North Carolina Medical Records Retention Requirements: How Long to Keep Adult and Minor Patient Records

Adult Patient Records Retention Period

Hospitals (licensed under 10A NCAC 13B)

For adult patients, hospitals must retain the medical record for a minimum of 11 years after the date of discharge. If a patient was once a minor and is later readmitted as an adult, the adult retention rule applies to the subsequent admissions. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

Clinics and specialty facilities with facility‑specific rules

Some North Carolina–licensed facilities have their own retention standards. For example, licensed abortion clinics must retain adult patient records for at least 10 years from the most recent discharge. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-carolina/10A-N-C-Admin-Code-13S-0321))

Medical offices not governed by a facility‑specific rule

State guidance notes there is no specific North Carolina statute for record retention in free‑standing (non‑hospital) medical offices; many practices adopt a 10‑year policy after last contact to align with patient care, risk, and claims considerations. ([radiation.ncdhhs.gov](https://radiation.ncdhhs.gov/xray/documents/retenmedrecgud.pdf))

Minor Patient Records Retention Period

Hospitals (licensed under 10A NCAC 13B)

Hospitals must retain records created when the patient was a minor until the patient’s 30th birthday. If that individual is later admitted as an adult, the adult rule (11 years after discharge) governs those adult encounters. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

Clinics and specialty facilities with facility‑specific rules

Licensed abortion clinics must keep a minor’s record until three years after the patient’s 18th birthday (i.e., typically until age 21). ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-carolina/10A-N-C-Admin-Code-13S-0321))

Medical offices without a facility‑specific rule

State guidance suggests retaining minor records for at least 10 years after last contact or four years beyond the 18th birthday, whichever is longer, in settings where no statute sets a different period. ([radiation.ncdhhs.gov](https://radiation.ncdhhs.gov/xray/documents/retenmedrecgud.pdf))

Record Retention for Discontinued Facilities

Hospitals

If a hospital closes, management must tell the state Division where records will be stored and keep them with a business that offers retrieval services for at least 11 years after the closure date (or follow the minor‑records rule when applicable). ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

NC‑licensed clinics

When a licensed abortion clinic ceases operation, it must arrange for preservation of records for at least 10 years and notify the Division of these arrangements. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-carolina/10A-N-C-Admin-Code-13S-0321))

Litigation and audit holds

Even when a minimum period has been met, records connected to a notice of claim, lawsuit, or audit should be retained until the matter is fully resolved, including appeals, per public‑hospital records guidance. ([archives.ncdcr.gov](https://archives.ncdcr.gov/public-hospitals-schedule/open))

Digital Archiving and Record Management

Electronic health records are expressly permitted

North Carolina law authorizes providers and facilities to create and maintain medical records electronically, without a separate paper copy, so long as records are legible, retrievable, and backed up appropriately. ([ncleg.gov](https://www.ncleg.gov/EnactedLegislation/Statutes/HTML/ByArticle/Chapter_90/Article_29.html))

Digital archiving of hospital records

Hospitals may digitally archive medical records on or off premises if confidentiality and safekeeping are ensured; do not destroy originals until the archived images/files are verified for content. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

HIPAA documentation retention (separate from patient record retention)

HIPAA does not set a nationwide medical record retention period, but it does require you to retain Security Rule policies, procedures, and related compliance documentation for at least six years from creation or last effective date. Build this into your electronic health records compliance program and healthcare record security practices. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.316?utm_source=openai))

Program‑specific rules (e.g., Medicaid)

Title XIX/XXI (Medicaid/NC Health Choice) providers must keep financial/medical records needed to document services for at least five full years, unless another law requires longer. This runs in addition to North Carolina medical record statutes and facility rules. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-carolina/10A-N-C-Admin-Code-22F-0107?utm_source=openai))

Medical Record Ownership and Access

Who owns the records?

In North Carolina, hospital medical records are the property of the hospital, and licensed abortion‑clinic records are the property of the clinic; originals generally are not removed except by court order. Patients may receive copies for authorized purposes. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

Patient access and copy fees

Patients have a right to access their information; providers may charge reasonable, capped copy fees under G.S. 90‑411 (with different rules for workers’ compensation requests). Electronic records are legally equivalent to paper, and electronic or digital signatures may be used to authenticate entries. ([ncleg.gov](https://www.ncleg.gov/EnactedLegislation/Statutes/HTML/ByArticle/Chapter_90/Article_29.html))

Legal Compliance and Subpoena Procedures

HIPAA: court orders vs. subpoenas

With a court order, you may disclose only the information described in the order. With an attorney‑issued subpoena or similar process that is not accompanied by a court order, HIPAA permits disclosure only after the requestor provides “satisfactory assurances” (such as evidence of patient notice or a qualified protective order), or you obtain a valid patient authorization. ([hhs.gov](https://www.hhs.gov/hipaa/for-individuals/court-orders-subpoenas/index.html?utm_source=openai))

North Carolina Rule 45 considerations

North Carolina’s Rule 45 addresses subpoenas to custodians of hospital medical records and sets procedures for production and objections. Always verify scope, timing, and any privilege or confidentiality issues before producing records. ([ncleg.net](https://www.ncleg.net/enactedlegislation/statutes/html/bysection/chapter_1a/gs_1a-1%2C_rule_45.html?utm_source=openai))

Key takeaways

• Align your healthcare facility record policies with the controlling North Carolina medical record statutes and facility rules, and layer on HIPAA requirements where they are stricter. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))
• Use secure, access‑controlled systems and documented retention schedules to meet electronic health records compliance and healthcare record security expectations. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.316?utm_source=openai))
• When in doubt—especially around subpoenas of medical records—confirm authority, narrow scope to the minimum required, and follow Rule 45 and HIPAA procedures. ([hhs.gov](https://www.hhs.gov/hipaa/for-individuals/court-orders-subpoenas/index.html?utm_source=openai))

FAQs

How long must adult patient records be retained in North Carolina?

Hospitals must keep adult patient records for at least 11 years after discharge. Certain licensed clinics (for example, abortion clinics) must keep adult records for at least 10 years. In free‑standing medical offices without a facility‑specific rule, many adopt a 10‑year policy based on state guidance. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

Until what age must minor patient records be kept?

Hospitals must retain minor‑patient records until the patient’s 30th birthday. Licensed abortion clinics must retain a minor’s record until three years after the 18th birthday. Where no facility‑specific rule applies, state guidance supports keeping minor records for at least 10 years after last contact or four years beyond majority, whichever is longer. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

What are the rules for retaining records after a facility closes?

Closed hospitals must notify the state where records are stored and keep them with a retrieval‑service business for at least 11 years after closure (or follow the minor‑records rule when applicable). Licensed clinics must arrange preservation for at least 10 years and notify the Division. Keep any records implicated in claims or audits until final resolution. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

Can medical records be digitally archived and originals destroyed?

Yes. Hospitals may digitally archive records if confidentiality and safekeeping are ensured, and may destroy originals only after confirming the digital copy’s completeness. More broadly, North Carolina permits fully electronic medical records if they are legible, retrievable, and properly backed up. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))

Who legally owns patient medical records in North Carolina?

Hospitals own hospital medical records, and licensed clinics own their facility records. Patients do not own the originals but have rights to access and obtain copies, with charges limited by G.S. 90‑411. ([info.ncdhhs.gov](https://info.ncdhhs.gov/dhsr/rules/2021/HospitalRules/10A-NCAC-13B-3903-AR.pdf))