When a patient’s treatment comes to an end, the healthcare relationship may be finished, but the medical record still has a life of its own. A patient may leave a physician’s office, therapy practice, clinic, or other healthcare setting, but the patient’s medical record must continue to be managed, protected, and retained according to applicable Virginia requirements.

For Virginia healthcare providers, medical record retention is more than simply keeping an old chart in an electronic health record (EHR). Practices need to understand what belongs in the patient record, how long the record must be retained, when the retention period begins, what exceptions apply, and how records should be destroyed when they are no longer required.

Virginia’s Board of Medicine regulations require practitioners to properly manage patient records and maintain records that are timely, accurate, legible, and complete. For practitioners covered by the applicable Virginia rules, the general minimum retention period is six years following the last patient encounter. There are important exceptions for minor patients, records already transferred to another provider or provided to the patient, and records that must be retained longer under federal law or contractual obligations.

Virginia healthcare provider reviewing electronic medical records / secure EHR illustration.

What Does Virginia Law Require When a Patient’s Treatment Ends?

Once a patient has completed treatment, the medical record does not simply disappear. The record becomes part of the practice’s ongoing record-management responsibilities.

There are two important questions:

1. 1. What information should be included in the patient’s clinical record?

1. 1. How long must that information remain available?

Virginia requires practitioners to properly manage patient records and maintain them in a timely, accurate, legible, and complete manner. Practitioners must also provide records to another practitioner, the patient, or the patient’s personal representative in accordance with Virginia’s patient-record disclosure requirements.

What should be documented in a patient record?

Depending on the type of healthcare service provided, a patient record may include:

• • Patient identification information

• • Medical and clinical history

• • Examination findings

• • Diagnoses

• • Treatment plans

• • Medication information

• • Progress and treatment notes

• • Relevant communications

• • Diagnostic results

• • Referrals and consultations

• • Consent and authorization documents

• • Other documentation that forms part of the patient’s clinical record

A well-managed record should allow an authorized healthcare professional to understand the patient’s care and treatment history.

When does the Virginia retention clock begin?

For the general rule applicable to practitioners covered by Virginia’s medical-record requirements, the minimum retention period begins following the last patient encounter.

That means a practice should not automatically calculate retention from:

• • The date the patient first registered

• • The date the chart was created

• • The date the patient became inactive

• • The date the EHR account was closed

• • The date an insurance claim was paid

Instead, the practice should identify the applicable retention rule and the correct triggering event.

Virginia Medical Record Retention Requirements

Suggested image placement:
Virginia medical record retention timeline showing “Last Patient Encounter → Retention Period → Review → Eligible for Destruction.”

What is the medical record retention timeframe in Virginia?

For practitioners covered by Virginia’s applicable medical-record rules, the basic requirement is a minimum of six years following the last patient encounter. Virginia Code §54.1-2910.4 also states that covered practitioners generally are not required to maintain health records for longer than 12 years from the date of creation, subject to exceptions.

The major exceptions include:

• • Records of a minor child

• • Records already transferred to another practitioner or healthcare provider

• • Records provided to the patient or the patient’s personal representative

• • Records required by federal law to be retained longer

• • Records required by contractual obligations to be retained longer

Virginia Medical Record Retention Requirements at a Glance

Virginia’s current regulation, 18VAC85-20-26, establishes the six-year minimum and specifically identifies the exceptions for minor records, transferred/provided records, and longer federal or contractual requirements.

➜ Physician and Practitioner Patient Records: Six-Year Minimum

How long does a Virginia practitioner have to keep a patient’s healthcare record?

For practitioners covered by the applicable Virginia requirements, patient records generally must be maintained for a minimum of six years following the last patient encounter.

This does not mean that every record can automatically be destroyed exactly six years after the last appointment. The practice should first determine whether an exception applies.

For example, Virginia law recognizes longer retention for certain minor records and for records subject to federal or contractual requirements.

Example: When does the six-year clock start?

Suppose Dr. Jessica Morgan treated an adult patient for the final time on June 15, 2026.

The practice should identify:

• • Last patient encounter: June 15, 2026

• • Minimum retention period: 6 years

• • Six-year date: June 15, 2032

Therefore, assuming no exception or longer applicable requirement applies, the six-year minimum period would run through June 15, 2032.

What if the patient returns later?

Suppose the same patient returns to Dr. Morgan on October 10, 2028.

That later encounter becomes the patient’s new last patient encounter for purposes of calculating the normal six-year retention period.

The calculation would then be:

October 10, 2028 → October 10, 2034

This is why practices should avoid assigning a permanent destruction date to an inactive chart without accounting for later encounters.

➜ What Happens When a Physician or Practice Closes?

Suggested image placement:
Physician closing a practice and securely transferring patient records to another provider.

Closing, selling, relocating, or transferring a medical practice does not mean patient records can simply be deleted.

Virginia has requirements concerning patient records when a practitioner closes, sells, or relocates a practice. Applicable Virginia regulations require practitioners to provide information concerning the retention and destruction timeframe and, in relevant circumstances, give patients information about obtaining or transferring records.

Before closing or changing a practice, providers should determine:

1. 1. Who will be responsible for the records?

1. 1. Where will the records be stored?

1. 1. How can patients request their records?

1. 1. Can records be transferred to another practitioner?

1. 1. What records have already been transferred?

1. 1. What records still need to be retained?

1. 1. How long must remaining records be maintained?

1. 1. How will confidential destruction be handled?

Virginia law also provides that records previously transferred to another practitioner or healthcare provider, or provided to the patient or personal representative, are treated differently under the applicable retention provisions.

➜ Minor Patient Medical Record Retention Requirements in Virginia

Minor patient records require special attention.

Under Virginia’s current rule, records of a minor child, including immunization records, must be maintained until the child reaches 18 years of age or becomes emancipated, with a minimum retention period of six years from the last patient encounter regardless of the child’s age.

This means practices should not automatically apply the adult six-year calculation without considering the minor-patient requirement.

Example: Minor Patient

Suppose a physician treats a 10-year-old patient on January 1, 2026.

The practice should consider:

• • Last patient encounter: January 1, 2026

• • Six-year minimum: January 1, 2032

• • Patient reaches age 18: depends on the patient’s actual date of birth

The practice should retain the record for the applicable period required by Virginia law, taking both the minimum six-year requirement and the minor-patient age requirement into consideration.

Practical rule for Virginia practices

For minor patients, track:

Date of birth + Last patient encounter

This helps prevent a practice from relying only on an automated six-year calculation when the minor-patient rule requires continued retention.

➜ Adult Patient Medical Record Retention Requirements in Virginia

For an adult patient, the basic Virginia calculation is straightforward:

Last patient encounter → Add 6 years → Minimum retention period

Example: Adult Patient With Multiple Visits

Suppose a patient has the following visits:

• • First visit: June 5, 2021

• • Follow-up: September 14, 2023

• • Final treatment: April 10, 2026

The first visit does not determine the ordinary six-year retention period.

The relevant date is:

Final patient encounter: April 10, 2026

Add six years:

April 10, 2026 + 6 years = April 10, 2032

Therefore, assuming no longer applicable federal or contractual requirement applies, the six-year minimum period would extend through April 10, 2032.

Adult vs. Minor Records

➜ What If a Medical Record Is Subject to Litigation or Another Legal Hold?

A standard retention schedule should never be treated as permission to destroy a record when another legal obligation requires preservation.

If a record is involved in litigation, investigation, subpoena, audit, complaint, or another preservation obligation, the practice should review the situation before destruction.

A practical internal status could be:

Normal retention: Retain according to applicable schedule

Retention exception: Do not destroy until the exception is resolved

For example:

Retention date reached → Legal review → Exception identified → Do Not Destroy

The practice should coordinate with appropriate legal or compliance personnel when a legal hold or other preservation requirement applies.

➜ Electronic Health Record Retention Requirements in Virginia

Electronic Health Records have made medical-record management easier in many ways, but they also create additional responsibilities.

Moving from paper files to an EHR does not eliminate the underlying record-retention obligation.

A Virginia practice should consider:

• • EHR accessibility

• • Accurate electronic records

• • Scanned documents

• • Uploaded attachments

• • Diagnostic reports

• • Medication information

• • Patient communications that form part of the record

• • Appropriate access controls

• • Backup and disaster recovery

• • Data migration

• • EHR vendor changes

• • Secure record destruction

Does electronic format change the retention period?

Generally, the fact that a record is electronic does not by itself eliminate the applicable retention requirement.

The practice should be able to identify and retrieve records during the required retention period.

What happens when an EHR vendor is replaced?

Before changing EHR systems, create a written migration and retention plan.

Identify:

• • Active patient records

• • Inactive records

• • Records still subject to retention

• • Records subject to a preservation hold

• • Historical attachments

• • Scanned documents

• • Required metadata

• • Audit information

• • Access requirements

• • Backup information

Do not assume that ending an EHR subscription automatically satisfies the practice’s record-management obligations.

What Medical Information Should Be Included in the Retention Schedule?

Suggested image placement:
Organized electronic patient chart showing clinical notes, lab results, medications, imaging, and documents.

The objective of a medical record retention program is not simply to keep a folder somewhere. The practice should understand what patient information forms part of the record and where that information is stored.

Clinical Documentation

Depending on the provider and type of care, the retention inventory may include:

• • History and physical examination

• • Chief complaint

• • History of present illness

• • Review of systems

• • Examination findings

• • Initial evaluations

• • Follow-up evaluations

• • Progress notes

• • Treatment notes

• • Medication management documentation

• • Provider orders

• • Active diagnoses

• • Clinical decision-making documentation

• • Patient instructions

• • Care coordination documentation

Diagnostic and Ancillary Information

A retention schedule may also identify:

• • Laboratory reports

• • Diagnostic test results

• • Pathology reports

• • Microbiology results

• • Radiology reports

• • Imaging information

• • Cardiology testing

• • Other diagnostic reports incorporated into the patient record

Orders, Medications, and Clinical Data

A complete retention inventory may include:

• • Medication orders

• • Prescription records

• • Refill documentation

• • Referral orders

• • Consultation requests

• • Procedure orders

• • Diagnostic orders

• • Results

• • Changes to treatment plans

• • Clinical communications

• • Relevant patient-provider messages

Patient Identification and Supporting Information

Depending on the record and applicable requirements:

• • Patient demographic information

• • Emergency contact information

• • Insurance information

• • Consent forms

• • Treatment authorizations

• • Release-of-information documentation

• • Advance directives

• • Referral documents

• • Outside medical records

• • Consultant reports

• • Discharge information

• • Follow-up instructions

Electronic and Scanned Documents

Electronic patient records may include:

• • Scanned paper charts

• • PDF documents

• • Imported medical records

• • Laboratory reports

• • Consultation reports

• • Scanned consent forms

• • Clinical photographs

• • Patient-uploaded documents

• • EHR attachments

• • Documents received through health information exchange systems

Practices should know where these records are stored and ensure that important attachments do not disappear during an EHR migration or software change.

EHR Metadata and Audit Information

A practice may also need to identify important metadata associated with electronic records, such as:

• • Date and time of document creation

• • Encounter date

• • Author or signing clinician

• • Document version

• • Amendment history

• • Signature status

• • Import date

• • Document modification history

• • Applicable audit-trail information

The goal is to preserve enough information to understand the record and maintain its integrity.

What Should Be Included in a Medical Record Retention Policy for a Virginia Healthcare Practice?

Suggested image placement:
Medical billing or compliance professional reviewing a Virginia healthcare record retention checklist.

A strong Virginia medical record retention policy should explain more than simply “keep records for six years.”

The policy should address:

• • Type of patient record

• • Patient age

• • Last patient encounter

• • Applicable Virginia requirement

• • Federal requirements

• • Contractual requirements

• • Record transfer

• • Patient access

• • EHR management

• • Destruction procedures

• • Exceptions to ordinary retention

• • Documentation of destruction

Virginia’s Board of Medicine regulation requires practitioners to inform patients concerning the timeframe for record retention and destruction. It also requires destruction methods that protect patient confidentiality, including methods such as shredding or incineration.

Step 1: Determine Who Is Responsible for Maintaining the Patient Record

First, identify the actual record custodian.

Document whether the record is maintained by:

• • Individual practitioner

• • Physician practice

• • Group practice

• • Healthcare organization

• • Hospital or healthcare institution

• • Clinic

• • Other responsible entity

• • Authorized records custodian

Do not assume that the EHR software company is automatically the legal custodian of the medical record. The practice should understand its contractual and legal responsibilities for the data stored within the system.

Step 2: Classify the Type of Health Record

Do not place every patient record into one category.

The retention policy should distinguish between:

• • Adult patient records

• • Minor patient records

• • Records already transferred

• • Records provided to patients or representatives

• • Records subject to federal requirements

• • Records subject to contractual requirements

• • Records under a legal or preservation hold

• • Other specially regulated records

This classification helps prevent a practice from applying the adult six-year rule incorrectly to a minor’s record or to a record subject to a longer requirement.

Step 3: Identify the Correct Retention Date

For each record, determine the applicable trigger.

Depending on the requirement, this could involve:

• • Last patient encounter

• • Date of transfer

• • Date records were provided to the patient

• • Date of record creation

• • Patient’s age

• • Contractual retention period

• • Federal retention requirement

For the general Virginia practitioner rule, the key trigger is the last patient encounter.

Step 4: Identify the Relevant Virginia Authority

A retention matrix should identify the legal or contractual authority behind each retention category.

For example, the practice may review:

• • Code of Virginia

• • Virginia Administrative Code

• • Virginia Board of Medicine regulations

• • Applicable federal laws

• • Payer contracts

• • Healthcare organization policies

• • Other applicable contractual requirements

For practitioners covered by the Board of Medicine rules, 18VAC85-20-26 is an important source for patient-record management and retention. Virginia Code §54.1-2910.4 is also directly relevant to health-record retention for practitioners licensed under that chapter.

Step 5: Establish Exception Rules

Before destroying any medical record, check whether an exception applies.

Review for:

• • Pending litigation

• • Legal hold

• • Government investigation

• • Regulatory review

• • Payer audit

• • Malpractice matter

• • Subpoena

• • Records request

• • Patient dispute

• • Federal retention requirement

• • Contractual retention requirement

• • Ongoing treatment

• • Special statutory requirement

If an exception exists, the record should be placed into an appropriate “retain—exception applies” status rather than being marked eligible for destruction.

Step 6: Determine When the Record Can Be Destroyed

A useful retention matrix can follow this format:

Record Type → Trigger Date → Required Retention Period → Governing Authority → Exception Review → Eligible Disposition Date

This provides a consistent process for determining whether a record is eligible for destruction.

Step 7: Confirm the Record Before Disposal

Before deleting an electronic record or destroying a paper chart, verify:

Identify record → Verify record type → Verify last encounter → Verify retention rule → Check exceptions → Approve disposition → Destroy securely

The practice should also check that associated documents, attachments, reports, scans, and other required components have been properly addressed.

Step 8: Document Destruction

A medical-record destruction log can help demonstrate that the practice followed its retention policy.

The log may include:

• • Patient or record ID

• • Record type

• • Date of birth when relevant

• • Last patient encounter

• • Retention trigger

• • Applicable authority

• • Required retention period

• • Calculated disposition date

• • Exception/legal-hold status

• • Approval

• • Actual destruction date

• • Destruction method

• • Third-party destruction vendor, if applicable

• • Certificate of destruction, when available

The objective is to create an organized and accountable record-management process.

A Virginia healthcare practice should be able to answer three basic questions for a particular record:

1. 1. What triggered the retention period?

1. 1. How long was the record required to be retained?

1. 1. Was the record eligible for secure destruction?

Common Virginia Medical Record Retention Errors

Healthcare practices can run into problems when their retention policies are too general or are not updated for current requirements.

Common mistakes include:

• • Assuming every record follows exactly the same retention rule

• • Applying the adult six-year period incorrectly to minor records

• • Calculating from the chart-creation date instead of the applicable trigger

• • Ignoring federal retention requirements

• • Ignoring contractual retention requirements

• • Failing to document transfers of records

• • Losing records during EHR migration

• • Deleting attachments or scanned documents

• • Failing to maintain patient-access procedures

• • Destroying records without a documented process

• • Failing to protect confidentiality during destruction

• • Not maintaining a written retention policy

• • Failing to document what was destroyed

• • Failing to review exceptions before destruction

• • Treating the EHR vendor as the record custodian without reviewing the actual arrangement

• • Applying one retention procedure to every type of healthcare organization

Suggested image placement:
Virginia medical-record compliance checklist infographic.

Virginia Medical Record Retention Compliance Checklist

Before destroying a patient medical record, ask:

☐ Who is responsible for maintaining the record?

☐ What type of record is it?

☐ When was the patient’s last encounter?

☐ Is the patient an adult or minor?

☐ Has the minimum applicable retention period expired?

☐ Does a federal law require longer retention?

☐ Does a contract require longer retention?

☐ Has the record already been transferred to another provider?

☐ Has the record been provided to the patient or personal representative?

☐ Is there pending litigation or another preservation obligation?

☐ Has the record been reviewed and approved for destruction?

☐ Will the destruction method protect patient confidentiality?

☐ Has the destruction been documented?

Frequently Asked Questions About Virginia Medical Record Retention

How long do doctors have to keep medical records in Virginia?

For practitioners covered by the applicable Virginia requirements, the general minimum is six years following the last patient encounter. Certain exceptions can require a different or longer period.

How long are minor medical records kept in Virginia?

Records of a minor child, including immunizations, must generally be maintained until the child reaches 18 years of age or becomes emancipated, with a minimum retention period of six years from the last patient encounter regardless of the child’s age.

Does Virginia have a maximum retention period?

For practitioners covered by Virginia Code §54.1-2910.4, the statute generally says health records need not be maintained longer than 12 years from the date of creation, subject to exceptions for minor records and records that federal law or contractual obligations require to be retained longer.

Can medical records be destroyed after six years?

Not automatically. Six years is the general minimum for applicable practitioners, but the practice should first check whether an exception applies, including minor-patient requirements, federal law, contractual requirements, or whether the record has been transferred or provided as addressed by Virginia law.

How should old medical records be destroyed?

Virginia’s Board of Medicine regulation requires destruction in a manner that protects patient confidentiality, giving examples such as incineration or shredding.

Does an EHR change the retention requirement?

The fact that a record is stored electronically does not by itself eliminate the applicable retention responsibility. Practices should maintain appropriate access, security, integrity, and retrieval procedures for required records.

Final Thoughts: Build a Virginia-Specific Record Retention Process

Medical record retention is an important part of healthcare compliance in Virginia. A practice should not rely on a simple statement such as “keep every record for six years.”

Instead, a reliable process should identify:

Patient → Record Type → Last Encounter → Applicable Virginia Rule → Exceptions → Retention Period → Review → Secure Disposition

For most practitioners covered by the applicable Virginia rules, six years following the last patient encounter is the basic minimum. However, minor records, transferred records, federal requirements, contractual requirements, and other applicable obligations can change how a specific record should be handled.

For healthcare organizations, maintaining an organized retention policy can make record management easier, support continuity of care, protect patient confidentiality, and reduce the risk of accidental destruction.

hillcrestmedicalbilling can also use this type of Virginia-focused compliance content to educate healthcare providers about medical billing, credentialing, documentation, and practice-management responsibilities.