HIPAA Record Retention Requirements

The HIPAA subsection 45 CFR §164.316 (b) (2) (i) says that such records must be kept for a minimum of six years after their creation or, if the document outlined a policy, 6 years from when the policy was last implemented.

Read More