Virginia Medical Records Retention Requirements: How Long Healthcare Providers Must Keep Patient Records
General Retention Periods for Patient Records
Office-based practitioners
For physicians and other practitioners licensed by the Virginia Board of Medicine, the baseline patient record retention policy is a minimum of six years from the last patient encounter. Practitioners are not required to keep records longer than 12 years from the date of creation, except for specified categories noted below. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title54.1/chapter29/section54.1-2910.4/))
Board regulations also require you to manage records properly, provide timely access when authorized, and inform patients about your retention and destruction timeframe. These are core healthcare provider compliance obligations that apply regardless of file format. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title18/agency85/chapter20/section26/))
Hospitals and outpatient surgical hospitals
Hospitals must preserve each patient’s medical record (originals or accurate reproductions) for at least five years after discharge. This rule applies to inpatient, outpatient, and emergency care settings and operates alongside HIPAA’s privacy and security standards. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section1260/))
Retention of Minor Children’s Records
For office-based practitioners, medical records of minor children (including immunizations) must be kept until the child turns 18 or is emancipated, with a minimum of six years from the last patient encounter—whichever is longer. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title18/agency85/chapter20/section26/))
Hospitals must retain minors’ records for at least five years after the patient reaches age 18. This aligns your facility’s patient record retention policy with state medical record regulations for minors. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section1260/))
Retention of Records for Deceased Patients
A patient’s death does not shorten record-keeping duties. Practitioners still follow the six-year minimum (and any applicable 12-year statutory cap), while hospitals retain records for at least five years after discharge. Maintain your patient record retention policy consistently for deceased patients to ensure continuity of care documentation and risk management. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title18/agency85/chapter20/section26/))
Separately, Virginia requires the medical certification portion of the death certificate to be completed and filed electronically through the Electronic Death Registration System (EDRS) within 24 hours after death, with additional filing provisions outlined in statute. These vital records reporting steps are distinct from medical record retention. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title32.1/chapter7/section32.1-263/?utm_source=openai))
Retention of Birth and Death Information
Hospitals must retain birth and death information for 10 years. In addition, persons in charge of institutions and funeral directors must keep specified vital records for at least 10 years. These requirements support accurate vital records reporting and auditing. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section1260/))
Ready to simplify HIPAA compliance?
Join thousands of organizations that trust Accountable to manage their compliance needs.
Compliance for Abortion Records
Hospitals and outpatient surgical hospitals must furnish a record of abortions and the information necessary for issuance of a fetal death certificate to the Division of Vital Records within 10 days after the abortion. This deadline is a key fetal death certificate requirement under Virginia Administrative Code 12VAC5-410-1260. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section1260/))
Virginia law also sets filing timelines for fetal death reports: the report must be filed within three days of delivery or abortion, and the medical certification must be completed within 24 hours. Induced termination of pregnancy reports must include the data elements specified by the Board of Health. In such reports, the patient is not identified by name. EDRS supports electronic registration and reporting for these events. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title32.1/chapter7/section32.1-264/))
Exceptions and Extended Retention Requirements
Two important carve-outs modify the general rules. First, practitioners need not retain health records for longer than 12 years from the date of creation, except for minors (see above) or when a longer period is required by federal law or by contract (for example, payer or research agreements). Second, once records have been transferred to another practitioner or provided to the patient or personal representative, the originating practitioner has no further duty to maintain duplicates. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title54.1/chapter29/section54.1-2910.4/))
Guidelines for Transfer of Medical Records
Patient-initiated or continuity-of-care transfers
Upon proper authorization, you must provide records to the patient, the patient’s personal representative, or another practitioner in a timely manner and in accordance with Virginia’s health records privacy law. These medical record transfer regulations apply regardless of format. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title18/agency85/chapter20/section26/))
Closure, sale, or relocation of a practice
Before transferring current patients’ records due to a closure, sale, or relocation, you must first attempt to notify patients at their last known address (electronically or by mail) and publish prior notice in a newspaper of general circulation in the practice area. “Relocation” means moving the records more than 30 miles away, or to another state or D.C. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title54.1/chapter24/section54.1-2405/?utm_source=openai))
If records have already been transferred to another provider or provided to the patient or personal representative, Virginia law does not require you to keep them beyond that transfer. Build this into your patient record retention policy to avoid unnecessary duplication. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title54.1/chapter29/section54.1-2910.4/))
FAQs
What is the minimum retention period for adult patient medical records in Virginia?
For office-based practitioners, keep adult records at least six years from the last encounter (and you are not required to retain beyond 12 years from creation, subject to exceptions). Hospitals must keep records at least five years after discharge. ([law.lis.virginia.gov](https://law.lis.virginia.gov/vacode/title54.1/chapter29/section54.1-2910.4/))
How long must records of minor patients be kept?
Practitioners must keep minors’ records until the patient turns 18 (or is emancipated), with a minimum of six years from the last encounter. Hospitals must keep minors’ records for at least five years after the patient reaches age 18. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title18/agency85/chapter20/section26/))
Are there different retention requirements for deceased patients’ records?
No. The same timeframes apply—six years for practitioners and five years for hospitals—despite the patient’s death. Separately, complete the medical certification of the death certificate in EDRS within 24 hours, as required by statute. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title18/agency85/chapter20/section26/))
What are the procedures for abortion record reporting in Virginia?
Hospitals/outpatient surgical hospitals must furnish a record of abortions and fetal death certificate information to Vital Records within 10 days. A fetal death report must be filed within three days of delivery or abortion, with the medical certification completed within 24 hours; induced termination reports must include the data items set by regulation and do not identify the patient by name. EDRS is used to file these vital records. ([law.lis.virginia.gov](https://law.lis.virginia.gov/admincode/title12/agency5/chapter410/section1260/))
Table of Contents
Ready to simplify HIPAA compliance?
Join thousands of organizations that trust Accountable to manage their compliance needs.