Under Florida medical record retention laws, individual licensed practitioners must keep adult patient records for at least five years from the date of last contact, hospitals and public health care facilities must keep them for seven anniversary years after the last entry, and minors’ records generally need to be held far longer because the malpractice clock is paused during childhood. Those baselines come from Chapter 456 of the Florida Statutes, Chapter 395 for hospitals, and the Florida Administrative Code. Destroying records too early can trigger board discipline, HIPAA penalties, and the loss of the best evidence you’d have to defend a malpractice claim.
How Long to Keep Adult Patient Records
Five years from last patient contact is the floor for licensed physicians, set by the Florida Administrative Code, which also requires that the records remain in the practitioner’s possession and stay confidential except where disclosure is legally permitted.1Cornell Law Institute. Fla Admin Code Ann R 64B8-10.002 Ownership and patient access are governed separately by Florida Statute 456.057.2Justia Law. Florida Statutes 456.057 – Ownership and Control of Patient Records
Most Florida practitioners hold records for at least seven years, and the reason is malpractice exposure. Florida’s medical malpractice statute of repose generally caps lawsuits at four years from the date of the incident, but when fraud or concealment delayed discovery of the injury, that window extends to seven years.3Florida Senate. Florida Statutes 95.11 – Limitations Other Than for the Recovery of Real Property A practitioner who shreds files at the five-year mark can find themselves defending a claim in year six with nothing to show. The chart is your evidence.
How Long to Keep a Minor’s Records
Minors get a longer retention obligation because the malpractice limitations period is tolled during childhood. Under Florida law, the four-year repose period does not bar a claim brought on behalf of a minor on or before the child’s eighth birthday.3Florida Senate. Florida Statutes 95.11 – Limitations Other Than for the Recovery of Real Property For older minors, the standard two-year discovery period and four-year repose run from the date of the incident, with a possible seven-year extension in fraud cases.
The practical result is that many practitioners keep a minor’s records until the patient turns 25. That figure comes from the age of majority (18) plus the seven-year fraud-and-concealment window. A child treated at 17 whose injury was not discovered until adulthood could file suit as late as age 24 under the extended repose, and holding to 25 gives a small cushion. The five-year rule from last contact still applies, but for a patient last seen at 16, five years only carries you to age 21.
Hospital and Public Facility Retention
Hospitals and other public health care facilities follow a longer schedule than solo practitioners. Florida’s General Records Schedule GS4 requires patient medical records at public hospitals, health care facilities, and medical providers to be kept for seven anniversary years after the last entry.4Florida Department of State. General Records Schedule GS4 for Public Hospitals, Health Care Facilities and Medical Providers Chapter 395 governs hospital licensing and patient access more broadly, but the seven-year retention figure itself comes from the state records schedule.
When a Practice Closes, Relocates, or the Practitioner Dies
Florida Statute 456.058 requires each licensing board to adopt rules for handling records when a practitioner retires, relocates, or dies. At a minimum, records must be kept for at least two years after the death, closure, or relocation.5Florida Senate. Florida Statutes 456.058 – Disposition of Records of Deceased Practitioners or Practitioners Relocating or Terminating Practice That two-year floor sits on top of any time still owed under the ordinary retention period. If a practice closes today with charts from a visit two years ago, those charts still need to be accessible for another three years to satisfy the five-year baseline.
When the practitioner has died, the estate is responsible for proper disposition of the records, which in practice often means contracting with a professional records custodian for storage, security, and patient requests until retention expires.5Florida Senate. Florida Statutes 456.058 – Disposition of Records of Deceased Practitioners or Practitioners Relocating or Terminating Practice Board-level rules also address patient notification. For physicians, the Board of Medicine’s provisions in Florida Administrative Code Chapter 64B8 cover notification procedures for relocation or termination of practice, typically requiring public notice and communication with the board.1Cornell Law Institute. Fla Admin Code Ann R 64B8-10.002 Check the administrative code for your specific licensing board well before a planned closure.
Patient Access and Copy Fees
Patients have a right to their records, and a practitioner cannot withhold them over an unpaid treatment bill. The statute is explicit that furnishing records cannot be conditioned on payment of fees for services rendered, and records must be provided in a timely manner without delays for legal review.2Justia Law. Florida Statutes 456.057 – Ownership and Control of Patient Records
Copy charges are allowed but capped. A practitioner can charge up to the actual cost of copying, including reasonable staff time, or the amount set by the licensing board’s administrative rules.2Justia Law. Florida Statutes 456.057 – Ownership and Control of Patient Records Hospitals licensed under Chapter 395 face specific limits: no more than $1 per page for paper records, $2 for non-paper records, and up to $1 per year of records requested. Patients whose records are being copied so they can continue receiving medical care are exempt from copy and search fees entirely.6The Florida Legislature. Florida Statutes 395.3025 – Patient Records
How HIPAA Fits In
HIPAA does not set a retention period for patient medical records themselves. Federal law defers to state retention rules for the charts, so Florida’s five-year and seven-year figures control. Where HIPAA does impose a federal floor is on compliance documentation: policies, procedures, and records of required actions or assessments must be kept for six years from creation or from the date last in effect, whichever is later.7eCFR. 45 CFR 164.530 Those are internal compliance documents, not patient charts.
Penalties for Destroying Records Too Early
Under Florida Statute 456.072, violating any rule adopted by a licensing board is a standalone ground for discipline, as is failing to perform a statutory or legal obligation placed on a licensee.8The Florida Legislature. Florida Statutes 456.072 – Grounds for Discipline, Penalties, Enforcement Penalties can include fines, probation, license suspension, or revocation.
Improper disposal of records containing protected health information also creates federal exposure. Civil penalties for HIPAA violations start at $145 per violation and can reach over $2.1 million per violation category per year, depending on the level of culpability. Even unintentional violations carry penalties when the covered entity should have known about the problem. Shredding files a year early can look like a small administrative choice until a complaint reaches the Office for Civil Rights. The safer approach is to keep records longer than the minimum, not shorter.