California Medical Record Retention Laws: How Long Do Doctors Keep Records?

California Medical Record Retention Requirements

Under California law (Health & Safety Code §123145, Business & Professions Code §2266), the minimum retention periods are:

Record Type Minimum Retention Key Details
Adult Patients 7 years after last discharge/visit Applies to physicians, hospitals, clinics, health facilities.
Minor Patients 7 years after reaching age 18 (i.e., until age 25) Or 7 years after last visit, whichever is longer.
Deceased Patients 7 years after death Or per adult/minor rule above.
Immunization Records Permanent / indefinitely Per CA Health & Safety Code §120440.
Mammography 10 years (MQSA federal) Or longer per state law.
Occupational Health / Workers' Comp 30 years (OSHA 29 CFR 1910.1020) Exposure + medical records.

Format & Storage

  • Paper or electronic (EHR) both acceptable.
  • Electronic must be accessible, reproducible, secure (HIPAA).
  • Offsite storage permitted if retrievable within reasonable time.

Destruction

  • After retention period, destroy confidentially (shredding, pulping, degaussing, certified electronic wipe).
  • Maintain destruction log (date, method, records description, witness).

Exceptions Extending Retention

  • Pending litigation, audit, investigation, or patient request.
  • Contractual requirements (insurance, research, grants).
  • Professional liability: Many malpractice carriers recommend 10+ years.

Key Statutes

  • HSC §123145 (physicians), §123145.5 (hospitals).
  • BPC §2266 (unprofessional conduct to violate).
  • HIPAA (45 CFR 164.530) – 6 years for policies, but CA law stricter for records.

Always consult legal counsel for your specific practice situation. Non-compliance risks license discipline, civil liability, and adverse inference in litigation.

Long-Term Care - Related Articles