Wisconsin
Wisconsin Medical Records Retention Laws (2026 Guide)
Independently fact-checked against primary sources (last audited August 18, 2026). · Reviewed by the RecordingLaw editorial team. · Law checked current as of August 18, 2026. · 13 primary sources cited on this page. How we verify our legal content

Wisconsin physicians must retain patient medical records for at least 5 years from the date of the last entry, under Wis. Admin. Code Med 21.03, and physician assistants carry a parallel 5-year duty under Wis. Admin. Code PA 3.05. Mental health and substance abuse treatment records require a longer 7-year minimum under Wis. Admin. Code DHS 92.12.
Wisconsin law requires health care providers to retain patient medical records for specific minimum periods depending on the type of provider, the type of record, and the age of the patient. The primary retention standard for physicians comes from Wisconsin Administrative Code Med 21.03, which sets a baseline of 5 years from the last entry. However, other state regulations, federal rules, and special circumstances can extend that timeline significantly.
This guide covers every major retention requirement that applies in Wisconsin, including separate rules for nursing homes, hospitals, physician offices, mental health facilities, and records involving minors. It also explains what happens when a provider closes, how patients can access their records, and how federal laws like HIPAA and Medicare conditions of participation interact with state rules.
Wisconsin Physician and Physician Assistant Records: 5-Year Minimum
The core retention rule for Wisconsin physicians is found in Wis. Admin. Code Med 21.03. The regulation states that a physician must "maintain patient health care records on every patient administered to for a period of not less than 5 years after the date of the last entry, or for such longer period as may be otherwise required by law."
Physician assistants are not covered by ch. Med 21, which by its own terms governs "the practice of physicians." They are credentialed by the Physician Assistant Affiliated Credentialing Board, and Wis. Admin. Code PA 3.05 sets a parallel standard: when patient health care records are not maintained by a separate entity, a physician assistant "shall ensure patient health care records are maintained on every patient for a period of not less than 5 years after the date of the last entry, or for a longer period as may be otherwise required by law." The practical result is the same 5-year floor, but the governing rule differs by credential.

This 5-year clock starts from the date of the most recent entry in the patient's record, not from the date of the first visit or the date of a specific treatment. If a patient returns for care after several years, the clock resets with each new entry.
What Must Be in the Record
Under Med 21.03, every patient record must contain the following clinical information where applicable:
- Pertinent patient history
- Pertinent objective findings from examinations and test results
- Assessment or diagnosis
- Plan of treatment for the patient
Each entry must be dated, must identify the practitioner who made it, and must be "sufficiently legible to allow interpretation by other practitioners for the benefit of the patient." These documentation standards apply to both paper and electronic records. PA 3.05 imposes the same four content elements and the same dating, identification, and legibility requirements on physician assistants.
Who Is Covered by Med 21.03
This regulation applies specifically to physicians (MDs and DOs) licensed in Wisconsin. Med 21.01 states that the chapter was adopted "to govern the practice of physicians in the preparation and retention of patient health care records," and Med 21.02 defines a patient as a person who receives health care services from a physician. It is enforced by the Wisconsin Medical Examining Board, which operates under the Department of Safety and Professional Services (DSPS).
Other provider types, including physician assistants (ch. PA), dentists, chiropractors, and mental health professionals, are governed by their own respective administrative codes. Dentists, for example, follow Wis. Admin. Code DE 8 for patient dental record retention.
Nursing Home Records Retention in Wisconsin
Nursing homes in Wisconsin are regulated under a separate framework. Wis. Admin. Code DHS 132.45 governs medical records in nursing homes licensed by the Wisconsin Department of Health Services.
This chapter does not reach hospitals, and that distinction is often misstated. Chapter DHS 132 is titled "Nursing Homes" and applies to "all nursing homes licensed under s. 50.03, Stats."; DHS 132.45 measures its retention clock from a "resident's" discharge or death. Hospitals are approved under Wis. Stat. 50.35 and regulated by ch. DHS 124 ("Hospitals"), which contains no medical records or retention section. Wisconsin therefore has no state administrative retention rule for hospital medical records, and a hospital's retention floor comes from the federal Medicare conditions of participation covered in the CMS section below.
Retention Period
Under DHS 132.45, an original medical record must be "retained for a period of at least 5 years following a resident's discharge or death when there is no requirement in state law" that mandates a longer period. All other facility records required by the chapter must be kept for at least 2 years.
Content Requirements for Nursing Home Records
Nursing home medical records under DHS 132.45 must include:
- Admission evaluation covering prior treatment, current findings, diagnoses, rehabilitation potential, and level of care
- Physician orders for medications, treatments, diets, and restraints
- Progress notes following each physician visit
- Nursing documentation including history, care plans, and narrative notes
- Social service notes and activities programming documentation
- Rehabilitative services evaluations and progress notes
- Dental service records where applicable
All entries must be "accurate, legible, permanently recorded, dated, and authenticated with the name and title of the person making the entry."
Facility Closure and Ownership Changes
When a nursing home closes, DHS 132.45 requires the facility to "arrange for the storage and safekeeping of records for the periods and under the conditions required." If ownership of a facility changes, the regulation specifies that "medical records and indexes shall remain with the facility." The records transfer with the building and license, not with the departing owner.
Mental Health and Substance Abuse Treatment Records: 7-Year Minimum
Wisconsin applies a longer retention period to mental health and substance abuse treatment records. Wis. Admin. Code DHS 92.12 requires that "treatment records shall be retained for at least 7 years after treatment has been completed."
This regulation applies to all records of persons receiving treatment for mental illness, developmental disabilities, or substance use disorders from the Wisconsin Department of Health Services, county boards, or treatment facilities operating under contract with the department.
Extended Retention Situations
DHS 92.12 identifies three situations where records must be kept beyond the standard 7-year period:
- Audits: Any record undergoing a federal or state audit must be maintained until the audit is completed.
- Legal actions: Records relating to legal actions must be maintained until the legal action concludes.
- Billing and collections: Records related to billing or collections must follow retention periods specified in Wis. Admin. Code DHS 1.06.
Retention Rules for Minor Patients
Wisconsin law provides extended protections for medical records of patients who were minors at the time of treatment. The specific requirements depend on the type of care.
Mental Health and Substance Abuse Records for Minors
Under Wis. Admin. Code DHS 92.12, records for minors must be "retained until the person becomes 19 years of age or until 7 years after treatment has been completed, whichever is longer."
This means that if a 10-year-old patient completes treatment, the records must be kept until the patient turns 19 (9 years), because that is longer than the standard 7-year period. For a 16-year-old who completes treatment, the 7-year period (extending to age 23) would apply because it exceeds the age-19 threshold.
General Medical Records for Minors
For general physician records under Med 21.03, the standard 5-year retention period applies regardless of the patient's age. However, many Wisconsin providers voluntarily retain minor patient records longer because the statute of limitations for medical malpractice claims involving minors does not begin running until the patient reaches the age of majority (18 in Wisconsin). Retaining records until a minor patient turns at least 23 provides a buffer that covers the general statute of limitations period.
HIPAA and Federal Retention Requirements
Federal law adds important layers to Wisconsin's state-level retention rules. Providers must comply with both state and federal requirements, and whichever standard is stricter controls.
HIPAA Does Not Set a Retention Period for Medical Records
A common misconception is that HIPAA requires providers to retain medical records for a specific number of years. According to the U.S. Department of Health and Human Services (HHS), "the HIPAA Privacy Rule does not include medical record retention requirements." State laws govern how long records must be kept.
However, HIPAA does require covered entities to retain their privacy policies, procedures, privacy practices notices, and complaint documentation for 6 years after the later of the date of creation or last effective date. This is an administrative requirement, not a patient records requirement.
HIPAA Governs How Records Are Protected and Destroyed
While HIPAA does not dictate retention periods, it does require covered entities to apply "appropriate administrative, technical, and physical safeguards to protect the privacy of protected health information" for as long as the information is maintained. This includes during the disposal process.
CMS and Medicare Conditions of Participation
Wisconsin hospitals that participate in Medicare must also meet federal retention requirements under the Centers for Medicare and Medicaid Services (CMS) conditions of participation.
Hospital Records Under 42 CFR 482.24
Under 42 CFR 482.24, a hospital participating in Medicare must maintain a medical record for each inpatient and outpatient, and those records "must be retained in their original or legally reproduced form for a period of at least 5 years." Because Wisconsin has no DHS retention rule for hospital medical records, this federal condition of participation is the operative retention floor for Wisconsin hospitals.
In practice, many Medicare-participating hospitals in Wisconsin retain records for 7 to 10 years to satisfy audit requirements and to cover the limitations periods that can apply to malpractice and Medicare fraud claims.
CMS Billing Records
CMS requires Medicare providers to maintain records necessary to support claims for at least 7 years from the date of service. This billing record requirement is separate from the clinical record retention rules and often results in providers keeping complete records longer than the state minimum.
Patient Access to Medical Records in Wisconsin
Wisconsin provides strong patient access rights through Wis. Stat. 146.83. Patients have a legal right to inspect and obtain copies of their health care records.
Inspection Rights
Any patient, or a person authorized by the patient, may "inspect the health care records of a health care provider pertaining to that patient at any time during regular business hours, upon reasonable notice." The patient must submit a statement of informed consent.
Copy Fees
Wisconsin law sets specific maximum fees for copies of medical records:
| Record Type | Fee |
|---|---|
| Paper copies (pages 1 to 25) | $1.00 per page |
| Paper copies (pages 26 to 50) | $0.75 per page |
| Paper copies (pages 51 to 100) | $0.50 per page |
| Paper copies (pages 101 and above) | $0.30 per page |
| Microfiche or microfilm copies | $1.50 per page |
| X-ray prints | $10.00 per image |
These dollar amounts are adjusted annually on July 1 based on changes in the consumer price index. Patients eligible for Medical Assistance (Medicaid) receive one set of copies at 25% of the standard fees.
Penalties for Violations
Violations of Wisconsin's patient health care records requirements carry significant consequences. A knowing and willful violation can result in liability for actual damages plus exemplary damages of up to $25,000. Negligent violations carry exemplary damages up to $1,000, and the court may award attorney fees to the prevailing patient. These damages provisions are set out in Wisconsin's broader patient-health-care-records statutes rather than in the access-rights text of Wis. Stat. 146.83 itself.
It is also a criminal offense to falsify, conceal, or intentionally destroy medical records with intent to prevent or obstruct an investigation or prosecution.
Proper Destruction of Medical Records in Wisconsin
Once the applicable retention period has expired, Wisconsin providers must follow specific procedures when destroying medical records to comply with both state and federal requirements.
Wisconsin State Requirements
Wis. Stat. 134.97 governs the disposal of records containing personal information by medical businesses. A medical business may not dispose of records containing personal information unless it takes one of the following steps:
- Shreds the record before disposal
- Erases the personal information before disposal
- Modifies the record to make the personal information unreadable before disposal
- Takes actions reasonably believed to ensure no unauthorized person will have access to the personal information between disposal and destruction
A medical business that violates these disposal requirements may be required to forfeit up to $1,000 per violation.
HIPAA Disposal Standards
The HHS Office for Civil Rights specifies that proper disposal of paper records containing protected health information may include "shredding, burning, pulping, or pulverizing the records so that PHI is rendered essentially unreadable, indecipherable, and otherwise cannot be reconstructed."
For electronic records, acceptable methods include clearing (overwriting with non-sensitive data), purging (degaussing), or physically destroying the media through disintegration, pulverization, melting, incineration, or shredding.
Simply placing records in a publicly accessible trash receptacle is never acceptable under HIPAA, even if the records are in sealed bags.
Documentation of Destruction
Providers should maintain a permanent log of all records destroyed, including the date of destruction, a description of the records, the method used, and the name of the person who performed or supervised the destruction. While Wisconsin does not mandate a specific destruction log format, maintaining one protects the provider in the event of a future inquiry or audit.
What Happens When a Wisconsin Practice Closes
Wis. Stat. 146.819 establishes the requirements for handling patient records when a health care provider ceases practice or dies.
Three Options for Records
A provider who stops practicing must handle all patient records in one of three ways:
- Arrange for another person to maintain the records in compliance with Wisconsin's patient health care record statutes (Wis. Stat. 146.81 through 146.835). The new custodian must agree in writing.
- Arrange for deletion or destruction of all patient records following proper disposal procedures.
- Use a combination of both approaches, maintaining some records while destroying others.
Patient Notification Requirements
If records will be maintained by another person or entity, Wis. Stat. 146.819(2) requires the closing provider to do at least one of the following:
- Send written notice by first-class mail to each patient's last-known address, explaining where and by whom the records will be maintained, OR
- Publish a class 3 notice in a newspaper published in the county where the practice was located
If records will be destroyed, Wis. Stat. 146.819(3) likewise requires the provider to do at least one of the following:
- Send written notice by first-class mail to each patient's last-known address at least 35 days before the records are destroyed, stating when the records will be destroyed and where the patient may retrieve them before that date, OR
- Publish a class 3 notice under ch. 985 in a newspaper published in the county where the practice was located, specifying the date the records will be destroyed
The 35-day minimum attaches only to the mailed notice. A provider that chooses the newspaper alternative is not held to a 35-day period by the statute, which is why patients should not assume they will receive a letter before old records are destroyed.
Exemptions
Wis. Stat. 146.819(4) exempts several categories of facility outright, with no transfer or successor condition attached: community-based residential facilities and nursing homes licensed under s. 50.03, hospitals approved under s. 50.35, hospices licensed under s. 50.92, and home health agencies licensed under s. 50.49 (4). A hospital is exempt because it is a hospital, not because it hands its records to anyone.
The successor-transfer condition belongs to the local health department paragraph, not to the facility exemptions above it. Under par. (4) (f), a local health department is exempt where it ceases operations and transfers the patient health care records in its possession to a successor local health department. Exempt facilities are governed instead by their own rules, such as DHS 132.45 for nursing homes and the federal Medicare conditions of participation for hospitals.
Summary of Wisconsin Retention Periods
| Provider or Record Type | Minimum Retention Period | Authority |
|---|---|---|
| Physicians | 5 years from the last entry | Wis. Admin. Code Med 21.03 |
| Physician assistants | 5 years from the last entry | Wis. Admin. Code PA 3.05 |
| Nursing homes | 5 years from a resident's discharge or death | Wis. Admin. Code DHS 132.45 |
| Mental health and substance abuse treatment | 7 years after treatment completion | Wis. Admin. Code DHS 92.12 |
| Minor patients (mental health) | Age 19 or 7 years after treatment, whichever is longer | Wis. Admin. Code DHS 92.12 |
| Hospitals (no state DHS retention rule; federal floor) | 5 years minimum | 42 CFR 482.24 |
| HIPAA administrative records | 6 years from creation or last effective date | 45 CFR 164.530(j) |
| CMS billing records | 7 years from date of service | CMS guidelines |
Providers should always apply the longest applicable retention period when multiple rules overlap. A Wisconsin hospital that participates in Medicare should retain records for at least 7 years to satisfy the federal 5-year clinical minimum and the longer federal billing documentation period.
Frequently Asked Questions
How long must doctors keep medical records in Wisconsin?
Wisconsin physicians must retain patient medical records for at least 5 years after the date of the last entry in the record, under Wisconsin Administrative Code Med 21.03, enforced by the Medical Examining Board. Physician assistants are not covered by ch. Med 21, but Wis. Admin. Code PA 3.05 imposes the same 5-year standard on them. Other laws may require longer retention in specific situations, such as records of mental health or substance abuse treatment.
Does HIPAA require medical records to be kept for a certain number of years?
No. The HIPAA Privacy Rule does not include a specific medical record retention period. According to HHS, state laws govern how long patient medical records must be kept. HIPAA does require covered entities to retain their privacy policies, notices, and complaint documentation for 6 years, but this is separate from patient record retention.
How long must Wisconsin hospitals keep patient records?
Wisconsin has no state administrative rule setting a retention period for hospital medical records. Chapter DHS 132, which contains the 5-year rule people often cite, applies to nursing homes and runs from a resident's discharge or death; chapter DHS 124, the hospital chapter, has no records-retention section. The operative floor is federal: under 42 CFR 482.24, a hospital participating in Medicare must retain medical records in their original or legally reproduced form for at least 5 years. In practice, many Wisconsin hospitals retain records for 7 to 10 years.
What happens to my medical records if my Wisconsin doctor retires or closes the practice?
Under Wis. Stat. 146.819, a physician who stops practicing must either transfer records to another custodian who agrees in writing to maintain them, or arrange for proper destruction. Either way the provider must do at least one of two things to notify patients: mail written notice by first-class mail, or publish a class 3 newspaper notice in the county where the practice was located. The 35-day advance notice period applies to the mailed notice on the destruction path; a provider that uses the newspaper alternative instead is not held to that 35-day minimum, so do not assume a letter will arrive before old records are destroyed.
Are there special rules for keeping medical records of minors in Wisconsin?
For mental health and substance abuse treatment, Wisconsin Administrative Code DHS 92.12 requires records of minors to be kept until the patient turns 19 or for 7 years after treatment ends, whichever is longer. For general medical records, the standard 5-year rule applies, but many providers voluntarily retain minor records longer to protect against malpractice claims that can be filed after the patient reaches the age of majority at 18.
Updates
Corrected the hospital retention rule: Wis. Admin. Code DHS 132.45 governs nursing homes, not hospitals, and Wisconsin has no state retention rule for hospital records, so the federal 5-year Medicare standard in 42 CFR 482.24 applies; also attributed the physician assistant duty to PA 3.05 rather than Med 21.03, restored the newspaper-publication alternative to the 35-day destruction notice, and corrected the scope of the 146.819(4) exemptions.
Independently fact-checked against the cited primary sources; governing law re-checked for recent changes
Governing law re-checked for recent changes
Corrected the citation for the $25,000/$1,000 exemplary-damages figures: they are not in the linked text of Wis. Stat. 146.83 (which addresses falsifying, concealing, or destroying records to obstruct an investigation), so the article now attributes them to Wisconsin's health-records statutes generally rather than pinning them to section 146.83.
Governing law re-checked for recent changes
Reviewed and approved by an editor
The Law Behind This Article
This article rests on the statutory provisions below, held in our own legal record and retrieved from the official source. Tap a section to read the operative text.
Wisconsin Statutes, Chapter 146: Miscellaneous Health Provisions
§ 146.819Preservation or destruction of patient health care records.In force
(1) Except as provided in sub. (4), any health care provider who ceases practice or business as a health care provider or the personal representative of a deceased health care provider who was an independent practitioner shall do one of the following for all patient health care records in the possession of the health care provider when the health care provider ceased business or practice or died: (a) Provide for the maintenance of the patient health care records by a person who states, in writing, that the records will be maintained in compliance with ss. 146.81 to 146.835. (b) Provide for the deletion or destruction of the patient health care records. (c) Provide for the maintenance of some of the patient health care records, as specified in par. (a), and for the deletion or destruction of some of the records, as specified in par. (b). (2) If the health care provider or personal representative provides for the maintenance of any of the patient health care records under sub.
Official text (excerpt) · last checked 2026-07-29 · Read the full text in our law library · Verify at docs.legis.wisconsin.gov
Cited in 3 court opinions in our collectionLatest citing opinion in our collection: 2023
Opinions citing this section in our collection:
- American Family Mutual Insurance v. Golke (Wisconsin Supreme Court 2009, 319 Wis. 2d 397)“…he child's parents *739 and others by first-class mail); Wis. Stat. § 146.819 (3)(a) (providing for the deletion or d…”
- Morrison v. Rankin (Court of Appeals of Wisconsin 2007, 305 Wis. 2d 240)“…the statutes of limitation and repose. She points out that Wis. Stat. § 146.819 (3)(a) and (b) require notice to former…”
- Beatriz Banuelos v. University of Wisconsin Hospitals and Clinics Authority (Wisconsin Supreme Court 2023, 406 Wis. 2d 439)“…which governs a health care 13 Wis. Stat. § 146.819(1) states: Except as provided in…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
§ 146.83Access to patient health care records.In forcecited in 2 of our articles
(1b) Notwithstanding s. 146.81 (5), in this section, a “person authorized by the patient” includes an attorney appointed to represent the patient under s. 977.08 if that attorney has written informed consent from the patient to view and obtain copies of the records. (1c) Except as provided in s. 51.30 or 146.82 (2), any patient or person authorized by the patient may, upon submitting a statement of informed consent, inspect the health care records of a health care provider pertaining to that patient at any time during regular business hours, upon reasonable notice. (1f) (am) If a patient or person authorized by the patient requests copies of the patient’s health care records under this section for use in appealing a denial of social security disability insurance, under 42 USC 401 to 433, or supplemental security income, under 42 USC 1381 to 1385, the health care provider may charge the patient or person authorized by the patient no more than the amount that the federal social security administration reimburses the department for copies of patient health care records.
Official text (excerpt) · last checked 2026-07-29 · Read the full text in our law library · Verify at docs.legis.wisconsin.gov
Cited in 21 court opinions in our collectionLatest citing opinion in our collection: 2026
Opinions citing this section in our collection:
- Andrea Townsend v. ChartSwap, LLC (Wisconsin Supreme Court 2021, 399 Wis. 2d 599)“…ravention of the fee restrictions set out in Wis. Stat. § 146.83(3f) (2017-18).3 On appeal, ChartSwap…”
- Carolyn Moya v. Healthport Technologies, LLC (Wisconsin Supreme Court 2017, 375 Wis. 2d 38)“…Access to patient health care records is governed by Wis. Stat. § 146.83. Under subsec. (3f), a healt…”
- Cruz v. All Saints Healthcare System, Inc. (Court of Appeals of Wisconsin 2001, 242 Wis. 2d 432)“…with the legislative intent of the medical records law in Wis. Stat. §§ 146.83 and 146.84. First, we will address the…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Wisconsin Data Privacy Laws: Breach Notification & Consumer Rights (2026)
§ 146.81Health care records; definitions.In force
In ss. 146.81 to 146.84: (1) “Health care provider” means any of the following: (a) A nurse licensed under ch. 441. (b) A chiropractor licensed under ch. 446. (c) A dentist or dental therapist who is licensed under ch. 447 or who holds a compact privilege under subch. II of ch. 447. (d) A physician, perfusionist, or respiratory care practitioner licensed or certified under subch. II of ch. 448 or a respiratory care practitioner who holds a compact privilege under subch. XV of ch. 448. (dc) A naturopathic doctor or limited-scope naturopathic doctor licensed under ch. 466. (dg) A physical therapist or physical therapist assistant who is licensed under subch. III of ch. 448 or who holds a compact privilege under subch. XI of ch. 448. (dr) A podiatrist licensed under subch. IV of ch. 448. (em) A dietitian who is certified under subch. V of ch. 448 or who holds a compact privilege under subch. XIV of ch. 448. (eq) An athletic trainer licensed under subch. VI of ch. 448. (es) An occupational therapist or occupational therapy assistant who is licensed under subch. VII of ch. 448 or who holds a compact privilege under subch. XII of ch. 448.
Official text (excerpt) · last checked 2026-07-29 · Read the full text in our law library · Verify at docs.legis.wisconsin.gov
Cited in 26 court opinions in our collectionLatest citing opinion in our collection: 2025
Opinions citing this section in our collection:
- Johnson v. Rogers Memorial Hospital, Inc. (Wisconsin Supreme Court 2005, 283 Wis. 2d 384)“…r under the supervision of a health care provider . . . ." Wis. Stat. § 146.81 (4). There are exceptions to this rule.…”
- Andrea Townsend v. ChartSwap, LLC (Wisconsin Supreme Court 2021, 399 Wis. 2d 599)“…We conclude that, under a plain meaning interpretation of Wis. Stat. § 146.81(1), ChartSwap is not a health care prov…”
- Hart v. Bennet (Court of Appeals of Wisconsin 2003, 267 Wis. 2d 919)“…er the supervision of a health care provider as defined in Wis. Stat. § 146.81 (1); (2) the trial court erred in decid…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Wisconsin Statutes, Chapter 134: Miscellaneous Trade Regulations
§ 134.97Disposal of records containing personal information.In forcecited in 2 of our articles
(1) Definitions. In this section: (a) “Credit card” has the meaning given in s. 421.301 (15). (am) “Dispose” does not include a sale of a record or the transfer of a record for value. (b) “Financial institution” means any bank, savings bank, savings and loan association or credit union that is authorized to do business under state or federal laws relating to financial institutions, any issuer of a credit card or any investment company. (c) “Investment company” has the meaning given in s. 180.0103 (11e). (d) “Medical business” means any organization or enterprise operated for profit or not for profit, including a sole proprietorship, partnership, firm, business trust, joint venture, syndicate, corporation, limited liability company or association, that possesses information, other than personnel records, relating to a person’s physical or mental health, medical history or medical treatment. (e) “Personal information” means any of the following: 1. Personally identifiable data about an individual’s medical condition, if the data are not generally considered to be public knowledge. 2.
Official text (excerpt) · last checked 2026-07-29 · Read the full text in our law library · Verify at docs.legis.wisconsin.gov
Code of Federal Regulations Title 42
§ 482.24Condition of participation: Medical record services.In forcecited in 52 of our articles
The hospital must have a medical record service that has administrative responsibility for medical records. A medical record must be maintained for every individual evaluated or treated in the hospital. (a) Standard: Organization and staffing. The organization of the medical record service must be appropriate to the scope and complexity of the services performed. The hospital must employ adequate personnel to ensure prompt completion, filing, and retrieval of records. (b) Standard: Form and retention of record. The hospital must maintain a medical record for each inpatient and outpatient. Medical records must be accurately written, promptly completed, properly filed and retained, and accessible. The hospital must use a system of author identification and record maintenance that ensures the integrity of the authentification and protects the security of all record entries. (1) Medical records must be retained in their original or legally reproduced form for a period of at least 5 years. (2) The hospital must have a system of coding and indexing medical records. The system must allow for timely retrieval by diagnosis and procedure, in order to support medical care evaluation studies.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 18 court opinions in our collectionLatest citing opinion in our collection: 2024
In the courts (editorial summary, independently checked):United States ex rel. Janssen v. Lawrence Memorial Hospital (2020) held the accurate medical record duty in 42 C.F.R. 482.24 is a generic regulatory requirement that does not establish False Claims Act materiality. United States Ex Rel. El-Amin v. George Washington University (2008) applied 482.24(c) to record completion evidence.
Opinions citing this section in our collection:
- United States ex rel. Janssen v. Lawrence Memorial Hospital (Court of Appeals for the Tenth Circuit 2020, 949 F.3d 533)✓A relator alleged the hospital falsified patient arrival times to raise its Medicare quality-program payments. The court held the general duty to keep accurate medical records under 42 C.F.R. 482.24 does not address those programs and cannot show False Claims Act materiality.
- United States Ex Rel. El-Amin v. George Washington University (District Court, District of Columbia 2008, 533 F. Supp. 2d 12)✓Nurse anesthetists claimed the hospital billed Medicare as though anesthesiologists performed whole procedures. Citing the 30-day rule in 42 C.F.R. 482.24(c)(2), the court excluded late-signing evidence, and excluded mass-signing evidence too though (c)(1) made it probative.
- NATIONAL ASS'N OF PSYCHIATRIC HEALTH SYSTEM v. Shalala (District Court, District of Columbia 2000, 120 F. Supp. 2d 33)“…to preexisting recordkeeping requirements, as specified in 42 C.F.R. § 482.24 . 7 . Proposed Rul…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: How Long Do Hospitals Keep Medical Records? (2026), How to Find Old Medical Records Online, Medical Records Retention Laws by State (2026 Guide)
Code of Federal Regulations Title 45
§ 164.530Administrative requirements.In forcecited in 40 of our articles
(a)(1) Standard: Personnel designations. (i) A covered entity must designate a privacy official who is responsible for the development and implementation of the policies and procedures of the entity. (ii) A covered entity must designate a contact person or office who is responsible for receiving complaints under this section and who is able to provide further information about matters covered by the notice required by § 164.520. (2) Implementation specification: Personnel designations. A covered entity must document the personnel designations in paragraph (a)(1) of this section as required by paragraph (j) of this section. (b)(1) Standard: Training. A covered entity must train all members of its workforce on the policies and procedures with respect to protected health information required by this subpart and subpart D of this part, as necessary and appropriate for the members of the workforce to carry out their functions within the covered entity. (2) Implementation specifications: Training.
Official text (excerpt) · last checked 2026-07-28 · Read the full text in our law library · Verify at ecfr.gov
Cited in 23 court opinions in our collectionLatest citing opinion in our collection: 2025
In the courts (editorial summary, independently checked):Surprise v. Innovation Group, Inc. (2013) applied 45 CFR 164.530(c), noting it requires appropriate safeguards but does not specify what they must be, and rejected a wrongful discharge claim resting on it. Baum v. KEYSTONE MERCY HEALTH PLAN (2011) treated the same duty as background to state tort claims and remanded.
Opinions citing this section in our collection:
- Baum v. KEYSTONE MERCY HEALTH PLAN (District Court, E.D. Pennsylvania 2011, 826 F. Supp. 2d 718)✓A lost flash drive exposed health data on 280,000 insured children, and a parent sued in state court for negligence per se. The court held that resting the claim on the HIPAA safeguard rule at 45 C.F.R. 164.530(c)(2)(i) raised no substantial federal question, and remanded.
- Surprise v. Innovation Group, Inc. (District Court, D. Massachusetts 2013, 925 F. Supp. 2d 134)✓An employee fired after complaining that health-information documents went into unsecured trash sued for wrongful discharge. The court read 45 C.F.R. 164.530(c) to require safeguards without prescribing a method, and held HIPAA disposal rules are not well-defined public policy.
- Michael Terpin v. at and T Mobility LLC (Court of Appeals for the Ninth Circuit 2024, 118 F.4th 1102)“…viders to protect patients’ “protected health information.” 45 C.F.R. § 164.530(c)(1); Moore, 299 Cal. Rptr. 3d at 561.…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Alaska Medical Records Retention Laws (2026 Guide), Arkansas Medical Records Retention Laws (2026 Guide), District of Columbia Medical Records Retention Laws (2026 Guide)
Search our full record of US law — 2.1 million sections, every state + federal →
Sources and References
- Wisconsin Administrative Code Med 21.03 - Minimum Standards for Patient Health Care Records(docs.legis.wisconsin.gov).gov
- Wisconsin Administrative Code Chapter Med 21 - Patient Health Care Records(docs.legis.wisconsin.gov).gov
- Wisconsin Statute 146.819 - Health Care Provider Records Upon Ceasing Practice(docs.legis.wisconsin.gov).gov
- Wisconsin Statute 146.83 - Patient Access to Health Care Records(docs.legis.wisconsin.gov).gov
- Wisconsin Administrative Code DHS 132.45 - Hospital and Nursing Home Records(docs.legis.wisconsin.gov).gov
- Wisconsin Administrative Code DHS 92.12 - Mental Health Records Retention(docs.legis.wisconsin.gov).gov
- Wisconsin Statute 134.97 - Disposal of Records Containing Personal Information(docs.legis.wisconsin.gov).gov
- HHS HIPAA FAQ: Medical Record Retention(hhs.gov).gov
- HHS HIPAA FAQ: Disposal of Protected Health Information(hhs.gov).gov
- 42 CFR 482.24 - Conditions of Participation: Medical Record Services(ecfr.gov).gov
- CMS Medical Record Maintenance and Access Requirements(cms.gov).gov
- Wisconsin State Law Library - Medical Records(wilawlibrary.gov).gov
- Wisconsin DSPS - Medicine Rules and Statutes(dsps.wi.gov).gov
- Wisconsin Administrative Code PA 3.05 - Minimum Standards for Patient Health Care Records (Physician Assistants)(docs.legis.wisconsin.gov)
- Wisconsin Administrative Code Chapter DHS 124 - Hospitals (contains no medical records retention section)(docs.legis.wisconsin.gov)
- Wisconsin Administrative Code Chapter DHS 132 - Nursing Homes (applicability)(docs.legis.wisconsin.gov)