For HIPAA, how long must designated records be retained?

Prepare for the Board Certified-TeleMental Health Provider Test. Enhance your skills with multiple choice questions and flashcards. Each question includes explanations and hints. Master your exam!

Multiple Choice

For HIPAA, how long must designated records be retained?

HIPAA requires designated record sets to be kept for at least six years. A designated record set is the collection of PHI a covered entity maintains to make decisions about an individual, and it can include medical records, billing and claims data, and related information used in those decisions. The six-year clock starts from the later of when the record was created or when it was last in effect; you count six years from that anchor date. So, for example, if a record was created in 2018 and last updated in 2020, you would retain it until 2026. This six-year minimum is the standard, though some states may require longer retention.

HIPAA requires designated record sets to be kept for at least six years. A designated record set is the collection of PHI a covered entity maintains to make decisions about an individual, and it can include medical records, billing and claims data, and related information used in those decisions. The six-year clock starts from the later of when the record was created or when it was last in effect; you count six years from that anchor date. So, for example, if a record was created in 2018 and last updated in 2020, you would retain it until 2026. This six-year minimum is the standard, though some states may require longer retention.

More practice questions