Ophthalmic Pathology Lab PHI Retention Policy: A Practical Guide

An ophthalmic pathology lab’s retention policy should distinguish patient records from laboratory materials such as reports, requisitions, slides, blocks, and tissue remnants. HIPAA does not set a general medical-record retention period, but CLIA establishes minimum periods for many laboratory records and pathology materials. State law may require longer retention.

How do HIPAA and state law affect ophthalmic pathology record retention?

HIPAA generally governs how covered entities and business associates protect and handle protected health information (PHI); it does not set a general period for keeping medical records. HHS explains that state law generally determines how long medical records must be retained. HIPAA does, however, require appropriate safeguards while PHI is maintained, including during disposal. See the HHS guidance on HIPAA and medical-record retention.

Keep this separate from HIPAA’s documentation rules: certain documentation required by the HIPAA Privacy Rule must be retained for six years, but that does not create a six-year retention period for every patient record. Check the applicable requirements in 45 CFR § 164.530.

For a lab, CLIA’s retention rules provide federal minimums for specified records and materials. State statutes, regulations, licensing requirements, or other applicable obligations may require longer periods. Before adopting a schedule, identify every state in which the lab operates and confirm which rules apply to the lab, its records, and its specimens.

How long must pathology reports and laboratory records be retained?

Under CLIA, pathology test reports must be retained for at least 10 years from the date they are reported. The lab must retain or be able to retrieve the original report, including final, preliminary, and corrected reports. Other CLIA records—including test requisitions and authorizations, quality-control and patient-test records, proficiency-testing records, and quality-system assessment records—generally have a minimum two-year retention period, subject to specific exceptions. Review 42 CFR § 493.1105 for the applicable record categories and periods.

For test requisition retention, CLIA requires at least two years. This includes the patient chart or medical record if the lab uses it as the test requisition or authorization. A lab should make sure its schedule identifies the record type and the event that starts its retention clock; pathology reports, for example, are measured from the reporting date.

These are minimums, not an instruction to destroy records as soon as the minimum period ends. Confirm that no longer state requirement or other applicable obligation applies, and maintain records in a form that remains legible, secure, and retrievable for the full required period.

What are the retention periods for histopathology and cytology slides?

For CLIA-covered laboratories, the minimum histopathology slide retention period is 10 years from the date of examination. The cytology slide retention period is at least five years from the date of examination, subject to the proficiency-testing exception identified in the regulation. These periods apply to physical slide preparations under the current text of 42 CFR § 493.1105.

Build the schedule around the correct start date: the date of examination for slides, rather than the date the lab later archives or transfers them. Track slide location and any loan or referral so the lab can retrieve materials when needed. Do not assume that a digital image replaces a physical slide required to be retained under the applicable rule.

How long should pathology blocks and tissue remnants be kept?

CLIA requires pathology specimen blocks to be retained for at least two years from the date of examination. Tissue remnants must be preserved until a diagnosis is made on the specimen. The histopathology requirements also direct labs to maintain tissue remnants in a manner that ensures proper preservation until the submitted portions have been examined and a qualified individual has made a diagnosis. See 42 CFR § 493.1105 and 42 CFR § 493.1273.

For pathology block retention and tissue remnant preservation, distinguish the required minimum from a lab’s operational choice to keep material longer. State requirements or other applicable obligations may extend retention. A written schedule should specify when the clock starts, how materials are indexed, and who approves disposal once the required period has passed.

How should retained PHI and specimens be protected and disposed of?

Protect paper records, electronic records, slides, blocks, and specimen containers throughout storage and retrieval. Use access controls, secure storage, and an inventory or tracking process so authorized staff can locate materials without exposing identifying information unnecessarily. CLIA requires retained records and applicable materials to be maintained under conditions that ensure proper preservation; see 42 CFR § 493.1101.

HIPAA’s disposal safeguards apply to PHI in any form. The rules do not prescribe one universal disposal method, but the lab must use reasonable safeguards suited to the material and risk. HHS notes that paper PHI may be shredded or otherwise rendered unreadable, while electronic PHI and media require appropriate disposition and protections against unauthorized access. See HHS guidance on disposing of PHI and the HIPAA Security Rule’s device and media controls.

For specimens, protect patient identifiers on labels and associated records and follow applicable laboratory safety and waste-disposal procedures. Document destruction or transfer in a way that records what was disposed of, when, and under whose authorization. If a legal hold, investigation, or other applicable requirement prevents destruction, suspend routine disposal for the affected materials.

How can a lab plan for state-specific requirements and closure?

Create a retention matrix listing each record and material type, the federal minimum, any longer state or other applicable period, the event that starts the clock, the storage location, and the approved disposal method. Include reports, test requisitions, laboratory records, slides, blocks, tissue remnants, and any associated PHI. Review the matrix when laws, laboratory services, or operating locations change.

Before closing or transferring operations, identify a records custodian and make written arrangements for secure storage, continued retention, and retrieval by authorized parties. CLIA specifically requires a lab that ceases operation to make provisions ensuring that records and applicable slides, blocks, and tissue remain retained and available for the required periods. Consult 42 CFR § 493.1105(b) and check state closure, notice, and records-transfer requirements as well.

In short, use CLIA’s retention periods as federal minimums, verify state-specific rules before setting a destruction date, and protect records and specimens until their applicable retention periods end. Plan for secure retrieval and continued custody even if the lab changes ownership or closes.

FAQs

Does HIPAA set a general medical-record retention period?

No. HIPAA does not set a general medical-record retention period; state law generally governs how long medical records must be kept. HIPAA does require safeguards for PHI while it is maintained, including during disposal. See HHS guidance.

How long must a laboratory retain pathology reports?

CLIA requires pathology test reports to be retained for at least 10 years after the date of reporting. State law or another applicable requirement may require a longer period. See 42 CFR § 493.1105.

How long must histopathology and cytology slides be retained?

Under CLIA, retain histopathology slides for at least 10 years from examination and cytology slide preparations for at least five years from examination, subject to the applicable proficiency-testing exception. See 42 CFR § 493.1105.

What retention arrangements are required when a laboratory closes?

A lab that ceases operation must make provisions to ensure its records and applicable slides, blocks, and tissue remain retained and available for the required periods. The lab should arrange secure custody and retrieval, and verify any additional state closure or transfer requirements. See 42 CFR § 493.1105(b).