Louisiana
Louisiana Medical Records Retention Laws (2026 Guide)
Independently fact-checked against primary sources (last audited August 18, 2026). · Reviewed by the RecordingLaw editorial team. · Law checked current as of August 9, 2026. · 10 primary sources cited on this page. How we verify our legal content

Louisiana hospitals must keep patient medical records for at least 10 years from discharge under La. Rev. Stat. 40:2144, while physicians and dentists must retain records for at least 6 years from the date of last treatment under La. Rev. Stat. 40:1165.1. Medicare-participating providers face a 7-year federal floor.
Last verified: March 2026. This page reflects current Louisiana Revised Statutes Title 40, Sections 2144 and 1165.1, along with applicable federal regulations.

Table of Contents
- Overview of Louisiana Medical Records Retention Laws
- Hospital Records Retention Requirements
- Physician and Dentist Records Retention
- Diagnostic Imaging and X-Ray Retention
- Medical Records for Minor Patients
- Federal Requirements: HIPAA and CMS
- Patient Access to Medical Records
- Proper Destruction of Medical Records
- Practice Closure and Records Transfer
- Frequently Asked Questions
- Sources and References
Overview of Louisiana Medical Records Retention Laws
Louisiana has two primary statutes governing medical records retention. La. Rev. Stat. 40:2144, known as the Hospital Records and Retention Act, applies to hospitals and institutional healthcare facilities. La. Rev. Stat. 40:1165.1 covers physicians, dentists, and other individual healthcare providers.
These state laws establish minimum retention periods. Healthcare providers may always choose to retain records longer than required. Federal requirements from HIPAA and CMS may also apply, and providers must follow whichever standard requires the longest retention period.
Louisiana law allows medical records to be stored in their original paper form, microfilmed copies, electronic format, or other reproduced forms approved by the Louisiana Department of Health. Electronic storage must include safeguards against erasure or alteration.
Quick Reference Table:
| Provider Type | Record Type | Minimum Retention Period | Statute |
|---|---|---|---|
| Hospitals | General medical records | 10 years from discharge | La. Rev. Stat. 40:2144 |
| Hospitals | X-rays and imaging | 3 years from discharge | La. Rev. Stat. 40:2144 |
| Physicians/Dentists | General medical records | 6 years from last treatment | La. Rev. Stat. 40:1165.1 |
| Physicians/Dentists | X-rays and imaging | 3 years from last treatment | La. Rev. Stat. 40:1165.1 |
| Medicare providers | All documentation | 7 years from date of service | 42 CFR 424.516(f) |
Hospital Records Retention Requirements
Under La. Rev. Stat. 40:2144, hospitals in Louisiana must retain patient medical records for a minimum of 10 years from the date the patient is discharged. This requirement applies to all types of hospital records, including admission and discharge summaries, surgical reports, lab results, physician orders, nursing notes, and consultation records.
The 10-year clock starts on the date of discharge, not the date of admission or the date of the last entry in the record. For patients with multiple hospital stays, each admission and discharge creates a separate retention period for that particular set of records.
Hospitals may keep records in their original paper form, microfilmed format, or any electronic or digital storage method approved by the Louisiana Department of Health. The law specifically requires that any electronic storage system must provide reasonable safeguards against erasure or alteration of records.
The 3-year imaging period is not fixed. Under La. Rev. Stat. 40:2144(F)(2), a hospital must retain graphic matter, images, X-ray films, and like diagnostic materials for a longer period when any one of three people asks for it in writing: an attending or consultant physician of the patient, the patient (or someone acting legally on the patient's behalf), or legal counsel for a party whose interest is affected by the records.
A patient does not need a lawyer to invoke this. The statute names the patient directly, so a written preservation request sent by the patient to the hospital is enough to keep imaging from being destroyed at the 3-year mark. This provision extends only the imaging retention period; it does not change the separate 10-year retention period that applies to general hospital records.
Electronic signatures by licensed healthcare providers on hospital medical records are authorized under Louisiana law. The Louisiana Department of Health has the authority to set rules governing how electronic signatures are used and verified.
Physician and Dentist Records Retention
La. Rev. Stat. 40:1165.1 establishes a 6-year retention requirement for physicians and dentists. Unlike the hospital statute, the retention clock for physician records starts from the date the patient was last treated, not from a discharge date.
This distinction matters in practice. A patient who sees their primary care physician annually would have their retention clock reset with each visit. The 6-year period only begins running from the most recent encounter.
The 6-year requirement applies to all medical and dental records maintained by the provider. This includes patient histories, examination findings, treatment plans, progress notes, prescriptions, referral letters, and correspondence related to patient care.
Physicians and dentists may store records in original paper form, microfilm, or any similarly reproduced format. Electronic health record (EHR) systems satisfy the retention requirement as long as records remain accessible and protected against unauthorized modification.
The statute applies to individual practitioners, group practices, and professional medical corporations. When a physician operates within a hospital setting, the hospital's 10-year retention requirement under La. Rev. Stat. 40:2144 would typically govern records created within the hospital.
Diagnostic Imaging and X-Ray Retention
Both La. Rev. Stat. 40:2144 and La. Rev. Stat. 40:1165.1 contain separate provisions for diagnostic imaging materials. X-ray films, MRI scans, CT scans, ultrasound images, and other graphic matter used to produce diagnostic or therapeutic reports have a shorter minimum retention period of 3 years.
For hospitals, the 3-year period runs from the date the patient was discharged. For physicians and dentists, it runs from the date the patient was last treated.
The shorter retention period for imaging reflects the practical challenges of storing large volumes of physical film. However, as digital imaging (PACS systems) has largely replaced physical film, many healthcare facilities now retain diagnostic images for the same period as other medical records.
Healthcare providers should note that while the imaging materials themselves may be destroyed after 3 years, any diagnostic or therapeutic reports generated from those images remain part of the general medical record. Those reports are subject to the full 10-year or 6-year retention period.
Both statutes let the 3-year imaging floor be pushed out by a written request. For hospital imaging, La. Rev. Stat. 40:2144(F)(2) lets an attending or consultant physician, the patient or someone acting legally on the patient's behalf, or legal counsel for a party with an affected interest make that request. For imaging held by a physician or dentist, La. Rev. Stat. 40:1165.1(A)(3)(b) is narrower and points at the patient: the imaging "shall be retained for a longer period when requested in writing by the patient." In both settings a patient can protect their own films without going through a lawyer.
Providers may store imaging in original film, microfilm, or digital format. Digital storage must meet the same safeguard requirements as other electronic records.
Medical Records for Minor Patients
Louisiana law does not include a separate statutory provision explicitly extending retention periods based on a patient reaching the age of majority (18 years old in Louisiana). The standard retention periods of 10 years for hospitals and 6 years for physicians apply to all patient records, regardless of the patient's age at the time of treatment.
However, healthcare providers should recognize that the standard retention periods may not provide adequate protection when treating minor patients. A child treated at age 5 in a hospital would have their records retained until age 15 under the 10-year rule, which is still before the age of majority.
Industry best practice, supported by guidance from the American Health Information Management Association (AHIMA), recommends retaining medical records for minor patients until the patient reaches the age of majority plus the applicable limitations period for medical malpractice claims. Louisiana's prescriptive period, La. Rev. Stat. 9:5628(A), requires a malpractice claim to be filed "within one year from the date of the alleged act, omission, or neglect, or within one year from the date of discovery," and in all events within three years from the date of the act. The one-year clock from the act is the primary trigger; discovery is an alternative starting point, not the general rule.
Louisiana does not toll that period while a patient is a minor. La. Rev. Stat. 9:5628(B) states that the section "shall apply to all persons whether or not infirm or under disability of any kind and including minors and interdicts." A provider should not read 9:5628 as extending a child's claim window past the one-year and three-year limits, because the statute expressly says it does not.
Retaining a minor's records to age 21 is therefore a risk-management choice rather than something Louisiana law requires or implies. It is still a sensible one: it keeps the file available for continuity of care as a pediatric patient moves into adult care, and it covers claims filed near the outer edge of the three-year limit, disputes over when the three-year period began, and any federal or out-of-state claim that does toll for minority. Many Louisiana healthcare providers adopt it for those reasons.
Federal Requirements: HIPAA and CMS
HIPAA Documentation Retention

The HIPAA Privacy Rule does not require covered entities to retain medical records for any specific period. According to the U.S. Department of Health and Human Services, state laws govern how long medical records must be kept.
However, HIPAA does require covered entities to retain certain compliance-related documentation for 6 years. Under 45 CFR 164.530(j), the following must be retained for 6 years from the date of creation or the date when last in effect, whichever is later:
- Privacy policies and procedures
- Privacy practices notices
- Disposition of complaints
- Required accounting of disclosures
- Training records
- Business associate agreements
This 6-year HIPAA requirement applies to administrative compliance documentation, not to patient medical records themselves.
HIPAA Security Requirements
While HIPAA does not dictate retention periods, it does require that all protected health information (PHI) be safeguarded throughout its lifecycle. Covered entities must implement administrative, technical, and physical safeguards to protect records from unauthorized access, alteration, or destruction for as long as those records exist.
CMS and Medicare Requirements
Healthcare providers that participate in Medicare must comply with additional federal retention requirements. Under 42 CFR 424.516(f), providers and suppliers must maintain documentation for 7 years from the date of service.
This documentation includes written and electronic records related to orders, certifications, referrals, prescriptions, and payment requests for Part A or Part B services. Failure to comply with this requirement can result in revocation of Medicare enrollment under 42 CFR 424.535(a)(10).
For hospitals participating in Medicare, the Conditions of Participation at 42 CFR 482.24 require that medical records be retained in their original or legally reproduced form for a period of at least 5 years. Since Louisiana's 10-year hospital retention requirement is longer, the state law controls.
Louisiana's physician retention period of 6 years is shorter than Medicare's 7-year requirement. Physicians who participate in Medicare should retain records for at least 7 years to comply with both state and federal law.
Patient Access to Medical Records
Under La. Rev. Stat. 40:1165.1, every healthcare provider in Louisiana must furnish patients with copies of their medical records upon request. Providers must respond to written requests within 15 days.
Copying Fees for Paper Records
Louisiana law caps the fees that providers may charge for paper copies of medical records:
- First 25 pages: Up to $1.00 per page
- Pages 26 through 350: Up to $0.50 per page
- Pages 351 and above: Up to $0.25 per page
- Handling charge: Up to $25.00 for hospitals, nursing homes, and other providers
- Postage: Actual cost
Digital Records
When records are generated, maintained, or stored in digital format, patients may request copies in digital format. The copying charge for digital copies may not exceed $100.00, plus all postage charges actually incurred, which are billed separately from the $100.00 cap.
X-Rays and Imaging Copies
Authorized individuals also have the right to obtain copies of X-rays and other imaging media. Providers may charge reasonable reproduction costs plus a handling fee of $20.00 for hospitals or $10.00 for other healthcare providers.
HIPAA Access Rights
In addition to Louisiana state law, 45 CFR 164.524 grants individuals the right to inspect and obtain copies of their protected health information maintained in a designated record set. Covered entities must act on access requests within 30 days, with one 30-day extension permitted.
HIPAA requires that records be provided in the format requested by the individual if readily producible. If not readily producible, the covered entity must provide the records in a readable hard copy or another format agreed upon by both parties.
Parental Access to Minor Records
Parents generally have the right to access and request amendments to their minor child's medical records in Louisiana. However, this right has exceptions. If a healthcare provider reasonably believes that a parent is abusing or neglecting a child, the provider is not required to grant the parent access to the child's records.
Proper Destruction of Medical Records
Once the applicable retention period has expired, Louisiana healthcare providers may destroy medical records. However, destruction must be carried out in a manner that protects patient privacy and complies with both state and federal requirements.
HIPAA Destruction Standards
Under HIPAA, covered entities must ensure that protected health information cannot be recovered or reconstructed after destruction. The HHS guidance on disposal of PHI specifies acceptable methods:
- Paper records: Shredding, burning, pulping, or pulverizing so that PHI is rendered unreadable and cannot be reconstructed
- Electronic records: Clearing (overwriting), purging (degaussing), or physically destroying the storage media
Louisiana Requirements
Louisiana does not have a specific statute detailing medical records destruction procedures beyond what HIPAA requires. However, the Louisiana Department of Health and the Louisiana Department of Environmental Quality regulate the disposal of medical waste, which may include physical records contaminated with biological materials.
Healthcare providers should maintain a destruction log documenting what records were destroyed, the date of destruction, the method used, and the name of the person who supervised the process. This log should be retained permanently, as it serves as proof that records were handled properly.
Records Under Legal Hold
Providers must not destroy any records that are subject to a litigation hold or a pending subpoena. Under La. Rev. Stat. 40:2144(F)(2), a written preservation request extends retention specifically for graphic matter, images, X-ray films, and similar diagnostic materials beyond their standard 3-year period. That request may come from an attending or consultant physician, from the patient or someone acting legally on the patient's behalf, or from legal counsel for a party with an affected interest. It does not extend the 10-year general hospital record retention period.
Practice Closure and Records Transfer
When a physician or healthcare provider in Louisiana closes a medical practice, they remain responsible for ensuring that patient records are properly maintained for the remainder of the applicable retention period.
Notification Requirements
Neither La. Rev. Stat. 40:2144 nor La. Rev. Stat. 40:1165.1 addresses practice closure. Neither sets a notification timeline, and neither requires a physician to register anything with a state agency on closing. What the statutes do establish is that the retention duty itself does not end with the practice: records created during treatment still have to survive the full 6-year or 10-year period.
The Louisiana State Board of Medical Examiners' practitioner resources page notes that closing a practice requires careful attention to continuity of patient care and to safeguarding medical records, and points physicians to guidance from the Louisiana State Medical Society and the AMA Code of Medical Ethics. Those are professional-standards resources rather than a statutory checklist.
Best practices for notifying patients include:
- Sending written notice at least 30 to 90 days before the closure date
- Publishing a notice in a local newspaper
- Posting a notice in the office and on any practice website
- Telling patients in writing where their records will be held and how to request a copy
Records Custodian
Because the retention duty runs for the full statutory period regardless of whether the practice is still open, a physician who closes a practice needs a practical plan for holding the records for the remainder of that period. Arranging a custodian is the usual way to do it: another physician, a medical records storage company, or another appropriate entity can hold the records and respond to patient requests. This is a way of meeting the retention duty the statutes impose, not a separate statutory filing.
Louisiana's retention statutes do not create a public registry of records custodians, and no state agency is established by those statutes as a lookup service for locating records from a closed practice. Former patients are usually best served by writing to the physician's last known practice address, contacting any successor practice or group the physician worked with, or asking the facility where the treatment took place if the care was delivered in a hospital.
Sale or Merger of a Practice
When a practice is sold or merged with another provider, the acquiring entity typically assumes custody of existing patient records. The selling physician should notify affected patients and provide them with the opportunity to transfer their records to a different provider if they prefer.
Frequently Asked Questions
How long must Louisiana hospitals keep medical records?
Louisiana hospitals must retain medical records for a minimum of 10 years from the date the patient is discharged, as required by La. Rev. Stat. 40:2144. X-rays and diagnostic imaging materials must be kept for at least 3 years from discharge. That 3-year imaging period must be extended when a written request is made by any one of three people the statute names: an attending or consultant physician of the patient, the patient or someone acting legally on the patient's behalf, or legal counsel for a party whose interest is affected by the records. You do not need an attorney to make that request for your own imaging. The statute does not extend the 10-year general record retention period the same way.
How long do Louisiana doctors have to keep patient records?
Physicians and dentists in Louisiana must retain patient medical records for at least 6 years from the date the patient was last treated, under La. Rev. Stat. 40:1165.1. X-rays and imaging must be retained for at least 3 years. Physicians who participate in Medicare should keep records for at least 7 years to meet the federal requirement under 42 CFR 424.516(f).
Does HIPAA require medical records to be kept for a specific period?
No. The HIPAA Privacy Rule does not set medical record retention periods. State laws, including Louisiana's statutes, govern how long medical records must be retained. HIPAA does require covered entities to retain compliance documentation (such as privacy policies and training records) for 6 years under 45 CFR 164.530(j).
How can I get copies of my medical records in Louisiana?
You can submit a written request to your healthcare provider, who must provide copies within 15 days. Louisiana law caps copying fees at $1.00 per page for the first 25 pages, with lower rates for additional pages, plus a handling charge of up to $25.00. For records stored digitally, the copying charge cannot exceed $100.00, plus actual postage costs, which are billed separately from that cap. Under HIPAA, you also have the right to receive records in your preferred electronic format if readily producible.
What happens to my medical records if my doctor closes their practice?
Closing a practice does not end the retention duty. Your records still have to be kept for the balance of the 6-year period under La. Rev. Stat. 40:1165.1 (or 10 years under La. Rev. Stat. 40:2144 if the care was delivered in a hospital), so a departing physician generally arranges for another physician or a records storage company to hold them. Louisiana's retention statutes do not set up a state registry of records custodians, so there is no central list to search. Start with a written request to your former physician's last known practice address, then try any successor or group practice, and contact the hospital directly for records of hospital care.
Sources and References
- La. Rev. Stat. 40:2144 - Hospital Records and Retention Act - Louisiana State Legislature
- La. Rev. Stat. 40:1165.1 - Health Care Information; Records - Louisiana State Legislature
- La. Rev. Stat. 9:5628 - Actions for Medical Malpractice - Louisiana State Legislature
- HIPAA Privacy Rule - Medical Record Retention FAQ - U.S. Department of Health and Human Services
- 45 CFR 164.530 - Administrative Requirements - Electronic Code of Federal Regulations
- 45 CFR 164.524 - Access of Individuals to PHI - U.S. Department of Health and Human Services
- 42 CFR 482.24 - Condition of Participation: Medical Record Services - Electronic Code of Federal Regulations
- 42 CFR 424.516 - Additional Provider and Supplier Requirements - Electronic Code of Federal Regulations
- Disposal of Protected Health Information FAQ - U.S. Department of Health and Human Services
- CMS Medical Record Maintenance and Access Requirements - Centers for Medicare and Medicaid Services
- Louisiana State Board of Medical Examiners - Health Care Resources - LSBME
Updates
Corrected the X-ray and imaging preservation rules to name every person Louisiana law lets request a longer retention period, including patients themselves, removed practice-closure and records-custodian claims that no cited source supported, and corrected how the state's medical malpractice deadline applies to minors.
Corrected three misdirected Louisiana statute links (hospital records, physician records, and medical malpractice prescription citations) that had been pointing to unrelated statutes; the retention periods, fee figures, and deadlines stated in the article were already accurate and did not change.
Independently fact-checked against the cited primary sources
Governing law re-checked for recent changes
Corrected two claim-contradiction errors: the written-request retention extension under La. Rev. Stat. 40:2144 F(2) applies only to X-rays and imaging materials, not general hospital records; and the $100 digital-copy fee cap under La. Rev. Stat. 40:1165.1 excludes postage, which is billed separately.
Governing law re-checked for recent changes
Reviewed and approved by an editor
The Law Behind This Article
This article rests on the statutory provisions below, held in our own legal record and retrieved from the official source. Tap a section to read the operative text.
Louisiana Revised Statutes
§ 40:2144Hospital Records and Retention ActIn forcecited in 2 of our articles
A. As used in this Section: (1) " Healthcare provider" means a hospital, as defined in this Subsection, and means a person, corporation, facility, or institution licensed by the state to provide health care or professional services as a physician, hospital, ambulatory surgical center, dentist, registered or licensed practical nurse, pharmacist, optometrist, podiatrist, chiropractor, physical therapist, or psychologist, or an officer, employee, or agent thereof acting in the course and scope of his employment. (2) "Hospital" means any hospital as defined in R.S. 40:2102 and ambulatory surgical center as defined in R.S. 40:2133. (3) "Hospital record" or "hospital chart" means a compilation of the reports of the various clinical departments within a hospital, as well as reports from healthcare providers, as are customarily catalogued and maintained by the hospital medical records department. Hospital records include reports of procedures such as X-rays and electrocardiograms, but they do not include the image or graphic matter produced by such procedures. (4)"Patient" means a natural person who receives health care from a licensed healthcare provider.
Official text (excerpt) · last checked 2026-09-07 · Read the full text in our law library · Verify at legis.la.gov
Cited in 3 court opinions in our collectionLatest citing opinion in our collection: 2005
Opinions citing this section in our collection:
- Longwell v. JEFFERSON HOSP. SERV. DIST. 1 (Louisiana Court of Appeal 2005, 919 So. 2d 736)“…admitted that they were lost. It further acknowledged that La. R.S. 40:2144(F)(2) requires that hospitals retain el…”
- Jo Ellen Smith Psychiatric Hospital v. Harrell (Louisiana Court of Appeal 1989, 546 So. 2d 886)“…tions set forth in La.R.S. 13:3734, La.R.S. 40:1299.96, and La.R.S. 40:2144. La.R.S. 13:3734 provides, in pertine…”
- Opinion Number (Louisiana Attorney General Reports 1993)“…c written authorization. As you point out in your letter, La. R.S. 40:2144 (B) provides for access to hospital rec…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
§ 40:1165.1Healthcare information; recordsIn forcecited in 2 of our articles
A.(1) Each health care provider shall furnish each patient, upon request of the patient, a copy of any information related in any way to the patient which the health care provider has transmitted to any company, or any public or private agency, or any person. (2)(a) Medical records of a patient maintained in a health care provider's office are the property and business records of the health care provider. (b)(i) Except as provided in R.S. 44:17, a patient or his legal representative or a patient's life, health, disability, or long-term care insurance company or its counsel, with the patient's authorization as defined in R.S.
Official text (excerpt) · last checked 2026-07-29 · Read the full text in our law library · Verify at legis.la.gov
Cited in 3 court opinions in our collectionLatest citing opinion in our collection: 2019
Opinions citing this section in our collection:
- State v. Sadeghi (Supreme Court of Louisiana 2017, 213 So. 3d 1146)“…medical records from his or her health care provider. See La. R.S. 40:1165.1(A)(1). Further, upon reasonable grounds…”
- Norris v. Acadiana Concern for Aids Relief Education and Support Inc (District Court, W.D. Louisiana 2019)“…invasion of privacy, La. R.S. 40:4 et seq., Sanitary Code, La. R.S. 40:1165.1, “Health Care Information; Records”, an…”
- Stewart v. Moncla Marine Operations L L C (District Court, W.D. Louisiana 2019)“…ccordance with Federal Rule of Civil Procedure 45(d)(1) and La. R.S. 40:1165.1. Accordingly, Plaintiff's Motion to R…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
§ 9:5628Actions for medical malpracticeIn forcecited in 8 of our articles
A. No action for damages for injury or death against any physician, chiropractor, nurse, licensed midwife practitioner, dentist, psychologist, optometrist, hospital or nursing home duly licensed under the laws of this state, or community blood center or tissue bank as defined in R.S. 40:1231.1(A), whether based upon tort, or breach of contract, or otherwise, arising out of patient care shall be brought unless filed within one year from the date of the alleged act, omission, or neglect, or within one year from the date of discovery of the alleged act, omission, or neglect; however, even as to claims filed within one year from the date of such discovery, in all events such claims shall be filed at the latest within a period of three years from the date of the alleged act, omission, or neglect. B. The provisions of this Section shall apply to all persons whether or not infirm or under disability of any kind and including minors and interdicts. C. The provisions of this Section shall apply to all healthcare providers listed herein or defined in R.S. 40:1231.1 regardless of whether the healthcare provider avails itself of the protections and provisions of R.S.
Official text (excerpt) · last checked 2026-07-29 · Read the full text in our law library · Verify at legis.la.gov
Cited in 404 court opinions in our collectionLatest citing opinion in our collection: 2026
Opinions citing this section in our collection:
- Lott v. Haley (Supreme Court of Louisiana 1979, 370 So. 2d 521)“…ontends the court of appeal erred in retroactively applying La.R.S. 9:5628, effective September 12, 1975, to hold…”
- Griffin v. Kinberger (Supreme Court of Louisiana 1987, 507 So. 2d 821)“…tice action presents two issues. The first issue is whether La.R.S. 9:5628, which sets an outside limit of three y…”
- Borel v. Young (Supreme Court of Louisiana 2008, 989 So. 2d 42)“…malpractice action can be brought are clearly set forth in La. R.S. 9:5628(A), which provides in pertinent part:…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Louisiana Hit and Run Laws: Penalties and What to Do, Medical Malpractice Laws in Louisiana (2026): Deadlines & Caps, Louisiana Statute of Limitations: Filing Deadlines by Case Type
Code of Federal Regulations Title 42
§ 424.516Additional provider and supplier requirements for enrolling and maintaining active enrollment status in the Medicare program.In forcecited in 15 of our articles
(a) Certifying compliance. CMS enrolls and maintains an active enrollment status for a provider or supplier when that provider or supplier certifies that it meets, and continues to meet, and CMS verifies that it meets, and continues to meet, all of the following requirements: (1) Compliance with title XVIII of the Act and applicable Medicare regulations. (2) Compliance with Federal and State licensure, certification, and regulatory requirements, as required, based on the type of services or supplies the provider or supplier type will furnish and bill Medicare. (3) Not employing or contracting with individuals or entities that meet either of the following conditions: (i) Excluded from participation in any Federal health care programs, for the provision of items and services covered under the programs, in violation of section 1128A(a)(6) of the Act. (ii) Debarred by the General Services Administration (GSA) from any other Executive Branch procurement or nonprocurement programs or activities, in accordance with the Federal Acquisition and Streamlining Act of 1994, and with the HHS Common Rule at 45 CFR part 76.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 7 court opinions in our collectionLatest citing opinion in our collection: 2024
Opinions citing this section in our collection:
- United States Ex Rel. Westmoreland v. Amgen, Inc. (District Court, D. Massachusetts 2011, 812 F. Supp. 2d 39)“…recon *52 dition of payment can be found in 42 C.F.R. § 424.516 (a)(1), which states that “CMS enrolls…”
- Johnson v. Kelly (District Court, W.D. Oklahoma 2024)“…care laws, regulations, and program instructions. Id. ¶ 22; 42 C.F.R. § 424.516(a). To that end, a healthcare provider…”
- LILIA GOROVITS, M.D., P.C. v. AZAR (District Court, E.D. Pennsylvania 2021)“…2 Pursuant to 42 C.F.R. § 424.516(d)(1)(ii), Medicare physicians are requ…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: How Long Do Hospitals Keep Medical Records? (2026), Medical Records Retention Laws by State (2026 Guide), Kentucky Medical Records Retention Laws (2026 Guide)
§ 482.24Condition of participation: Medical record services.In forcecited in 52 of our articles
The hospital must have a medical record service that has administrative responsibility for medical records. A medical record must be maintained for every individual evaluated or treated in the hospital. (a) Standard: Organization and staffing. The organization of the medical record service must be appropriate to the scope and complexity of the services performed. The hospital must employ adequate personnel to ensure prompt completion, filing, and retrieval of records. (b) Standard: Form and retention of record. The hospital must maintain a medical record for each inpatient and outpatient. Medical records must be accurately written, promptly completed, properly filed and retained, and accessible. The hospital must use a system of author identification and record maintenance that ensures the integrity of the authentification and protects the security of all record entries. (1) Medical records must be retained in their original or legally reproduced form for a period of at least 5 years. (2) The hospital must have a system of coding and indexing medical records. The system must allow for timely retrieval by diagnosis and procedure, in order to support medical care evaluation studies.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 18 court opinions in our collectionLatest citing opinion in our collection: 2024
In the courts (editorial summary, independently checked):United States ex rel. Janssen v. Lawrence Memorial Hospital (2020) held the accurate medical record duty in 42 C.F.R. 482.24 is a generic regulatory requirement that does not establish False Claims Act materiality. United States Ex Rel. El-Amin v. George Washington University (2008) applied 482.24(c) to record completion evidence.
Opinions citing this section in our collection:
- United States ex rel. Janssen v. Lawrence Memorial Hospital (Court of Appeals for the Tenth Circuit 2020, 949 F.3d 533)✓A relator alleged the hospital falsified patient arrival times to raise its Medicare quality-program payments. The court held the general duty to keep accurate medical records under 42 C.F.R. 482.24 does not address those programs and cannot show False Claims Act materiality.
- United States Ex Rel. El-Amin v. George Washington University (District Court, District of Columbia 2008, 533 F. Supp. 2d 12)✓Nurse anesthetists claimed the hospital billed Medicare as though anesthesiologists performed whole procedures. Citing the 30-day rule in 42 C.F.R. 482.24(c)(2), the court excluded late-signing evidence, and excluded mass-signing evidence too though (c)(1) made it probative.
- NATIONAL ASS'N OF PSYCHIATRIC HEALTH SYSTEM v. Shalala (District Court, District of Columbia 2000, 120 F. Supp. 2d 33)“…to preexisting recordkeeping requirements, as specified in 42 C.F.R. § 482.24 . 7 . Proposed Rul…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: How to Find Old Medical Records Online, Medical Records Retention Laws by State (2026 Guide), Florida Medical Records Retention Laws (2026 Guide)
§ 424.535Revocation of enrollment in the Medicare program.In forcecited in 7 of our articles
(a) Reasons for revocation. CMS may revoke a currently enrolled provider or supplier's Medicare enrollment and any corresponding provider agreement or supplier agreement for the following reasons: (1) Noncompliance. The provider or supplier is determined to not be in compliance with the enrollment requirements described in this title 42, or in the enrollment application applicable for its provider or supplier type, and has not submitted a plan of corrective action as outlined in part 488 of this chapter. The provider or supplier may also be determined not to be in compliance if it has failed to pay any user fees as assessed under part 488 of this chapter. (i) CMS may request additional documentation from the provider or supplier to determine compliance if adverse information is received or otherwise found concerning the provider or supplier. (ii) Requested additional documentation must be submitted within 60 calendar days of request. (2) Provider or supplier conduct.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 19 court opinions in our collectionLatest citing opinion in our collection: 2024
Opinions citing this section in our collection:
- Zille Shah v. Alex Azar, Secretary, HHS (Court of Appeals for the Fifth Circuit 2019, 920 F.3d 987)“…at their Medicare privileges were being revoked pursuant to 42 C.F.R. § 424.535(a)(8), the regulation defining “Abuse o…”
- Ahmed v. Sebelius (District Court, D. Massachusetts 2010, 710 F. Supp. 2d 167)“…re enrollment and billing privileges in certain instances. 42 C.F.R. § 424.535 (a). Relevant to this case is the regul…”
- Fayad v. Sebelius (District Court, E.D. Michigan 2011, 803 F. Supp. 2d 699)“…enrollment billing privileges were being revoked based on 42 C.F.R. § 424.535 , which authorizes the revocation of bi…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Indiana Medical Records Retention Laws (2026 Guide), Mississippi Medical Records Retention Laws (2026 Guide), Oregon Medical Records Retention Laws (2026 Guide)
Code of Federal Regulations Title 45
§ 164.530Administrative requirements.In forcecited in 40 of our articles
(a)(1) Standard: Personnel designations. (i) A covered entity must designate a privacy official who is responsible for the development and implementation of the policies and procedures of the entity. (ii) A covered entity must designate a contact person or office who is responsible for receiving complaints under this section and who is able to provide further information about matters covered by the notice required by § 164.520. (2) Implementation specification: Personnel designations. A covered entity must document the personnel designations in paragraph (a)(1) of this section as required by paragraph (j) of this section. (b)(1) Standard: Training. A covered entity must train all members of its workforce on the policies and procedures with respect to protected health information required by this subpart and subpart D of this part, as necessary and appropriate for the members of the workforce to carry out their functions within the covered entity. (2) Implementation specifications: Training.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 23 court opinions in our collectionLatest citing opinion in our collection: 2025
In the courts (editorial summary, independently checked):Surprise v. Innovation Group, Inc. (2013) applied 45 CFR 164.530(c), noting it requires appropriate safeguards but does not specify what they must be, and rejected a wrongful discharge claim resting on it. Baum v. KEYSTONE MERCY HEALTH PLAN (2011) treated the same duty as background to state tort claims and remanded.
Opinions citing this section in our collection:
- Baum v. KEYSTONE MERCY HEALTH PLAN (District Court, E.D. Pennsylvania 2011, 826 F. Supp. 2d 718)✓A lost flash drive exposed health data on 280,000 insured children, and a parent sued in state court for negligence per se. The court held that resting the claim on the HIPAA safeguard rule at 45 C.F.R. 164.530(c)(2)(i) raised no substantial federal question, and remanded.
- Surprise v. Innovation Group, Inc. (District Court, D. Massachusetts 2013, 925 F. Supp. 2d 134)✓An employee fired after complaining that health-information documents went into unsecured trash sued for wrongful discharge. The court read 45 C.F.R. 164.530(c) to require safeguards without prescribing a method, and held HIPAA disposal rules are not well-defined public policy.
- Michael Terpin v. at and T Mobility LLC (Court of Appeals for the Ninth Circuit 2024, 118 F.4th 1102)“…viders to protect patients’ “protected health information.” 45 C.F.R. § 164.530(c)(1); Moore, 299 Cal. Rptr. 3d at 561.…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Alaska Medical Records Retention Laws (2026 Guide), Arkansas Medical Records Retention Laws (2026 Guide), District of Columbia Medical Records Retention Laws (2026 Guide)
§ 164.524Access of individuals to protected health information.In forcecited in 23 of our articles
(a) Standard: Access to protected health information —(1) Right of access. Except as otherwise provided in paragraph (a)(2) or (a)(3) of this section, an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set, for as long as the protected health information is maintained in the designated record set, except for: (i) Psychotherapy notes; and (ii) Information compiled in reasonable anticipation of, or for use in, a civil, criminal, or administrative action or proceeding. (2) Unreviewable grounds for denial. A covered entity may deny an individual access without providing the individual an opportunity for review, in the following circumstances. (i) The protected health information is excepted from the right of access by paragraph (a)(1) of this section.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 88 court opinions in our collectionLatest citing opinion in our collection: 2026
In the courts (editorial summary, independently checked):Webb v. Smart Document Solutions, LLC (2007) held the reduced, cost-based fee in section 164.524(c)(4) applies only when the individual himself requests his records, not a law firm acting as his agent. Ciox Health, LLC v. Hargan (2020) vacated 2016 guidance that extended that patient rate to third-party directives.
Opinions citing this section in our collection:
- Webb v. Smart Document Solutions, LLC (Court of Appeals for the Ninth Circuit 2007, 499 F.3d 1078)✓A law firm ordered its client's hospital records and was billed a copying company's higher third-party rate; the Ninth Circuit held Section 164.524(c)(4)'s cost-based fee limit applies only when the individual or a personal representative asks, not an attorney acting as agent.
- Evenson v. Hartford Life & Annuity Insurance (District Court, M.D. Florida 2007, 244 F.R.D. 666)✓A therapist refused a subpoena for her psychotherapy notes, citing Section 164.524(a)(1)'s exclusion of those notes from a patient's right of access; the court held that exclusion governs only individual access, not discovery, and ordered the notes produced.
- Ciox Health, LLC v. Hargan (District Court, District of Columbia 2020)“…fee that can be charged for such production. See generally 45 C.F.R. § 164.524. For requests brought by an individual…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: North Carolina Medical Records Retention Laws (2026 Guide), Washington Medical Records Retention Laws (2026 Guide), South Carolina Medical Recording Laws: Patient Rights, HIPAA, and Consent (2026)
Explore the law
The laws cited above reference these related sections in their own text:
- Louisiana Revised Statutes § 40:1231.1 — Definitions and general applications view in our statute record · read at the official source
- Louisiana Revised Statutes § 40:1231.2 — Limitation of recovery view in our statute record · read at the official source
Related law for further reading — not part of this article’s citations.
Search our full record of US law — 2.1 million sections, every state + federal →
Sources and References
- La. Rev. Stat. 40:2144 - Hospital Records and Retention Act(legis.la.gov).gov
- La. Rev. Stat. 40:1165.1 - Health Care Information; Records(legis.la.gov).gov
- HIPAA Privacy Rule - Medical Record Retention FAQ(hhs.gov).gov
- 45 CFR 164.530 - Administrative Requirements(ecfr.gov).gov
- 45 CFR 164.524 - Access of Individuals to PHI(hhs.gov).gov
- 42 CFR 482.24 - Condition of Participation: Medical Record Services(ecfr.gov).gov
- 42 CFR 424.516 - Additional Provider and Supplier Requirements(ecfr.gov).gov
- Disposal of Protected Health Information FAQ(hhs.gov).gov
- CMS Medical Record Maintenance and Access Requirements(cms.gov).gov
- Louisiana State Board of Medical Examiners - Health Care Resources(lsbme.la.gov).gov
- La. Rev. Stat. 9:5628 - Actions for Medical Malpractice(legis.la.gov)