How Long Must Hipaa Records Be Kept?
How Long Must Hipaa Records Be Kept? Under the HIPAA regulations, covered entities must retain the following, for at least six years, from either the date of creation, or the last “effective date,” whichever date is later: A written or electronic record of a designation of an organization as a covered entity or business associate.