Maine Medical Records Retention Laws (2026 Guide)

Maine hospitals must retain patient medical records for at least 7 years after the last discharge under 10-144 CMR Chapter 112. Records for minor patients must be kept for at least 6 years after the patient turns 18. Private physician offices have no state mandate; the Maine Medical Association recommends a minimum of 6 years.

Last verified: March 2026. This page reflects current Maine Revised Statutes Title 22, Sections 1711 through 1711-C, and 10-144 CMR Chapter 112.

Maine Hospital Medical Records Retention Requirements

Maine's primary medical records retention law applies to hospitals licensed by the state. Under 10-144 Code of Maine Rules, Chapter 112, Section XII, hospitals must maintain patient medical records for a minimum of 7 years from the date of the patient's last discharge.

This regulation is part of the Rules for the Licensing of Hospitals, administered by the Maine Department of Health and Human Services. Every hospital operating in Maine must comply with these requirements to maintain its state license.

The 7-year retention period begins on the date of the patient's most recent discharge from the facility. If a patient has multiple visits or admissions, the clock resets with each new discharge date.

What Hospital Records Must Include

Under 10-144 CMR Ch. 112, hospital medical records must contain sufficient information to identify the patient, support the diagnosis, justify the treatment, document the course and results of care, and promote continuity of care among healthcare providers.

Required elements typically include:

• Patient identification and demographic data
• Medical history and physical examination findings
• Diagnostic and therapeutic orders
• Clinical observations, including nurse's notes
• Reports of procedures, tests, and their results
• Conclusions at the end of hospitalization or evaluation

Records for Minor Patients

Maine law provides additional protections for the medical records of minors. Hospitals must retain records for minor patients for at least 6 years after the patient reaches the age of 18 (the age of majority in Maine).

This extended retention period ensures that individuals have access to their childhood medical records well into adulthood. For example, a child born in 2020 who receives hospital treatment at age 5 would have records retained until at least 2044, when they turn 24.

The extended retention period for minors aligns with Maine's medical malpractice statute of limitations, which allows minors to bring claims within 6 years after the cause of action accrues or within 3 years after reaching the age of majority, whichever comes first.

Physician and Private Practice Retention Requirements

Unlike hospital records, Maine does not have a specific statute that mandates how long physicians in private practice must retain patient medical records. This gap in state law means that private practitioners must rely on a combination of professional guidance, federal requirements, and risk management considerations.

Professional Recommendations

The Maine Medical Association (MMA) recommends that physicians retain patient records for a minimum of 6 years from the date of the last patient encounter. This recommendation draws from two sources:

• The American Medical Association's Code of Medical Ethics, which addresses the ethical obligation to maintain patient records
• Maine's statute of limitations for medical malpractice claims, which requires an action to be commenced within 3 years after the cause of action accrues under 24 M.R.S. Section 2902

Maine has no general discovery rule. Section 2902 states that a cause of action accrues on the date of the act or omission giving rise to the injury, not the date the patient learns of it, so the three years run from the treatment date. The narrow exception is a foreign object left in the body, where the claim accrues when the plaintiff discovers or reasonably should have discovered the harm.

The 6-year recommendation provides a buffer beyond that 3-year period, because a claim can still be filed near the end of the window and litigated for months afterward.

Practical Considerations

Many malpractice insurance carriers in Maine, including Medical Mutual Insurance Company of Maine, recommend retaining records for 10 years as a risk management strategy. While not legally required, longer retention can protect physicians in cases involving late-discovered injuries or complex litigation.

For pediatric practices, physicians should follow the same principle that applies to hospitals: retain records for minor patients until at least 6 years after the patient reaches age 18.

Federal Requirements That Affect Maine Providers

State law does not operate in isolation. Several federal regulations create additional retention obligations for Maine healthcare providers.

HIPAA Requirements

The HIPAA Privacy Rule does not require covered entities to retain patient medical records for any specific period. This is one of the most widely misunderstood aspects of HIPAA.

What HIPAA does require is retention of administrative compliance documentation for 6 years from the date of creation or last effective date under 45 CFR 164.530(j). These documents include:

• Privacy policies and procedures
• Employee training records
• Business associate agreements
• Complaint and resolution records
• Risk assessments and security documentation

HIPAA also imposes strict requirements on how records are stored, accessed, and eventually destroyed, regardless of how long they are retained.

CMS and Medicare Requirements

For providers participating in Medicare or Medicaid, the Centers for Medicare and Medicaid Services (CMS) establish separate federal minimums:

Which Law Controls?

The stricter requirement always applies. Maine's 7-year hospital retention period exceeds the CMS 5-year minimum, so Maine hospitals must follow state law. There is no single federal 7-year rule for physician offices. A Maine physician who submits Medicare cost reports must keep patient records for at least 5 years after the cost report closes, while a provider in a Medicare managed care program must keep them for 10 years. Identify which Medicare program you participate in rather than assuming one federal number, then compare that figure against the 6-year professional recommendation and keep whichever is longer.

Patient Access to Medical Records in Maine

Maine law provides patients with a clear right to access their own medical records through two separate statutes.

Hospital Records: 22 M.R.S. Section 1711

Under Title 22, Section 1711, patients discharged from a Maine hospital can request copies of their medical records in writing. The hospital must provide the records within a reasonable time in accordance with 45 CFR 164.524, which generally requires a response within 30 days.

If the hospital believes releasing records would be detrimental to the patient's health, it must notify the patient and make records available to the patient's authorized representative instead.

Other Health Care Practitioners: 22 M.R.S. Section 1711-B

For non-hospital providers, Title 22, Section 1711-B establishes similar access rights. Patients can authorize the release of treatment records by submitting a written request. Practitioners must release copies of all treatment records or a narrative containing all relevant information.

Health care practitioners may exclude personal notes that are not directly related to the patient's past or future treatment, as well as information related to FDA-regulated clinical trials.

A practitioner who willfully violates this section faces a civil forfeiture of up to $25 per day, with a maximum of $100.

Fees for Record Copies

Under 22 M.R.S. Section 1711-A, Maine caps the fees healthcare providers can charge for record copies:

If records exist in a digital or electronic format and the patient requests an electronic copy, the provider must supply one if it is reasonably possible to do so. Under 22 M.R.S. Section 1711-A, charges for electronic copies may not exceed $150, a cap separate from the paper-copy fee schedule above.

Federal law imposes a separate limit that works differently. Under HIPAA's right of access, 45 CFR 164.524(c)(4) permits only a reasonable, cost-based fee, and that fee may include just four things: labor for copying the information, supplies for paper copies or electronic media, postage when the patient asks for the records to be mailed, and preparing an agreed summary or explanation. The regulation contains no dollar figure. The frequently quoted $6.50 flat rate is an optional alternative in HHS guidance for providers who prefer not to calculate actual costs, not a federal cap. Where a HIPAA-covered provider's cost-based fee is lower than Maine's caps, the federal limit is the one that binds.

Confidentiality and Security of Medical Records

Maine's Confidentiality Statute

Title 22, Section 1711-C requires health care practitioners and facilities to develop and implement policies protecting the confidentiality, security, and integrity of health care information. Key requirements include:

• Hospitals must inform inpatients of their right to control disclosure of health care information
• Patients can direct that their name be removed from facility directories
• Disclosures are permitted only in specific circumstances outlined in the statute (treatment, payment, health care operations, legal requirements)

HIPAA Privacy and Security Rules

For HIPAA-covered entities in Maine, the federal Privacy Rule and Security Rule add additional layers of protection. Covered entities must implement administrative, technical, and physical safeguards to protect protected health information (PHI) throughout its entire lifecycle, from creation through destruction.

Medical Records Destruction Requirements

When Records Can Be Destroyed

After the applicable retention period expires (7 years for hospitals, or per the provider's chosen retention policy), Maine providers may destroy medical records. There is no state law requiring providers to notify patients before destroying records that have met the retention threshold.

However, best practice calls for reasonable efforts to notify patients before records are destroyed, particularly if the retention period has only recently expired.

How Records Must Be Destroyed

While Maine does not have a state-specific destruction method statute, HIPAA's requirements apply to all covered entities. The HHS Office for Civil Rights specifies that:

Paper records must be shredded, burned, pulped, or pulverized so that protected health information is rendered unreadable, indecipherable, and cannot be reconstructed.

Electronic records must be cleared, purged, or destroyed through methods such as degaussing, overwriting, or physical destruction of the storage media.

Providers should maintain a log documenting when records were destroyed, the method used, and who authorized the destruction.

Practice Closure and Record Custody

When a Maine physician retires or closes a practice, the provider has a continuing obligation to ensure patients can access their records.

Notification Requirements

Providers closing a practice should notify patients at least 60 days in advance, when possible. The notification should include:

• The date the practice will close
• How patients can obtain copies of their records
• Where records will be stored after closure
• Contact information for the records custodian

The Maine Board of Licensure in Medicine should also be notified of anticipated closures.

Records Custodian

When a practice closes, a records custodian may be appointed to manage patient records for the legally required retention period. The custodian takes over responsibility for:

• Secure storage of all patient records
• Responding to patient requests for record copies
• Maintaining confidentiality and security
• Proper destruction after retention periods expire

If no custodian arrangement is made, the closing provider remains personally responsible for the records.

Special Record Categories

Certain types of medical records carry additional retention considerations in Maine.

Mental Health Records

Retention periods for mental health records in Maine vary by licensing board rather than following one statewide rule. Under 02-415 C.M.R. Chapter 9, Section 2, the Maine Board of Examiners of Psychologists requires licensees to retain full client records for at least 7 years after the date of last contact, and a treatment summary for at least 15 years. For clients who were minors at the date of last contact, the full record must be kept until at least 3 years after the client reaches the age of majority, and the treatment summary until at least 15 years after majority. Other mental health license types, such as counselors and social workers, are governed by their own boards' rules, which may set different retention periods, so practitioners should confirm the specific rule that applies to their license.

Imaging and Radiology Records

Maine's hospital licensing rule does not require permanent retention of x-rays or diagnostic imaging. Under 10-144 C.M.R. Chapter 112, Section 3.5.9, hospitals that record images using x-ray, MRI, or CT must provide notice of their intent to destroy or purge those images before doing so, but the rule does not otherwise set a minimum retention period for the images beyond the general 7-year record retention requirement.

Substance Abuse Treatment Records

Records related to substance abuse treatment receive additional federal protections under 42 CFR Part 2, which restricts disclosure more tightly than HIPAA for substance use disorder records.

Summary of Maine Medical Records Retention Periods