New Jersey Medical Records Retention Laws (2026 Guide)

New Jersey requires hospitals to retain medical records for at least 10 years after a patient's last discharge under N.J.S.A. 26:8-5, while licensed physicians must keep treatment records for 7 years from the last entry under N.J.A.C. 13:35-6.5. Hospital and HMO records for minors must be kept until the patient reaches age 23, but physician office records follow the flat 7-year rule with no age extension.

New Jersey has some of the most detailed medical records retention laws in the country. The state sets different retention periods depending on the type of healthcare provider, the kind of record, and the age of the patient.

Understanding these rules matters whether you are a patient trying to obtain old records, a physician managing a practice, or a hospital administrator ensuring compliance. This guide breaks down every requirement under New Jersey law, explains how federal rules interact with state mandates, and covers what happens when records reach the end of their required retention period.

Hospital Medical Records Retention in New Jersey

New Jersey hospitals follow retention requirements established under N.J.S.A. 26:8-5 and the hospital licensing standards in N.J.A.C. 8:43G-15.2. The statute itself creates a tiered system with different timelines for different types of records.

General Hospital Records: 10 Years

Hospitals in New Jersey must preserve complete medical records for a minimum of 10 years following the patient's most recent discharge. This applies to the full clinical record, including physician notes, nursing assessments, lab results, test reports, treatment plans, and medication logs.

If the patient is a minor, the hospital must retain the records for 10 years after discharge or until the patient reaches age 23, whichever period is longer.

Discharge Summary Sheets: 20 Years

A discharge summary sheet must be retained for 20 years following the patient's most recent discharge. This summary includes the patient's name, address, dates of admission and discharge, and a summary of the treatment and medications provided during the hospital stay.

The 20-year requirement for discharge summaries is one of the longest record-specific retention periods in the United States. It ensures that a condensed version of the patient's hospital treatment history remains available long after the full clinical record may be destroyed.

X-Ray Films: 5 Years

X-ray films, or any size reproductions that maintain the clarity of the original, must be retained for 5 years under N.J.S.A. 26:8-5. This shorter period reflects the reduced long-term clinical value of imaging studies compared to narrative medical records, though providers participating in Medicare may need to retain imaging records longer to satisfy federal requirements.

Summary of Hospital Retention Periods

Physician Office Records Retention

Licensed physicians in New Jersey follow a separate set of retention rules established by the New Jersey Board of Medical Examiners under N.J.A.C. 13:35-6.5.

Standard Retention Period: 7 Years

Physicians must maintain patient treatment records for at least 7 years from the date of the most recent entry in the record. This requirement applies to all licensed physicians, including specialists, and covers the complete treatment record.

The 7-year period runs from the last date of service or the most recent chart entry, not from the date the patient first visited the practice. A patient who last saw their physician in 2020 would have records retained through at least 2027.

Records of Minor Patients

N.J.A.C. 13:35-6.5 sets a single retention period for physician treatment records: 7 years from the date of the most recent entry, regardless of the patient's age at the time of treatment. Physician office records do not carry the age-23 extension that applies to hospitals and HMOs.

The age-23 rule does apply elsewhere in New Jersey. Hospitals must keep a minor's full record for 10 years after discharge or until the patient turns 23, whichever is longer, under N.J.S.A. 26:8-5, and HMOs follow the same age-23 standard under N.J.A.C. 11:24-10.5. Physicians in solo or group practice follow the flat 7-year rule instead.

Computerized Records Requirements

N.J.A.C. 13:35-6.5 requires physicians who maintain computerized records to make copies of daily entries available for review. The regulation specifies that records must be produced for representatives of the Board of Medical Examiners, the Attorney General, or the Division of Consumer Affairs within 10 days of a request.

HMO Medical Records Requirements

Health Maintenance Organizations operating in New Jersey must follow retention requirements under N.J.A.C. 11:24-10.5. HMOs must protect records against loss, destruction, or unauthorized use and retain them for at least 10 years or until the member reaches age 23, whichever period is longer.

This means HMO retention requirements closely mirror the hospital standard rather than the physician office standard, providing patients with the same 10-year minimum regardless of whether care was delivered in a hospital setting or through an HMO network.

Long-Term Care Facility Records

New Jersey nursing homes and long-term care facilities follow retention rules under N.J.A.C. 8:39-35.2. The requirements match the hospital standard:

• Full medical records: 10 years following the most recent discharge, or until the resident reaches age 23 (whichever is longer)
• Discharge/continuum of care summary sheet: 20 years following the most recent discharge
• X-ray films: 5 years

The summary sheet must contain the resident's name, address, dates of admission and discharge, and a summary of all treatment and medication provided during the resident's stay.

How Federal Law Interacts with New Jersey Requirements

New Jersey providers must satisfy both state and federal retention requirements. When the two conflict, the stricter standard applies.

HIPAA Documentation Requirements

A common misconception is that HIPAA requires providers to keep patient medical records for a set number of years. That is not accurate.

HIPAA requires covered entities to retain HIPAA-related administrative documentation for 6 years under 45 CFR 164.530(j). This includes privacy policies, procedures, training records, business associate agreements, and complaint records. The 6-year rule does not apply to patient medical records.

How long actual patient records must be kept is determined by state law. In New Jersey, that means 10 years for hospitals and 7 years for physicians.

CMS and Medicare Requirements

Providers participating in Medicare or Medicaid must also meet federal retention minimums set by the Centers for Medicare and Medicaid Services (CMS):

For most New Jersey providers, state law is stricter than federal law. A New Jersey hospital participating in Medicare must retain records for 10 years (not 5) because the state requirement exceeds the federal one. A New Jersey physician in a Medicare practice must retain records for 7 years, which matches the federal guideline.

Practical Impact

The key takeaway for New Jersey providers is straightforward: follow state law, and you will automatically satisfy federal retention requirements in nearly all cases. The only exception involves providers in specialized federal programs (such as Medicare Part D) that may impose longer retention periods than state law.

Patient Access to Medical Records in New Jersey

New Jersey law provides patients with strong rights to access and obtain copies of their medical records. These rights come from both state statute and federal HIPAA rules.

Hospital Records Access

Under N.J.A.C. 8:43G-15.3, patients have a right to prompt access to their hospital medical records. Hospitals must provide copies within 30 days of receiving a written request.

The New Jersey Department of Health has published a patient rights guide confirming that every patient has the right to access and obtain a copy of their medical record.

Hospital Copy Fees

New Jersey law caps the fees hospitals may charge for medical record copies under N.J.S.A. 26:2H-5n:

Hospitals cannot charge search fees when a patient requests their own records.

Physician Records Access

Under N.J.S.A. 45:9-22.27, physicians must provide copies of treatment and billing records within 30 days of receiving a written request. The statute sets fee limits and includes several important patient protections:

• Physicians cannot refuse to provide records because the patient has an unpaid balance when the records are needed by another provider for continuing care
• If a record is illegible or written in a language other than English, the physician must provide a transcription or translation at no cost
• No fees may be charged when the physician has terminated the patient from the practice
• No fees may be charged when the patient is applying for or receiving Social Security disability benefits

HIPAA Access Rights

Under the federal HIPAA Privacy Rule, patients have the right to access their protected health information held by covered entities. Providers must respond within 30 days and may charge only reasonable, cost-based fees. For electronic copies of electronically maintained records, providers may charge a flat fee of $6.50 or less.

Proper Destruction of Medical Records

Once records have exceeded the required retention period, New Jersey providers must follow specific procedures for destruction.

HIPAA Destruction Standards

HIPAA requires that protected health information be rendered unreadable, indecipherable, and unable to be reconstructed upon destruction.

Approved methods for paper records include shredding, burning, or pulverizing. Electronic records must be cleared (overwritten with non-sensitive data), purged or degaussed (using a strong magnetic field), or physically destroyed.

Records cannot be placed in dumpsters, recycling bins, or any publicly accessible location. Providers may contract with a business associate to handle disposal, but a business associate agreement must be in place.

New Jersey Specific Requirements

New Jersey state regulations require that records containing confidential information be destroyed by burning, shredding, chipping, or pulping so that the information cannot be read or reconstructed. A designated person must observe the destruction process and sign a certificate verifying the time, location, and identity of the records destroyed.

Documentation of Destruction

Providers should maintain a destruction log that records the date of destruction, the type and date range of records destroyed, the method of destruction, and the identity of the person who witnessed the destruction. This documentation protects the provider in the event of a future inquiry about missing records.

What Happens When a Practice Closes

When a New Jersey physician retires, relocates, or closes a practice, N.J.A.C. 13:35-6.5 requires specific steps to protect patient records.

Physician Closure Requirements

If a physician ceases to practice or anticipates being out of practice for more than three months, the physician (or a designee) must establish a procedure allowing patients to obtain copies of their treatment records or consent to the transfer of those records to another physician or healthcare professional who is assuming responsibility for the practice.

The physician cannot charge patients for copies of records when the records will be used for continuing treatment or care. This ensures that a practice closure does not create a financial barrier to patients accessing their own health information.

Recommended Steps for Practice Closure

While New Jersey does not specify a mandatory notification timeline in the same detail as some states, the New Jersey Board of Medical Examiners and industry best practices recommend the following:

1. Notify all active patients in writing at least 30 to 60 days before closure
2. Publish a notice in a local newspaper of general circulation
3. Offer patients the option to transfer records to a new provider
4. Offer patients the option to receive copies of their records
5. Arrange for a records custodian to maintain all remaining records for the balance of the 7-year retention period
6. Notify the New Jersey Board of Medical Examiners
7. Destroy records that have exceeded the retention period using HIPAA-compliant methods

Hospital Closure

When a New Jersey hospital closes or discontinues operations, it must arrange for the transfer of medical records to a custodian who will maintain them for the remainder of the 10-year retention period. The hospital must ensure that patients can still access their records through the custodian and that all retention requirements continue to be met.

Special Considerations

Electronic Health Records

New Jersey does not mandate a specific format for medical records storage. Providers may maintain records in paper, electronic, or hybrid formats. However, regardless of format, the same retention periods apply.

Providers using electronic health record (EHR) systems should ensure that their systems can maintain data integrity over the full retention period and that records remain accessible and reproducible even if the provider switches EHR vendors.

Workers' Compensation Records

Records related to workers' compensation claims in New Jersey may be subject to additional retention requirements beyond the standard medical records timeline. Providers should consult with legal counsel regarding the intersection of workers' compensation regulations and medical records retention.

OSHA Occupational Health Records

Under federal OSHA regulations at 29 CFR 1910.1020, employee medical records related to occupational health exposures must be retained for the duration of employment plus 30 years. This federal requirement supersedes New Jersey's state retention periods for occupational health records.

Comparison: New Jersey vs. Neighboring States

New Jersey's 10-year hospital requirement and age-23 minor provision make it one of the stricter states in the region. New York and Pennsylvania both require shorter hospital retention periods.