Montana Medical Records Retention Laws (2026 Guide)

Montana requires hospitals to retain medical records for at least 10 years after a patient's discharge or death under ARM 37.106.402. The Montana Board of Medical Examiners has not adopted a specific retention period for physicians in private practice; in practice, physicians look to the state's medical malpractice statute of limitations (MCA 27-2-205) and patient-access rules (MCA 50-16-541) as the practical retention horizon. For minor patients, hospitals extend retention to 10 years after the patient turns 18.

Montana law sets different medical records retention periods depending on the type of health care provider. Hospitals, physicians, long-term care facilities, and other providers each follow distinct rules under the Montana Code Annotated (MCA) and Montana Administrative Rules (ARM). Understanding these requirements is essential for providers seeking compliance and for patients who need to access their health records.

This guide covers every major aspect of Montana medical records retention law, including hospital and physician requirements, rules for minor patients, federal overlays from HIPAA and CMS, patient access rights, secure destruction protocols, and what happens when a practice closes.

Hospital Medical Records Retention in Montana

Montana Administrative Rule 37.106.402 establishes the minimum standards for hospital medical records. This rule applies to all hospitals licensed in Montana and sets the baseline for how long patient records must be kept.

General Retention Period

Under ARM 37.106.402, a hospital must maintain a patient's entire medical record in its original form (or in a format allowed by ARM 37.106.314(3)) for not less than 10 years following the date of the patient's discharge or death.

This 10-year minimum is one of the longer state-level hospital retention periods in the country. It applies to the complete medical record, including admission and discharge summaries, physician orders, nursing notes, laboratory results, surgical reports, and all other documentation created during the patient's care.

Core Medical Records

After the initial 10-year retention period has passed, a hospital may abridge the complete record to create a "core medical record." However, this core medical record (or a microfilmed version of the full record) must be maintained for an additional 10 years beyond the initial retention period.

In practical terms, this means that key elements of a hospital patient's record could be kept for 20 years or longer. Montana law does not prohibit hospitals from retaining records indefinitely, and the rule explicitly states that nothing prevents retention beyond the minimum required periods.

Diagnostic Imaging and Tracings

Diagnostic imaging films and electrodiagnostic tracings are subject to a shorter retention period. Hospitals must retain these materials for at least 5 years. However, the written interpretations of those images and tracings must be retained for the same period as the full medical record (10 years after discharge or death).

Obstetrical and Newborn Records

ARM 37.106.402 also addresses maternity and newborn records specifically. An obstetrical record must be developed for each maternity patient, including the prenatal record, labor notes, obstetrical anesthesia notes, and delivery record. A separate record must be created for each newborn. These records follow the same 10-year retention requirement as other hospital records.

Physician Medical Records Retention in Montana

Montana Administrative Rule 24.126.411, titled "Patient Records Retention," is sometimes cited as a physician retention rule, but it is actually a Board of Chiropractors rule (formerly ARM 8.12.618) requiring chiropractors to keep adult and minor patient records and x-rays for at least 7 years. It does not apply to physicians, and it does not mention birth or immunization records.

No Board-Set Retention Period for Physicians

A review of the Montana Board of Medical Examiners' full rule chapter (ARM Title 24, chapter 156) found no rule that sets a specific retention period for physicians in private practice. The board's unprofessional-conduct rule, ARM 24.156.405, requires licensees to appropriately secure and document patient records and transfer them when requested, but it sets no timeframe for how long those records must be kept.

In the absence of a board-set rule, physicians commonly look to two practical anchors:

• Medical malpractice statute of limitations. Under MCA 27-2-205, a malpractice claim must generally be filed within 2 years of the injury or its discovery, but never more than 5 years after the date of injury. Many practices use this 5-year outer limit as a practical retention floor.
• Minor patients. For a patient injured before age 4, the statute of limitations clock does not start running until the child's eighth birthday, which can extend the practical retention window for pediatric records well beyond the standard 5-year period.

Physicians who treat patients within a hospital or licensed health care facility remain subject to that facility's ARM 37.106.402 retention schedule for records created there.

Comparison: Hospital vs. Physician Retention

Medical Records for Minor Patients

Montana provides extended retention protections for the medical records of minor patients. These protections ensure that records remain available as children grow into adulthood.

Hospital Records for Minors

Under ARM 37.106.402, when the patient is a minor, the hospital must retain the entire medical record for not less than 10 years following the date the patient reaches the age of majority (18 years old in Montana) or dies, whichever comes first.

This means that a record created for a newborn could be retained for up to 28 years (until the child turns 18, plus 10 additional years). For a child treated at age 10, the minimum retention period would extend until the child turns 28.

Long-Term Care Facilities and Minors

For intermediate care facilities, Montana requires retention of medical records for at least as long as the resident remains at the facility, plus 5 years after discharge. For minors in these facilities, records must be kept for 5 years after the resident reaches the age of majority.

Physician Records for Minors

Because Montana has no Board-set retention rule for physicians, there is no fixed rule tying a minor patient's records to the age of majority the way the hospital rule does. The most relevant protection is the medical malpractice statute of limitations itself: for a patient injured before age 4, the clock does not start running until the child's eighth birthday (MCA 27-2-205), so a physician who treated a very young child may need to keep those records considerably longer than the standard 5-year period to account for a possible future claim.

All Health Care Facilities: General Standards

Montana Administrative Rule 37.106.314 sets minimum medical records standards that apply to all health care facilities licensed in Montana. This rule covers the broad requirements for record creation, maintenance, and storage that supplement the specific retention periods in ARM 37.106.402.

Key Requirements

All health care facilities must maintain medical records that are:

• Accurate, complete, and timely
• Organized in a systematic manner
• Readily accessible to authorized personnel
• Stored in a format that protects against loss, destruction, or unauthorized access

Records may be maintained in their original paper form, in microfilmed form, or in electronic format, provided the chosen method meets the standards outlined in the rule. Electronic health records must maintain the same level of integrity and accessibility as paper records.

Federal Requirements: HIPAA and CMS

Montana providers must comply with both state and federal records requirements. When federal law sets a stricter standard, the provider must follow the more demanding requirement.

HIPAA and Records Retention

The Health Insurance Portability and Accountability Act (HIPAA) does not set a specific minimum retention period for medical records. According to the U.S. Department of Health and Human Services, state laws govern how long medical records must be retained.

However, HIPAA does require that covered entities retain their HIPAA-related documentation for at least 6 years. This includes privacy policies, procedures, notices of privacy practices, complaint dispositions, and other administrative records. This 6-year requirement applies to the compliance documentation, not to patient medical records themselves.

HIPAA also mandates that covered entities apply appropriate administrative, technical, and physical safeguards to protect the privacy of medical records for the entire time the records are maintained, including through the disposal process.

CMS Conditions of Participation

Hospitals that participate in Medicare and Medicaid programs must also comply with the federal Conditions of Participation under 42 CFR 482.24. This regulation requires that medical records be retained in their original or legally reproduced form for at least 5 years.

Since Montana's 10-year hospital retention period exceeds the CMS 5-year minimum, Montana hospitals that follow state law will automatically satisfy this federal requirement.

Montana Medicaid Records

Providers enrolled in Montana's Medicaid program face an additional retention obligation. Under ARM 37.85.414, all Montana Healthcare Programs-related medical and financial records must be retained for at least 6 years and 3 months following the date of service.

These records must fully demonstrate the extent, nature, and medical necessity of services provided to Medicaid recipients. The Montana Department of Public Health and Human Services (DPHHS) or its designee may audit these records at any time.

Patient Access to Medical Records

Montana's Uniform Health Care Information Act (MCA Title 50, Chapter 16, Part 5) establishes comprehensive patient rights regarding access to medical records.

Right to Examine and Copy

Under MCA 50-16-541, patients have the right to submit a written request to examine or copy all or part of their recorded health care information. The 10-day period set by the statute is a deadline to respond, not a promise that the records will be in the patient's hands within 10 days.

Within 10 days of receiving the request, the provider must do one of the following:

• Make the information available for examination at no charge during regular business hours, or provide a copy if the patient asked for one
• Inform the patient if the information does not exist or cannot be found
• Give the patient the name and address of another provider, if that provider maintains the information
• If the information is in use or unusual circumstances have delayed handling the request, inform the patient in writing of the reasons for the delay and the earliest date the information will be available, which cannot be later than 21 days after the provider received the request
• Deny the request, in whole or in part, under the statute and inform the patient of the denial

Because of the delay option, a patient whose request runs into a record that is in use or another unusual circumstance may wait up to 21 days rather than 10.

Fees for Copies

Health care providers may charge a reasonable fee for providing copies of medical records. The fee cannot exceed the amount specified in MCA 50-16-540. The provider is not required to furnish copies until the fee has been paid.

Denial of Access

Under MCA 50-16-542, a health care provider may deny a patient's request to examine or copy records only in limited circumstances, such as when disclosure could reasonably be expected to endanger the life or physical safety of the patient or another person.

Right to Request Corrections

Patients also have the right to request corrections or amendments to their health care information under MCA 50-16-543. If a provider refuses to make a requested correction, the patient may add a statement of disagreement to the record.

Retention During Pending Requests

Under MCA 50-16-513, a health care provider must maintain records for at least 1 year following receipt of an authorization to disclose health care information, and during the pendency of any request for examination, copying, correction, or amendment. This ensures records are not destroyed while a patient is actively seeking access.

Secure Destruction of Medical Records

Once the applicable retention period has expired, Montana providers may destroy medical records. However, the destruction process must comply with both state and federal requirements to protect patient privacy.

HIPAA Destruction Standards

The U.S. Department of Health and Human Services requires that all disposal methods render protected health information (PHI) unreadable, indecipherable, and unable to be reconstructed. Acceptable destruction methods include:

• Paper records: Cross-cut shredding, pulping, or incineration
• Electronic records: Clearing, purging, or physical destruction of the storage media using methods consistent with NIST Special Publication 800-88
• Film and imaging: Physical destruction or degaussing

Documentation of Destruction

Providers should maintain a destruction log that records the date of destruction, the method used, a description of the records destroyed, and the name of the person who supervised or witnessed the destruction. While Montana does not have a specific statute mandating a destruction log, maintaining one demonstrates compliance with HIPAA and professional best practices.

Business Associate Agreements

If a provider uses a third-party vendor for records destruction, a Business Associate Agreement (BAA) must be in place under HIPAA. The BAA ensures that the destruction vendor is bound by the same privacy and security obligations as the covered entity.

Practice Closure and Medical Records

When a physician retires, relocates, or otherwise closes a practice in Montana, the provider remains responsible for ensuring that patient records are properly maintained and accessible.

Provider Obligations

Montana does not have a single statute that comprehensively addresses practice closure procedures. However, several obligations arise from existing law:

• Records must continue to be retained for the full retention period even after the practice closes
• Patients must be given reasonable notice and an opportunity to obtain copies of their records or arrange for transfer to another provider
• The provider must ensure records are stored securely if they cannot be transferred

Notification to Patients

Best practices for closing a Montana medical practice include:

• Sending written notification to all active patients at least 30 to 60 days before the closure date
• Publishing a notice in a local newspaper of general circulation
• Providing information about how patients can request their records or designate a new provider to receive them
• Notifying the Montana Board of Medical Examiners of the practice closure

Records Custodian

Physicians who are closing their practice should designate a records custodian to maintain and manage patient records for the remainder of the retention period. This could be another physician, a medical records storage company, or a professional custodian service.

The custodian must maintain the records in compliance with all applicable retention periods and privacy requirements, and must be able to respond to patient requests for access or copies.

Special Considerations for Electronic Health Records

Montana's administrative rules allow health care facilities to maintain medical records in electronic format, provided the electronic records meet the same standards for accuracy, completeness, and accessibility as paper records.

Electronic Records Standards

Under ARM 37.106.314, electronic health records must:

• Be protected against unauthorized access, modification, or destruction
• Include audit trails that track who accessed or modified a record
• Be backed up regularly to prevent data loss
• Remain accessible and readable for the entire required retention period, even as technology changes

Format Migration

Providers using electronic health records should have a plan for migrating data to new systems as technology evolves. Records stored in outdated or unsupported formats may become inaccessible, which could violate retention requirements. Regular testing of backup restoration and format compatibility is recommended.