Retention periods are set by several overlapping authorities — federal program rules, state law, payer contracts and malpractice considerations — and the longest one governs. That is almost always longer than a practice management system’s default.
Ask how long to keep billing records and you get several different answers, all correct, because several different authorities set periods and they do not agree.
The overlapping sources
- Federal program requirements, which set minimums for participation and post-payment review purposes.
- State law, covering medical records generally, and frequently longer for minors — sometimes measured from majority rather than from service.
- Payer contracts, which specify how far back a payer may look back and therefore how long you need evidence.
- Statutes of limitation for claims that might be brought against you.
- False Claims Act exposure, which reaches back further than most retention policies contemplate.
The governing period is the longest applicable one, not the most commonly cited.
Where practices go wrong
They adopt a single number heard somewhere and apply it to everything, and that number is usually shorter than the longest applicable requirement. Or they rely on a practice management system default, which was set for storage convenience rather than compliance.
The specific failure that hurts: purging billing records while still exposed to review. Without the record you cannot defend the claim, and the burden is yours.
What to retain
Not only the clinical record. Claims as submitted, remittance advice, appeal correspondence, authorization records, and the eligibility verification behind them. A defensible claim needs the whole chain, and the pieces most often discarded are the front-end ones.
Set the policy against the longest applicable period, confirm it with your own counsel, and write it down.
Build one policy from the longest period
Trying to apply different retention periods to different record types produces mistakes and rarely saves anything meaningful. Identify the longest obligation that applies to you and retain everything for that.
It is simpler to administer, easier to explain, and removes the risk of deleting the one category that needed keeping.
Retain the context, not just the claim
An audit or an appeal turns on the supporting record — the note, the authorization, the remittance, the correspondence. A retained claim with none of that is evidence of billing and not of entitlement.
Check what happens on a system change
Migrations and vendor changes are where records quietly disappear. Confirm before a cutover what is being migrated, in what form, and what remains accessible in the old system and for how long.
A retention policy that assumes data still exists is not a policy.
Common questions
- How long should a practice keep billing records?
- Long enough to satisfy the longest applicable requirement among federal program rules, state law, your payer contracts and malpractice statutes of limitation.
- Does HIPAA set a record retention period?
- HIPAA sets a retention period for its own required documentation such as policies and authorizations, not for medical or billing records generally. Those come from other sources.
- Do payer contracts affect retention?
- Yes. Many contracts require you to retain claim records and make them available for audit for a defined period, which can exceed state requirements.
- What should be retained beyond the claim itself?
- Remittances, appeal correspondence, authorization records, and the documentation supporting medical necessity. A claim without its supporting record is difficult to defend.
- Can I rely on my software’s default retention?
- No. Defaults are set for storage convenience and are frequently shorter than the longest applicable obligation.
Denials Piling Up?
We handle the revenue cycle end to end — coding by certified coders, claim submission, denial management and appeals, and A/R follow-up, with six reported numbers every month.