Oregon Medical Records Retention Requirements: How Long Providers Must Keep Patient Records

Understanding Oregon’s statutory retention requirements helps you set clear policies, protect patients, and reduce risk. This guide summarizes the Patient Record Retention Periods that typically apply across care settings and highlights practical steps for Healthcare Provider Compliance, Confidentiality Safeguards, and Patient Record Transfer Procedures.

General Medical Records Retention

Core timelines

• Adults: retain the complete medical record for at least 7 years from the date of last encounter.
• Pediatric Medical Record Retention: keep a minor’s record until the patient turns 18, then for at least 7 additional years (commonly until age 25).
• Deceased patients: maintain for at least 7 years after the date of death or last encounter, whichever is later.

Apply the period to all formats—paper, EHR, images, waveforms, and device data—so everything needed to reconstruct care remains available for the entire Patient Record Retention Period.

Best-practice overlays

• Align retention with payer audit windows and malpractice limitation periods if longer than the minimums.
• Document a written retention schedule as part of your compliance plan and review it annually.
• Maintain HIPAA-required documentation (policies, risk analyses, BAAs) for at least 6 years; this is separate from medical record retention but should live in the same governance framework.

Hospital Medical Records Retention

Inpatient and outpatient hospital records

• Adults: keep records for at least 10 years after discharge or last encounter.
• Minors: retain until the patient reaches 18, then for at least 10 additional years.
• Special logs (e.g., operative, anesthesia, transfusion): maintain in parallel with the patient chart’s retention period.

Include ancillary files—imaging, pathology slides/blocks per clinical policy, and device/implant tracking documents—so the hospital can respond to quality reviews and inquiries during the full Statutory Retention Requirements window.

Home Health Agencies Records Retention

Patient charts and plans of care

• Adults: retain at least 7 years after discharge from service.
• Minors: keep until age 18 plus at least 7 years.
• Care coordination artifacts (OASIS, plans of care, visit notes): file with the record and retain for the same period.

Because services occur in the home, emphasize chain-of-custody for paper notes and secure, role-based EHR access to meet Medical Record Security Standards.

Ambulatory Surgical Centers Records Retention

ASC patient records

• Adults: retain at least 10 years from the date of service.
• Minors: keep until the patient turns 18, then for at least 10 additional years.
• Implant logs and device identifiers: maintain no less than the patient record’s retention period; longer retention may be prudent for device tracking.

ASC documentation should comprehensively capture pre-op, intra-op, and post-op phases so the full episode remains accessible throughout the Patient Record Retention Period.

Birthing Centers Records Retention

Maternal and newborn records

• Maternal charts: retain at least 10 years after discharge.
• Newborn charts: follow Pediatric Medical Record Retention—keep until the child turns 18, then for at least 10 additional years.
• Screening logs (newborn metabolic/hearing): file or cross-reference in the infant’s chart for the same retention duration.

Ensure patient education materials, consents, and transfer documents are preserved to demonstrate continuity of care and compliance with Statutory Retention Requirements.

Employee Medical Records Retention

Occupational health and exposure records

• Employee medical and exposure records: retain for the duration of employment plus 30 years.
• Short-term first aid records for one-time treatment with no follow-up: keep for 5 years when permitted by rule.
• Vaccination, fit-testing, and surveillance data: treat as employee medical records and store separately from HR personnel files with strict confidentiality safeguards.

Limit access to “need-to-know” roles, and disclose only with proper authorization or as otherwise permitted by law.

Record Storage and Security

Confidentiality safeguards

• Encrypt data at rest and in transit; enforce strong authentication and role-based access with least-privilege.
• Enable audit logging and quarterly access reviews; promptly terminate access on role change or separation.
• Use secure offsite backups and test restoration; document downtime procedures for continuity.

Patient record transfer procedures

• When a provider relocates, retires, or the practice closes, designate a records custodian responsible for fulfilling requests during the full retention period.
• Give patients advance written notice with instructions for obtaining copies or authorizing transfer to a new provider.
• Maintain a tracking log of requests and releases; verify identity; transmit through secure channels; and retain accounting of disclosures as required.
• At the end of the retention period, dispose of records securely (cross-cut shredding, pulping, or certified media destruction) and document destruction.

Summary

In Oregon, most office-based records are kept at least 7 years, while hospitals, ASCs, and birthing centers typically retain for 10 years, with longer timelines for minors. Build a written schedule, apply robust Medical Record Security Standards, and manage transfers and destruction meticulously to meet all Statutory Retention Requirements and protect patients.

FAQs

How long must hospitals retain patient medical records in Oregon?

Hospitals should retain adult records for at least 10 years after discharge or last encounter. For minors, keep the record until the patient turns 18 and then for at least 10 additional years.

What are the retention requirements for birthing center records?

Retain maternal records for at least 10 years after discharge. Keep newborn records under Pediatric Medical Record Retention guidelines—until age 18 plus at least 10 additional years.

How should providers handle patient records after practice closure?

Designate a records custodian, give patients advance notice with clear request instructions, maintain secure storage for the entire retention period, and document every release. When the period ends, complete secure destruction and keep a destruction log.

How long must employee medical records be maintained?

Maintain employee medical and exposure records for the duration of employment plus 30 years, with limited exceptions (for example, certain one-time first aid records may be kept for 5 years).