosures pertaining to our nursing home residents? We assume that we must retain these lists while residents remain here, but how long must we retain this information after death or discharge?

A:  The HIPAA Privacy Rule generally requires covered entities to retain documentation for 6 years to demonstrate their compliance with the rule. You may dispose of documentation after that time.

Although each state regulates the record retention period for patient medical records, HIPAA related documentation must be retained for 6 years.

For more information on this and other topics related to HR, HIPAA, OSHA, and Medicare, please or visit our website at

Be sure to become a member of our Linkedin group by visiting;