Medical records: what to keep, and for how long

The question is usually asked as though a schedule exists specifying how long an individual must keep each kind of medical document. For a household, it does not.

Retention obligations in this area are imposed on providers, not on patients. Establishments and practitioners have record-keeping duties under the legislation and regulations applying to them, with stated periods. A family keeping its own records is under no such duty, and there is no penalty for discarding a report or for keeping one for fifty years.

That sounds like it makes the question easier and in fact makes it harder, because it means the answer cannot be looked up and has to be reasoned from what the records are for.

Any confident schedule you encounter — keep routine reports for five years, imaging permanently, and so on — is somebody's reasonable judgement presented as a rule. The judgement may be sound; it is still a judgement, and it is worth being able to see what drives it rather than adopting a number.

So what follows sets out what actually determines how long a document is worth keeping, and then what that produces in practice. It is about the documents. It says nothing about what any record contains or means, and where a specific legal question arises — whether a record is needed for a claim, what a limitation period is in a particular case — that turns on facts and belongs with a professional.

Each of these pushes retention in a different direction, and a document's period is set by whichever reaches furthest.

Clinical usefulness over a lifetime. Some documents describe events that remain relevant indefinitely — a surgery, a serious admission, a documented adverse reaction to a medication, an established baseline. Their value does not decay, because a clinician decades later may need to know the event happened.

Insurance. Claim submission windows and the periods within which an insurer may query or reassess a claim are set by policy terms and by the applicable regulations, not by a general rule, and they apply to the documents substantiating a claim rather than to medical records generally.

Limitation periods. Where a document might be needed to support or answer a claim, the relevant limitation period matters — for a consumer complaint, the Consumer Protection Act, 2019 provides for a complaint to be admitted within two years of the cause of action arising, with delay condonable on sufficient cause. Other claims have their own periods.

Third-party demands. Some documents are requested decades later by parties with nothing to do with treatment — immunisation records at school or visa stage, fitness records for employment.

Tax and expenditure. Where medical expenditure supports a deduction or a reimbursement, the retention period is driven by the record-keeping expectations for that claim rather than by anything medical.

The most common reason households discard records is the assumption that the hospital or laboratory still has them. It is worth examining that assumption, because it is the weakest link in most retention thinking.

Providers do have retention obligations, and those obligations are finite. Requirements on establishments to maintain records come from clinical establishment legislation and the rules made under it where adopted, along with state legislation, and professional conduct regulations have separately required practitioners to maintain records of in-patients for a stated period — commonly cited as three years. This is an area where the applicable regulations have been revised and replaced, and one set notified in recent years was placed in abeyance, so the current instrument is what governs and is the thing to check rather than a remembered figure.

Whichever period applies, three practical points follow. It is finite, so a document from long ago may simply no longer exist. It attaches to the provider, so a clinic that has closed, merged or moved may hold nothing retrievable regardless of the rule. And obtaining a copy years later, even where it exists, is a request with a timeline attached, which is of limited use when a document is needed at an appointment tomorrow.

So the household's copy should be treated as the copy that will actually be available, and the provider's as a possibility rather than a backstop.

Reasoning from the drivers above gives three groups rather than a schedule of years.

Kept indefinitely, because their value does not decay: discharge summaries and operative records; imaging reports for anything significant, with the image itself where it can be preserved; the record of any documented adverse reaction; immunisation records; records establishing a baseline that later findings will be compared against; and the complete records of any long-running condition.

Kept as long as the condition or the relationship continues, plus a margin: prescriptions and reports for ongoing treatment. The chronological run is what gives these their value, so thinning it defeats the purpose — which is an argument for keeping the sequence rather than the individual documents.

Kept for a period governed by a window rather than by a rule: documents whose remaining purpose is a claim or a deduction. Here the driver is the insurance or limitation or tax period, and the honest formulation is that the document is kept until the relevant window has closed rather than for a fixed number of years, because the window is what determines it.

One category deserves separate mention: bills and receipts. These are frequently the only surviving evidence that a test or a procedure happened at all once a report has gone missing, which makes them worth more than their apparent status as accounting paper suggests — particularly where they were printed on paper that fades.

The retention question was originally a storage question, and for the digital copy it largely is not any more.

A complete scan of a household's medical records is small by the standards of ordinary storage, and it does not deteriorate, take up space, or become harder to keep as it grows. For the digital copy, the sensible default is to keep everything, because the cost of retention has effectively gone and the cost of having discarded something is unchanged.

What has not gone away is the cost of retrieval. A folder holding twenty years of everything is only usable if it is named and indexed, and an unindexed archive of thousands of files is functionally the same as not having kept them. So for digital records the discipline shifts from deciding what to discard to maintaining the naming convention and the index — which is a different task, and the one that actually determines whether the archive has any value.

Paper is where the real retention decision now lives, because paper does take space, does deteriorate, and does have to be handled. A workable arrangement is to keep the indefinite category as paper originals, keep the current material to hand, and treat the rest as digital-only once it has been captured properly — fully legible, both sides, correctly named.

That reframes the question usefully: for most households, what to keep is now a question about paper, and what to keep digitally is nearly always everything.

Whatever is discarded is discarded in a way that matters, because these documents identify a person and describe their health.

Ordinary disposal puts intact documents carrying a name, an address, a policy number and clinical detail into a waste stream handled by several people. Shredding or otherwise destroying them is the straightforward answer, and it applies as much to bills and insurance correspondence as to reports, since those carry identifiers and policy numbers.

Two less obvious cases are worth naming. Documents given to a third party for scanning or printing remain on that party's device unless removed, which means a shop-based scan can outlive the paper it came from. And digital deletion is not always what it appears to be, because copies can persist in backups, in sent messages and in shared folders that were never revisited.

Before discarding anything, the check worth making is whether it has been captured: a full, legible scan of both sides, correctly named, in a location that is itself backed up. Discarding a document that was never properly captured is the one irreversible step in this whole subject.

And the boundary that governs all of it: these are decisions about documents — what to keep, where, and for how long. None of them involves reading the records or forming a view about what they contain, and a household that keeps a complete and well-indexed archive is well placed to hand an accurate history to a clinician rather than to interpret one.