How long do you keep medical records for HIPAA?

Under HIPAA, healthcare providers must retain medical records for at least six years from the date of creation or the last effective date, whichever is later. However, state laws may require longer retention periods. Businesses offering medical record review services should also comply with these timelines, ensuring proper storage and confidentiality of records for legal and auditing purposes.