North Dakota Medical Records Retention: How Long to Keep NICU Ventilator Waveform Archives with Identifiers

General Medical Records Retention Requirements

At a glance

• Hospitals in North Dakota must retain patient medical records for at least 10 years after the date the patient was last treated at the hospital. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))
• Federal Medicare Conditions of Participation set a 5‑year minimum for hospital medical records; when state and federal rules differ, follow the longer period (in North Dakota, that typically means 10 years). ([govinfo.gov](https://www.govinfo.gov/content/pkg/CFR-2025-title42-vol5/pdf/CFR-2025-title42-vol5-sec482-24.pdf?utm_source=openai))
• HIPAA does not set a medical records retention period, but it does require safeguarding protected health information (PHI) for as long as you keep it. ([hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/580/does-hipaa-require-covered-entities-to-keep-medical-records-for-any-period/index.html?utm_source=openai))

For hospital-based NICU medical records, including any patient-identifiable ventilator waveforms, the governing North Dakota medical records retention period is 10 years from the last date of treatment. This state rule exceeds the federal 5‑year floor and therefore controls in practice for hospital records. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

Whether a data stream is a “medical record” often turns on use and identifiability. If information is used to make decisions about an individual and maintained by or for the provider, it belongs to the HIPAA “designated record set,” which patients can access and which you must retain according to applicable law. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.501?utm_source=openai))

Retention Protocols for Minor Patients

North Dakota hospitals may dispose of a minor patient’s medical record on or after the patient’s 21st birthday—or on or after the 10th anniversary of the last treatment date—whichever is later. For NICU patients, this typically means retaining the record until at least age 21. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

Put plainly, NICU medical records and any associated patient-identifiable ventilator waveforms must be preserved long enough to cover the patient’s transition to adulthood, not merely a fixed number of years from birth. Building your policy around the later-of rule helps ensure record retention compliance for minor patient medical records. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

Retention Guidelines for Deceased Patients

For hospital patients who die, retain the medical record for at least 10 years from the last treatment date (which, in this context, is typically the date of death). Do not destroy any records while related litigation remains unresolved. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

Note that certain non-hospital settings have different timeframes. For example, North Dakota’s residential end‑of‑life facilities must keep patient records for not less than 5 years from discharge or death. Always confirm the facility type before applying a retention schedule. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-03-35-09))

Custodianship and Transfer of Medical Records

Hospitals and facilities

If a hospital discontinues operations, it must identify where records will be stored, ensure retrieval services for at least 10 years after closure, and provide public notice so former patients or representatives can claim their records. Plan early for continuity of the medical record custodian role. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

Individual licensees and group practices

North Dakota’s Board of Medicine requires that, upon a licensee’s death, retirement, sale of practice, or departure, medical records be transferred to another licensee or entity that agrees to act as the medical record custodian and uphold confidentiality. Active patients must be notified of the transfer and how to request their records, and the Board must be informed of the custodian’s location and contact information. ([ndlegis.gov](https://www.ndlegis.gov/admcode/arc202404392.pdf))

Appointment of Representatives for Record Retention

Beginning January 1, 2024, each North Dakota medical licensee must appoint another North Dakota licensee, representative, or entity to ensure record retention obligations are fulfilled if the licensee dies or becomes incapacitated. Proof of this appointment must be shown to the Board upon request. Embedding this requirement in onboarding and annual compliance attestations helps sustain record retention compliance. ([ndlegis.gov](https://www.ndlegis.gov/admcode/arc202404392.pdf))

Specific Considerations for NICU Ventilator Waveform Archives

When ventilator waveforms are part of the medical record

NICU ventilator waveform archives that include patient identifiers (for example, name, MRN, or a mapping between device serial numbers and a specific infant) constitute PHI. If such data are maintained by or for the provider and used, in whole or in part, to make decisions about the patient, they fall within the HIPAA designated record set and are part of the NICU medical records. In North Dakota hospitals, retain them for at least 10 years from last treatment; for NICU minors, retain until at least the 21st birthday or 10 years from last treatment—whichever is later. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.501?utm_source=openai))

Handling identifiers and de‑identification

Under HIPAA’s Safe Harbor, device identifiers and serial numbers are among the direct identifiers that must be removed for data to be de‑identified. If you strip all required identifiers (or apply expert determination) and the waveforms are no longer linkable to an individual, they are no longer PHI and are generally outside medical records retention rules—though internal research or quality policies may still apply. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.514?utm_source=openai))

Federal floors vs. state requirements

Medicare CoPs require hospitals to retain medical records for at least 5 years, but North Dakota’s hospital rule is 10 years; apply the longer period. HIPAA itself imposes no medical record retention period, only safeguards for PHI while retained. Align schedules to the longest applicable requirement across state, federal, and accreditation standards. ([govinfo.gov](https://www.govinfo.gov/content/pkg/CFR-2025-title42-vol5/pdf/CFR-2025-title42-vol5-sec482-24.pdf?utm_source=openai))

Practical steps for healthcare data archiving

• Map ventilator waveforms to the patient record in your retention schedule as “designated record set” items when identifiers are present or the data inform care decisions. ([law.cornell.edu](https://www.law.cornell.edu/cfr/text/45/164.501?utm_source=openai))
• Index archives by patient identifiers and encounter dates to enable retrieval for the full medical records retention period applicable in North Dakota. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))
• Apply litigation holds immediately after an adverse event or claim; suspend routine destruction until all matters conclude. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))
• Document destruction processes for expired records and verify that copies in secondary systems (waveform repositories, VNAs, backups) are included in the purge workflow.
• If a facility closes or a licensee departs, designate a medical record custodian and notify stakeholders per North Dakota rules before any data moves. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

Conclusion

In North Dakota, treat patient-identifiable NICU ventilator waveforms as part of the medical record when they inform care, and retain them on the hospital’s schedule: 10 years from last treatment, with a later-of rule to at least age 21 for minors. Build procedures for custodianship, transfer, litigation holds, and de‑identification to keep your program aligned with record retention compliance requirements. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

FAQs

How long must NICU ventilator waveform archives be retained in North Dakota?

In hospitals, retain patient-identifiable NICU ventilator waveforms as part of the medical record for at least 10 years from the date the patient was last treated. This exceeds the federal 5‑year floor and controls in practice for hospital records in North Dakota. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

What are the retention requirements for minor patient records?

Hospitals may dispose of a minor’s record on or after the patient’s 21st birthday or on or after the 10th anniversary of the last treatment date—whichever is later. For NICU patients, that typically means keeping records until at least age 21. ([law.cornell.edu](https://www.law.cornell.edu/regulations/north-dakota/N-D-A-C-33-07-1.1-20))

How should medical records be transferred upon a healthcare licensee's departure?

Upon a licensee’s death, retirement, sale of practice, or departure, records must be transferred to another licensee or entity that agrees to act as medical record custodian and maintain confidentiality. Active patients must be notified of the transfer and their options, and the North Dakota Board of Medicine must be notified of the custodian’s location and contact details. ([ndlegis.gov](https://www.ndlegis.gov/admcode/arc202404392.pdf))