Medical Office Assistant · Administrative Procedures and Office Management

Record Retention and Access

On this page 3 sections
  1. Quick check
  2. Study tools
  3. Sources & references

Quick check

5 questions here, of 75 in this lesson’s practice set. Answers stay hidden until you check.

Question 1 of 5foundational

Under the HIPAA Privacy Rule, which statement best describes how long a medical record must be retained?

Choose an answer, then check it.
Question 2 of 5intermediate

The HIPAA Privacy Rule requires that certain documentation, such as signed authorizations and the practice's privacy policies, be retained for at least how long?

Choose an answer, then check it.
Question 3 of 5intermediate

A new medical office assistant asks what determines how long the practice must keep a patient's medical record. What is the most accurate answer?

Choose an answer, then check it.
Question 4 of 5foundational

Why do medical record retention requirements vary from one state to another?

Choose an answer, then check it.
Question 5 of 5advanced

A practice's state requires records be kept for a shorter time than the federal HIPAA six-year documentation rule. What should the practice do?

Choose an answer, then check it.
Practice all 75

Keep learning

Ready to build on this? Continue to the next lesson.

Practice this lesson
Study tools & related lessonsYou’ll learn to · Related

You’ll learn to

  • Describe record retention concepts, distinguishing state record retention laws from the federal HIPAA six-year documentation requirement.
  • Explain a patient's HIPAA rights to inspect, obtain copies of, and request amendments to their own health records.
  • Recognize when a written authorization is required to release protected health information and apply the minimum necessary standard.
  • Apply safe storage and disposal practices for paper and electronic protected health information.
  • Flag state-law and office-policy dependence in retention and release decisions and escalate when in doubt.

Sources & references

  1. U.S. Department of Health and Human Services — Health Information Privacy (HIPAA)
  2. U.S. Department of Health and Human Services — Summary of the HIPAA Privacy Rule
  3. Office of the National Coordinator for Health IT — Privacy, Security, and HIPAA

This lesson was adapted from the open educational references above; their licenses and attributions are preserved. See Copyright & Licensing.

Educational content only. It is not medical, legal or professional advice. Found an error? Tell us.