Iowa Medical Records Retention Requirements: How Long Providers Must Keep Patient Records

General Retention Period

If you are a licensed Iowa physician, you must keep patient medical records for at least seven years from the last date of service. This baseline applies unless another state or federal retention statute requires a longer period or you place a litigation/audit hold.

Use clear triggers when calculating the clock. In most outpatient settings, count from the last encounter; in facilities, policies often anchor to the patient discharge date. If you bill Iowa Medicaid, keep records for a minimum of five years from the date the claim was submitted—use the longest applicable rule.

Always pause routine destruction when you receive notice of a subpoena, audit, investigation, or potential claim. Retention obligations stop the clock only after all legal and payer holds are cleared.

Retention Period for Minors

For minor patients, Iowa ties retention to the limitations period for minors: keep the record for at least one year after the patient reaches the age of majority. In Iowa, majority is 18, so retain until at least the patient’s 19th birthday; if another rule (for example, the seven‑year general rule or a payer requirement) reaches a later date, keep the record until that later date.

Example: A 17‑year‑old’s last visit occurs on May 10, 2026. The “age of majority retention” pushes you to at least May 10, 2028 (age 19). If your practice applies the seven‑year rule from the last service, you would retain through May 10, 2033—choose the longer date.

Electronic Records Management

Iowa does not set a different time frame for electronic medical records; your EMR must meet the same retention durations as paper and remain complete, accurate, and retrievable. If you deliver care via telemedicine, you are expected to maintain timely, comprehensive electronic documentation (including test results, messages, and prescriptions).

Hospitals must provide surveyors with unrestricted access to electronic records and, when requested, promptly furnish printouts—so plan for export/printing that preserves integrity and readability throughout the full retention period.

Continuity planning is mandatory: beginning July 1, 2023, every Iowa physician must designate a custodian to manage records if the physician dies or becomes incapacitated, ensuring ongoing medical records accessibility for patients.

Hospital Medical Recordkeeping

Hospitals must maintain accurate, complete medical records and store them in line with Iowa’s statute of limitations in Iowa Code chapter 614, rather than a fixed number of years. This anchoring means risk and legal timelines drive how long you keep inpatient and outpatient hospital records.

Hospitals must also maintain admission logs and records of births and deaths, and keep controlled substance records in accordance with state and federal law. Make sure your policy covers how these categories are captured, retained, and produced on request.

Substance Abuse Program Records

Licensed substance abuse (substance use disorder) treatment and OWI assessment programs must keep client records for a minimum of seven years after discharge or completion of screening, evaluation, or treatment. Build this into your destruction schedules and vendor agreements.

Federal Part 2 rules govern confidentiality and redisclosure of substance abuse treatment documentation; they do not set a separate retention period but impose strict consent and notice requirements that persist even when records are shared with HIPAA‑covered entities.

Nursing Facility Recordkeeping

Nursing facilities must maintain a separate clinical record for each resident, including admission data, physician orders, progress notes, diagnostic reports, and a medication record. Schedule II drug records must comply with state and federal law.

Retention is five years following termination of services, and records remain with the facility upon change of ownership. If the facility closes, send the record to the receiving facility or, if none, to the resident’s physician—ensuring continuity and medical records accessibility.

Controlled Substances Documentation

Any Iowa registrant handling controlled substances must keep all required controlled‑substance records at the registered location for at least two years from the last entry, consistent with state and federal retention statutes. This includes invoices, ordering records, transfers, and destruction/theft reporting.

Schedule II drugs require a perpetual inventory with periodic reconciliations. Inventory, reconciliation, and related accountability records must be retained for at least two years and be readily retrievable for inspection.

In long‑term care settings, maintain a medication administration record and document wastage or disposition in line with nursing facility regulations and controlled substance record compliance requirements.

Conclusion

In Iowa, anchor your policy to the seven‑year rule for physicians, the one‑year‑after‑majority rule for minors, hospital rules tied to the statute of limitations, seven years for substance abuse programs, and five years for nursing facilities—then layer on payer and controlled‑substance rules. When multiple rules apply, retain to the latest date, and keep electronic records fully retrievable for the entire period.

FAQs

What is the minimum retention period for adult patient records in Iowa?

For physicians in private practice, keep adult patient records at least seven years from the last date of service. Hospitals tie retention to Iowa’s statute of limitations rather than a fixed year count, nursing facilities keep records five years after services end, and licensed substance abuse programs keep records seven years after discharge.

How long must records for minor patients be kept?

Retain a minor’s records for at least one year after the patient turns 18 (age of majority), and longer if another rule (such as the seven‑year standard from last service) reaches a later date. In practice, keep the later of those dates.

Are electronic medical records governed by specific retention rules?

Electronic records follow the same timeframes as paper. Ensure EMRs remain complete, accurate, and retrievable; hospitals must provide surveyors access and printouts on request, and telemedicine encounters must be documented to the same standard as in‑person care.

What are the retention requirements for substance abuse treatment records?

Licensed programs must retain records for at least seven years after discharge or completion. Additionally, 42 CFR Part 2 imposes stringent confidentiality and redisclosure limits; while it does not set a separate retention period, you must honor its consent and notice rules.