How Long Are Medical Records Kept?

There is no single national rule for how long medical records are kept in the United States — retention depends on your state and the type of provider, and the rules differ for hospitals, private practices, and other settings. Because records can be moved, archived, or harder to track down over time, the safest approach is to keep your own copies of the records that matter most. Here is what decides how long records last, and how to make sure yours are always within reach.

Key Takeaways

No one federal rule sets how long medical records must be kept — state laws and provider policies decide, and they vary.
Hospitals, private practices, and other providers may follow different retention practices; records from a closed or merged practice can be harder to locate.
Federal privacy law (HIPAA) gives you the right to get copies of your own records, but it does not set a national retention period.
The most reliable strategy is keeping your own copies of key records — pathology reports, imaging summaries, treatment summaries, and medication lists.
Ask your provider’s medical records department how long they keep records and how to request copies before you need them urgently.
If you change doctors or your practice closes, move your records with you — do not assume they will follow automatically.

Why There Is No One Answer

It feels like there should be one clear rule — “hospitals must keep records for X years” — but in the United States, medical record retention is handled mainly at the state level, and the rules are a patchwork. Each state sets its own requirements, often with different timelines for different kinds of providers, and individual hospitals and practices set their own internal policies on top of those minimums.

Adding to the complexity, federal health privacy law (HIPAA) is about your rights to access and control your health information — it gives you the right to request copies of your records — but it does not dictate how long providers must keep them. So “HIPAA requires my records be kept forever” is a misunderstanding; HIPAA protects your access while the records exist.

The practical takeaway: because the rules vary and change, treat any records you might need in the future as your own responsibility to preserve. Our complete guide to navigating breast cancer care covers records as one part of managing your care overall — this article goes deeper on the “how long” question itself.

What Varies by Provider Type

Different kinds of providers operate under different rules and habits:

Hospitals and large health systems typically have formal records departments and written retention policies, and they tend to keep records the longest — partly because state rules for hospitals are often the strictest.
Private practices and small clinics follow their state’s rules too, but a small office that closes, retires its doctor, or merges into a larger system can make old records harder to track down, even when they still exist somewhere.
Imaging centers and labs may keep images and test results on their own schedules, separate from your doctor’s notes — your mammogram images might live in a different system than your oncologist’s records.
Electronic vs. paper records matter in practice: electronic records are easier to store indefinitely, while older paper charts may be scanned, archived off-site, or eventually destroyed according to policy.

None of this means your records vanish on a schedule you should fear. It means the system is decentralized, and the person most motivated to keep your complete history together is you.

What This Means for Breast Cancer Patients

Breast cancer care generates an unusually thick file: pathology reports, imaging, surgical notes, chemotherapy and radiation summaries, genetic test results, years of follow-up visits, and often hormone therapy records stretching across many years. You may need pieces of this file far into the future — for a new oncologist, a second opinion, a clinical trial screening, a disability or insurance question, or your own survivorship care.

A woman organizing medical paperwork and folders at a home desk in warm natural light

That long tail is exactly why breast cancer patients should be more proactive than average about records. A decade from now, you may be seeing a completely different care team in a different city. The pathology report from your original diagnosis will still matter to them — but only if someone kept it.

The Records Worth Keeping Yourself

You do not need every appointment note. Focus on the documents future doctors actually ask for:

Pathology reports — the lab’s analysis of biopsies and surgical specimens; the single most referenced document in cancer care.
Imaging reports — mammogram, ultrasound, MRI, and scan summaries (the written reports matter most; actual images can usually be re-sent by the imaging center).
Treatment summaries — what surgery, chemotherapy, radiation, hormone therapy, or other treatments you received, with dates and doses.
Genetic test results — if you had genetic testing, keep the full report; it matters for family members too.
Medication lists — current and past cancer medicines, with start and stop dates.
Survivorship care plan — if your center provided one, it summarizes treatment and follow-up recommendations in one place.
Insurance and billing correspondence — explanations of benefits and major bills, in case of disputes.

Request these as you go — after each major phase of treatment — rather than trying to reconstruct everything years later. Fresh requests are faster and more complete.

How to Request Copies of Your Records

Under HIPAA, you have the right to see and get copies of your health records from each provider, with limited exceptions. In practice:

Contact the medical records (or health information) department of each hospital or practice — not your doctor directly. Most have a request form, increasingly available through patient portals.
Use the patient portal first. Many systems now let you download visit notes, lab results, and imaging reports yourself. Download and save anything important rather than assuming portal access lasts forever.
Be specific. “All records from 2023 to present” works, but “pathology reports and imaging from my 2024 treatment” gets you the right documents faster.
Allow processing time. Requests can take days or weeks depending on the provider. Plan ahead rather than requesting the week before an important appointment.
Know that fees may apply. Providers can charge reasonable copying fees in some situations; ask about costs when you submit the request.

For step-by-step help with the process, see our guide on how to get copies of your medical records.

Organizing Records at Home

A simple system you actually use beats an elaborate one you abandon. Many patients swear by the binder method: one binder (or one digital folder) with tabbed sections for pathology, imaging, treatment summaries, labs, medications, insurance, and correspondence. Our guide to organizing medical records at home walks through setup options, and organizing records after breast cancer covers the cancer-specific version.

Digital backup matters: scan or photograph paper documents and keep copies in at least two places — for example, a home computer and a secure cloud folder. Label files clearly with dates (“2024-03-15 pathology report”) so future-you can find things. And keep a one-page summary sheet at the front with your diagnosis, key dates, current medicines, and care team contacts — it is the document you will hand to every new doctor.

Close-up of hands placing labeled medical folders into a neat home filing organizer

If Your Provider Closes or Merges

Practices close, doctors retire, and health systems merge — and patients often learn about it from a letter, or not at all. When this happens, your records do not evaporate, but finding them takes effort:

Act on closure notices immediately. If you receive a letter saying a practice is closing, request your records right away and ask where they will be stored.
Ask who the custodian is. Closed practices must designate someone responsible for the records — the notice should say who.
Check with the new system after a merger. Merged practices usually transfer records to the acquiring system, but confirm yours made the trip.
Contact your state health department if you cannot locate records from a closed provider; they can tell you the rules that applied and who to ask.

This is the scenario where having your own copies pays for itself many times over. A binder on your shelf does not care whether the practice still exists.

What to Do Next

List every provider who has treated your breast cancer — hospitals, surgeons, oncologists, radiologists, imaging centers, labs.
Request your key documents (pathology, imaging reports, treatment summaries) from each one, starting with the oldest.
Download anything important from patient portals and save it outside the portal.
Set up one binder or digital folder system and file everything with dates.
Ask your current provider’s records department how long they keep records and how to request copies — now, while it is not urgent.
Learn your privacy rights in plain language with our HIPAA guide so you know exactly what you can ask for.

Frequently Asked Questions

Is there a federal law that says how long records must be kept?

No. There is no single federal retention rule for medical records. Retention is governed mainly by state laws, which vary, plus each provider’s own policies. Federal privacy law (HIPAA) gives you the right to access and copy your records, but it does not set how long they must be kept.

How can I find out the rule in my state?

Your provider’s medical records department can tell you their policy, which follows your state’s requirements. If you need the underlying rule — for example, after a practice closed — your state health department or state medical board can point you to the right regulation.

Do electronic health records last longer than paper ones?

In practice, yes — electronic records are cheaper to store, so large systems tend to keep them longer and make them easier to retrieve. But “the system has it” is not the same as “I can get it quickly,” especially after mergers or system changes. Your own copies remain the fastest option.

What if I need records from a doctor who retired years ago?

Start by contacting the practice — it may still exist under new ownership with your records intact. If the practice closed, look for the closure notice’s records custodian, or ask your state medical board where the records went. This process can take time, which is why requesting copies early matters.

Should I keep records for my children or family members too?

Your genetic test results can matter for relatives, so share those appropriately. For your own care, keeping your complete cancer file is the priority — future care teams will thank you for it.

This article is for general educational purposes only and is not medical, legal, or financial advice. It does not replace professional care. Talk to your doctor or care team about your own situation. If you think you may have a medical emergency, call 911.