West Virginia Medical Records Retention Laws (2026 Guide)

Overview of West Virginia Medical Records Retention

West Virginia stands out among U.S. states because it lacks a comprehensive statute that sets a specific, mandatory retention period for medical records held by all types of health care providers. Multiple bills have been introduced in the West Virginia Legislature to fill this gap, including HB 4396 in 2008 and SB 363 in 2011, but none have been enacted into law.

This means that West Virginia providers must look to a combination of regulatory board rules, hospital licensure requirements, federal requirements, and professional best practices to determine how long to keep patient records.

The absence of a single, clear retention statute creates a patchwork of obligations. Hospitals, physicians, nursing facilities, and other providers each face different minimum standards depending on the rules that apply to their license type.

The Gap in West Virginia Law

West Virginia Code Chapter 16, Article 29 governs "Health Care Records," but its three sections address only patient access, copying fees, and parental access to minor records. The article contains no provision establishing a retention period.

What Chapter 16, Article 29 Actually Covers

W.Va. Code 16-29-1 requires licensed health care providers to furnish copies of patient records within 30 days of a written request. The statute allows records to be provided in paper or electronic form, including through secure web portals, computer discs, email, or portable memory devices.

W.Va. Code 16-29-2 sets fee limits for copies. Third parties requesting records cannot be charged more than a $20 search and handling fee, 40 cents per page for paper copies, plus postage. Providers cannot charge indigent individuals if the records support a Social Security Act claim or appeal.

W.Va. Code 16-29-3 addresses parental access to a minor child's health records, generally prohibiting providers from denying access to a parent, guardian, foster parent, or kinship placement. Exceptions apply when the minor has graduated high school, is emancipated, or is married.

None of these sections tell providers how long they must keep the records.

Failed Legislative Attempts

HB 4396 (2008) would have required custodians to retain adult records for 10 years following the last date of treatment or contact. It also proposed specific rules for minors, disabled persons, and deceased patients. The bill did not pass.

SB 363 (2011) proposed a 7-year retention period for adult records, with similar provisions for minors and disabled patients. This bill also failed to advance.

Until the West Virginia Legislature enacts a general retention statute, providers must rely on the specific rules described below.

Hospital Medical Records Requirements

West Virginia hospitals are subject to the most clearly defined retention rules in the state, found in the hospital licensure regulations.

W.Va. CSR 64-12-7.2: Hospital Licensure Rules

Under W.Va. Code of State Rules Series 64-12, which governs hospital licensure, hospitals must preserve medical records for a minimum of five years in their original form or in a legally reproduced form. This applies to all patient records, including those for patients treated in the emergency room and outpatient departments.

The hospital licensure rules also require hospitals to:

• Maintain a medical records department under the supervision of a qualified person
• Keep a medical record for every individual evaluated or treated, whether inpatient or outpatient
• Use a coding and indexing system that allows retrieval by diagnosis and procedure
• Ensure all entries are legible, authenticated, and dated promptly
• Provide copies to the Office of Health Facility Licensure and Certification within 48 hours of a written request

Short-form medical records may be used for patients hospitalized for less than 48 hours, except for maternity and newborn infant cases.

Physician Medical Records Requirements

WV Board of Medicine Rules

The West Virginia Board of Medicine has authority under 11 CSR 1A to discipline licensees who fail to maintain complete medical records for at least three years after the last date of treatment. This three-year minimum is the enforceable regulatory floor for physicians and other Board licensees.

However, the Board strongly recommends that licensees retain records for at least 10 years after the last entry or last date of service, whichever is longer. This recommendation is based on several practical considerations:

• Medicare and Medicaid may conduct audits up to 10 years after treatment or billing
• The West Virginia medical malpractice statute of repose runs for 10 years under W.Va. Code 55-7B-4
• Insurance audits and legal proceedings may require records well beyond the three-year minimum

The Board advises all licensees to develop and implement a written medical record retention and production policy in consultation with legal counsel.

What Physicians Should Address in Retention Policies

The Board of Medicine recommends that every physician's retention policy cover:

• The categories of documents to be maintained (electronic health records, test results, encounter notes, immunization records, billing records)
• Specific timeframes for retaining each category of document
• Procedures for notifying patients about the retention policy
• How patients can request copies and the associated fees
• Archiving and retrieval processes

Minor Patient Records

West Virginia does not have a statute specifying how long minor patient records must be retained. The failed bills would have required retention for the longer of two years after the minor reaches the age of majority (18) or a set number of years from the last treatment date.

Board of Medicine Guidance

The WV Board of Medicine recommends that records for minor patients, including immunization records, be maintained at least until the statute of limitations passes for all claims that may arise from the care provided.

Statute of Limitations Considerations

Under W.Va. Code 55-7B-4(c), a medical injury claim involving a child under age 10 at the time of injury must be filed within two years of the injury or before the child turns 12, whichever provides the longer period. The absolute statute of repose is 10 years from the date of injury.

This means a physician who treats an infant could face a malpractice claim up to 12 years later (the child's 12th birthday). Providers treating minors should retain records at least until the child turns 12 or until 10 years after the last treatment, whichever is later.

Records of Patients with Disabilities

The Board of Medicine recommends retaining records for patients with cognitive or legal disabilities for 20 years to ensure availability if legal disputes arise.

Federal Requirements That Apply in West Virginia

Because West Virginia lacks a comprehensive state retention statute, federal requirements take on greater importance as the practical baseline for many providers.

HIPAA Documentation Requirements

The HIPAA Privacy Rule does not require covered entities to retain patient medical records for any specific period. According to HHS, state laws generally govern how long medical records must be retained.

What HIPAA does require under 45 CFR 164.530(j) is that covered entities retain their privacy policies, procedures, notices, complaint dispositions, and related administrative documentation for six years from the date of creation or the date when the document was last in effect, whichever is later.

This six-year requirement applies to HIPAA compliance documentation, not to patient medical records themselves. However, many providers mistakenly apply the six-year period to patient records. In West Virginia, where there is no general state retention law, using six years as a minimum for patient records would be a reasonable baseline, though the Board of Medicine recommends 10 years.

HIPAA Privacy and Security Protections

Regardless of how long records are retained, HIPAA requires covered entities to apply appropriate administrative, technical, and physical safeguards to protect the privacy of medical records and other protected health information for the entire time the information is maintained, including through the disposal process.

CMS Conditions of Participation

Hospitals participating in Medicare must comply with the Conditions of Participation under 42 CFR 482.24. This regulation requires hospitals to retain medical records in their original or legally reproduced form for a period of at least five years.

The CMS five-year requirement aligns with the West Virginia hospital licensure requirement under W.Va. CSR 64-12-7.2, but CMS also requires:

• Medical records to be accurately written, promptly completed, properly filed and retained, and accessible
• Records to contain sufficient information to justify admission, support the diagnosis, and describe the patient's progress
• Final diagnosis to be recorded within 30 days of discharge

Medicare and Medicaid Audit Periods

CMS may audit providers and review medical records up to 10 years after treatment or billing. Providers who destroy records before this window closes risk being unable to defend billing decisions in an audit, which could lead to repayment demands and penalties.

Patient Access to Medical Records

West Virginia law provides clear rights for patients seeking their records, even though retention duration is not defined by statute.

The 30-Day Rule

Under W.Va. Code 16-29-1, health care providers must furnish copies of patient records within 30 days of receiving a written request from the patient, their personal representative (as defined by HIPAA), authorized agent, or authorized representative.

Electronic Format Options

If a provider routinely stores records electronically, patients may request copies in electronic form. Permitted electronic formats include downloadable access through a secure web portal, computer disc, email, or portable memory device.

Fee Limitations

Under W.Va. Code 16-29-2, fees for third-party record requests cannot exceed:

• A $20 search and handling fee
• 40 cents per page for paper copies
• Actual postage costs if mailing is requested
• Applicable taxes

Providers may not charge indigent patients if the records are needed to support a Social Security Act claim or appeal. A person qualifies as indigent if they are represented by a pro bono program or verify their financial inability to pay.

Enforcement

A patient who is denied access to records may bring an enforcement action. A provider found to be in violation must pay the patient's attorney fees and court costs.

Destruction of Medical Records

Without a state statute governing destruction, West Virginia providers should follow HIPAA standards and best practices.

HIPAA Destruction Standards

The HHS Office for Civil Rights provides guidance on proper disposal of protected health information:

Paper records must be shredded, burned, pulped, or otherwise rendered unreadable and indecipherable before being discarded.

Electronic records must be cleared, purged, or destroyed through methods such as degaussing, overwriting, or physically destroying the storage media by pulverization, melting, or incinerating.

Covered entities and their business associates must develop and implement policies and procedures to address the disposal of protected health information, including for records maintained by business associates.

Board of Medicine Guidance on Destruction

The WV Board of Medicine advises physicians to destroy discarded records through shredding or incineration to protect patient confidentiality. Providers should document the destruction process, including what was destroyed and when.

Practice Closure Requirements

When a physician or medical practice closes in West Virginia, specific obligations apply to patient records.

Board of Medicine Requirements

According to the WV Board of Medicine, closing practices must:

• Provide written notice to current patients (those seen within the last year or with scheduled appointments) with instructions on how to obtain their records
• Post a closure notice at the office at least 30 days before the final date
• Notify high-risk patients without ongoing care by certified mail or phone
• Place newspaper advertisements at least 30 days before closure in relevant geographic areas
• Post online notices and send emails if the practice uses digital communication

Records Custodian Arrangements

The Board recommends that closing practices enter into an agreement with another local practice to serve as the custodian of unclaimed patient records. This arrangement ensures records remain accessible to patients and subsequent providers after the practice closes.

Regulatory Notifications

Closing practices must also notify:

• The West Virginia Board of Medicine regarding practice ownership changes
• The Centers for Medicare and Medicaid Services (if applicable)
• The U.S. Drug Enforcement Administration (if controlled substances were maintained)
• State Board of Pharmacy Controlled Substance Monitoring Programs
• The practice's professional liability carrier

Physician Assistant Considerations

If a physician assistant was supervised at the practice, the PA must notify the Board when the collaborating physician relationship ends. The PA cannot practice until a new approved practice agreement is in place.

Recommended Retention Periods by Provider Type

Because West Virginia lacks a single comprehensive statute, providers should follow the most protective standard that applies to their practice. The following table summarizes recommended minimum retention periods based on existing rules, federal requirements, and Board guidance.

Provider Type	Minimum Required	Recommended	Authority
Hospitals	5 years	10 years	W.Va. CSR 64-12-7.2; 42 CFR 482.24
Physicians (Board licensees)	3 years	10 years	11 CSR 1A; WV Board of Medicine guidance
Medicare/Medicaid providers	5 years (hospitals)	10 years	42 CFR 482.24; CMS audit practices
Minor patient records	Until statute of limitations expires	Until age 12 or 10 years post-treatment (whichever is later)	WV Board of Medicine; W.Va. Code 55-7B-4(c)
Disabled patient records	No specific minimum	20 years	WV Board of Medicine guidance
HIPAA compliance documentation	6 years	6 years	45 CFR 164.530(j)

Frequently Asked Questions

Sources and References

• West Virginia Code Chapter 16, Article 29: Health Care Records
• W.Va. Code 16-29-1: Copies of Health Care Records to be Furnished to Patients
• W.Va. Code 16-29-2: Reasonable Expenses to be Reimbursed
• W.Va. Code 16-29-3: Access to Minor's Records
• W.Va. Code 55-7B-4: Medical Malpractice Statute of Limitations
• W.Va. CSR 64-12: Hospital Licensure (Cornell Law)
• WV Board of Medicine: Medical Records Retention Guidelines
• WV Board of Medicine: Closing or Departing from Practice
• HHS: Does HIPAA Require Record Retention?
• HHS: Summary of the HIPAA Privacy Rule
• HHS: Disposal of Protected Health Information
• 42 CFR 482.24: Condition of Participation for Medical Record Services