Who generally governs medical record retention times?

Medical record retention times are primarily governed by individual states. Each state has its own laws and regulations that dictate how long medical records must be kept, which can vary significantly depending on the type of healthcare facility and the specific patient population served. For instance, some states may require medical records to be kept for a certain number of years after the last patient visit, while others may have different criteria based on the nature of the records or the age of the patient when treated.

While the federal government sets certain overarching standards, such as those related to privacy and security through HIPAA (Health Insurance Portability and Accountability Act), it does not specify retention periods. Therefore, healthcare providers must comply with the specific requirements of the state in which they practice. Individual healthcare providers do not unilaterally decide retention times, as they must adhere to these state laws. The American Medical Association provides guidance and best practices but does not govern retention policies. Thus, the correct choice, reflecting the governing body that determines retention times, is individual states.