Missouri Medical Records Retention Requirements (2024): How Long Providers Must Keep Adult and Minor Patient Records

Retention Periods for Physicians

Adults

Missouri’s medical records retention statute for physicians (RSMo 334.097) requires you to keep an adult patient’s record for a minimum of seven years from the date you last provided professional services. This floor applies regardless of practice ownership changes or a practice closure. If another payer or program you bill to imposes a longer period, follow the longest applicable rule.

Minors

RSMo 334.097 does not set a different statutory period for minors. Many Missouri practices, however, adopt a risk‑management policy to retain a minor’s record until at least the patient’s 21st birthday—or longer when other laws or payers require it—to ensure coverage for claims and medical necessity reviews. When in doubt, apply the longest period triggered by payer contracts, audits, or potential litigation.

Hospital Records Retention Guidelines

Adults

Under MO Hospital Licensing Regulations, hospitals must preserve patient medical records in a permanent, retrievable format and retain them for at least ten years after the last encounter or discharge. This state requirement exceeds many federal baselines, so most hospitals set their organization-wide policy at ten years or more.

Minors

For minor patients, Missouri requires hospitals to keep the record until at least the patient’s twentieth birthday. In practice, this can extend well beyond ten years for children treated at a young age. Retention clocks restart with each new hospital encounter.

Long-Term Care Facilities Recordkeeping

Skilled and Intermediate Care (Nursing Homes)

Missouri law (RSMo 198.052) requires each facility to retain a resident’s medical records for five years after the resident leaves the facility. If the resident was under age twenty‑one, the facility must retain the medical record for five years after the resident reaches age twenty‑one (that is, until at least the resident’s twenty‑sixth birthday). Facilities must also retain certain financial and operational records for at least seven years.

Residential Care and Assisted Living

Residential care and assisted living regulations mirror this framework: resident records are typically retained for at least five years after discharge or until the resident turns twenty‑one, whichever is longer. Always verify your license type’s rule and apply the longest requirement that applies to the record set.

MO HealthNet Provider Documentation

MMAC Policy for MO HealthNet providers requires you to keep medical and fiscal documentation that supports billed services for six years from the date of service. Certain provider types—such as Nursing Homes, CSTAR, and Community Psychiatric Rehabilitation Programs—must retain for seven years. If another law (for example, hospital licensing or Medicare cost reporting) or a contract requires a longer period, retain records for the longest applicable time. Electronic retention is acceptable so long as records are complete, accurate, and promptly retrievable for audit.

Medicare and CMS Hospital Requirements

Under the Medicare Conditions of Participation for hospitals (42 CFR 482.24), medical records must be retained in their original or legally reproduced form for at least five years. Missouri’s hospital licensing rules require longer retention than this federal baseline, so Missouri hospitals should follow the state’s ten‑year minimum (and longer when minors are involved) to satisfy both state and federal standards.

HIPAA Administrative Documentation Retention

HIPAA’s Privacy Rule requires covered entities and business associates to retain required documentation—such as policies and procedures, workforce training documentation, complaints and their disposition, and Notice of Privacy Practices documentation—for six years from the date of creation or the date last in effect, whichever is later (45 CFR 164.530(j)). Note that HIPAA’s six‑year rule applies to administrative documentation, not clinical record retention; you must still follow Missouri’s medical record retention statute and program‑specific requirements for patient records.

Legal Considerations and Compliance

Practical compliance tips

• Apply the longest rule: Compare RSMo 334.097, MO Hospital Licensing Regulations, RSMo 198.052, MMAC Policy, Medicare’s 42 CFR 482.24, and HIPAA 45 CFR 164.530(j). Set policy to the most stringent period that applies to each record type.
• Use litigation holds: Suspend routine destruction if you receive a request, complaint, or notice suggesting potential litigation, audit, or investigation.
• Cover minors carefully: For hospitals and long‑term care, Missouri sets specific, longer timelines for minors. For physician practices, consider retaining to at least age twenty‑one as a risk‑management best practice unless another rule requires longer.
• Document destruction securely: When retention periods end, destroy records in a way that protects confidentiality and creates an auditable destruction log.
• Ensure portability: If your entity closes, changes ownership, or migrates EHRs, designate a custodian and preserve full access to retained records for the full period.

Summary

In Missouri, physicians must keep records at least seven years from last service, hospitals at least ten years (and to a minor’s twentieth birthday), and long‑term care facilities at least five years after discharge—with minors’ records kept at least five years after age twenty‑one. MO HealthNet providers retain six years (seven for certain programs), Medicare requires at least five years for hospitals, and HIPAA requires six years for administrative documentation. When multiple rules apply, follow the longest period.

FAQs

What is the required retention period for adult patient records in Missouri?

It depends on the setting: physicians must retain for at least seven years from the last professional service (RSMo 334.097); hospitals must retain for at least ten years under MO Hospital Licensing Regulations; and long‑term care facilities must retain for at least five years after discharge (RSMo 198.052). Always follow the longest rule that applies to the record set.

How long must hospitals keep minor patient records in Missouri?

Hospitals must keep a minor’s record until at least the patient’s twentieth birthday, which can extend well beyond ten years for younger children.

Do Missouri long-term care facilities have different retention rules for minors?

Yes. Long‑term care facilities must retain a minor resident’s medical record for at least five years after the resident turns twenty‑one (effectively until at least age twenty‑six).

Are MO HealthNet providers subject to specific medical records retention requirements?

Yes. MMAC Policy requires MO HealthNet providers to retain supporting medical and fiscal documentation for six years from the date of service—seven years for Nursing Home, CSTAR, and Community Psychiatric Rehabilitation Programs. If another law or contract requires longer retention, keep records for the longer period.

What federal regulations impact Missouri hospitals’ medical records retention?

Medicare’s Conditions of Participation (42 CFR 482.24) require hospitals to retain records for at least five years. Missouri’s hospital licensing rules are stricter, so Missouri hospitals should follow the state’s ten‑year minimum (and the minor‑to‑age‑twenty requirement). HIPAA’s 45 CFR 164.530(j) separately requires retention of administrative documentation for six years.