Alaska Medical Records Retention Laws (2026 Guide)

Overview of Alaska Medical Records Retention Laws

Last verified: March 2026. This page reflects current Alaska Statutes Title 18, Chapter 20, Section 085 and related state and federal regulations.

Table of Contents

• Overview of Alaska Medical Records Retention Laws
• Hospital Records Retention Under AS 18.20.085
• Retention Rules for Minors
• X-Ray and Imaging Records
• Federal Requirements That Apply in Alaska
• HIPAA and Alaska Medical Records
• Patient Access Rights Under AS 18.23.005
• Proper Destruction of Medical Records
• Practice Closure and Record Transfer
• Statute of Limitations Considerations
• Frequently Asked Questions
• Sources and References

Alaska law establishes specific rules for how long hospitals and healthcare facilities must keep patient medical records. The primary statute governing this area is Alaska Statute 18.20.085, which sets a baseline retention period of seven years following patient discharge.

These rules protect patients by making sure their health information remains available for ongoing care, legal proceedings, and insurance purposes. They also protect healthcare providers by giving them clear guidance on their recordkeeping obligations.

Understanding these retention laws matters whether you are a healthcare provider managing compliance, a patient trying to access your own records, or an administrator overseeing records storage and destruction.

Hospital Records Retention Under AS 18.20.085

Alaska Statute 18.20.085 is the cornerstone of medical records retention law in the state. The statute requires that, unless the Alaska Department of Health specifies otherwise, a hospital must retain and preserve records that relate directly to the care and treatment of a patient for a period of seven years following the discharge of the patient.

This seven-year period begins on the date of discharge, not the date of the last entry in the medical record. The requirement applies to all records that relate directly to patient care and treatment, including:

• Admission and discharge summaries
• Physician orders and progress notes
• Nursing notes and assessments
• Laboratory and diagnostic test results
• Medication administration records
• Surgical and procedural reports
• Consultation reports
• Consent forms

The statute grants the Alaska Department of Health the authority to modify these requirements. If the department issues specific regulations that differ from the seven-year baseline, those regulations take precedence.

Retention Rules for Minors

Alaska law provides extended protection for the medical records of younger patients. Under AS 18.20.085, the records of a patient under 19 years of age must be kept until at least two years after the patient reaches age 19, or until seven years following discharge, whichever period is longer.

This provision ensures that minors have access to their complete medical history after they reach adulthood.

Here is how the calculation works in practice:

• A child discharged at age 5 would have records retained until age 21 (two years past age 19), because that is longer than the standard seven-year window (which would end at age 12).
• A teenager discharged at age 17 would have records retained until age 24 (seven years post-discharge), because that is longer than the two-years-past-19 window (which would end at age 21).
• A patient discharged at age 13 would have records retained until age 21 (two years past age 19), since that deadline falls later than seven years after discharge (age 20).

The key principle is always to apply whichever calculation produces the longer retention period. Healthcare facilities should build these calculations into their records management systems to avoid premature destruction of pediatric records.

X-Ray and Imaging Records

Alaska law treats diagnostic imaging records differently from other medical records. Under AS 18.20.085, records consisting of X-ray film must be retained for a minimum of five years.

This shorter retention period reflects the physical storage challenges that X-ray films present, particularly their size and the specialized conditions required for proper preservation.

It is important to note that while original X-ray films may be disposed of after five years, any written reports or interpretations of those images that are part of the patient medical record are still subject to the standard seven-year retention requirement.

Modern digital imaging systems, including those using the DICOM standard, have reduced the storage burden significantly. Many Alaska hospitals now retain digital images for the full seven-year period alongside other medical records, even though the statute only requires five years for X-ray film specifically.

Federal Requirements That Apply in Alaska

Alaska healthcare providers must comply with federal records retention requirements in addition to state law. Several federal rules create overlapping obligations.

CMS Conditions of Participation

Hospitals that participate in Medicare must follow the Conditions of Participation outlined in 42 CFR 482.24. This regulation requires hospitals to maintain medical records in their original or legally reproduced form for a period of at least five years.

Since Alaska state law requires seven years of retention, the state requirement is more restrictive and takes precedence in practice. Alaska hospitals already exceed the federal minimum by complying with state law.

Medicare Documentation Requirements

For providers who bill Medicare, CMS requires that medical records supporting claims be retained for seven years from the date of service. This aligns with Alaska state law, but providers should note that the Medicare requirement is measured from the date of service rather than the date of discharge.

For patients with extended hospital stays, the Medicare and state retention periods could end at different times. Providers should always retain records for whichever period ends later.

False Claims Act Considerations

The federal False Claims Act has a statute of limitations of up to 10 years for certain fraud claims. Healthcare organizations that participate in federal programs should consider retaining billing-related documentation beyond the minimum state requirement to protect against potential audits or investigations.

HIPAA and Alaska Medical Records

A common misconception is that HIPAA establishes a minimum retention period for medical records. It does not. The U.S. Department of Health and Human Services has confirmed that the HIPAA Privacy Rule does not include medical record retention requirements. State laws govern how long medical records must be retained.

However, HIPAA does impose two important requirements that affect Alaska healthcare providers:

HIPAA Administrative Documentation

Under 45 CFR 164.530, covered entities must retain HIPAA compliance documentation for six years from the date of creation or the date it was last in effect, whichever is later. This includes privacy policies, notices of privacy practices, complaint records, and related documentation. This is separate from the medical records themselves.

HIPAA Security During Retention

HIPAA requires covered entities to implement administrative, technical, and physical safeguards to protect the privacy of protected health information (PHI) for as long as the information is maintained. This means Alaska providers must keep medical records secure throughout the entire seven-year retention period and beyond, until the records are properly destroyed.

Patient Access Rights Under AS 18.23.005

Alaska patients have strong rights to access their own medical records. Under Alaska Statute 18.23.005, when a patient submits a written request to examine or copy their medical record, the custodian of that record must, within a reasonable time, either make the record available for examination during regular business hours or provide a copy to the patient.

30-Day Response Requirement

Alaska takes the right to access medical records seriously. Under 12 AAC 40.967, the Alaska State Medical Board defines it as unprofessional conduct for a physician to fail to provide copies of complete patient records within 30 days of receiving a written request from the patient or their guardian.

This means physicians who delay or refuse records requests can face disciplinary action from the Medical Board, including potential sanctions against their medical license.

Limited Exceptions

There is a narrow exception to the patient access rule. If a provider determines, in their professional judgment, that disclosure would be injurious to the mental or physical health of the patient, the provider may withhold specific information. However, even in this situation, the provider must disclose the information to another provider designated by the patient upon written request.

Right to Request Amendments

Under Alaska law, a patient or their treating provider may request that a facility amend identifying health information in a medical record. The custodian of the record must either make the amendment or provide a written explanation of why the amendment was refused.

Proper Destruction of Medical Records

Once the retention period has expired, healthcare providers may destroy medical records. However, both state and federal rules govern how that destruction must happen.

HIPAA Destruction Requirements

The HHS Office for Civil Rights requires that covered entities implement reasonable safeguards when disposing of protected health information. Acceptable methods include:

For paper records:

• Cross-cut shredding
• Burning
• Pulping or pulverizing
• Any method that renders the information unreadable and impossible to reconstruct

For electronic records:

• Clearing (overwriting with non-sensitive data using certified software)
• Purging (degaussing or exposing media to a strong magnetic field)
• Physical destruction (disintegration, pulverization, melting, incinerating, or shredding of the media)

Documentation of Destruction

Providers should maintain a destruction log that records what was destroyed, the date of destruction, the method used, and the name of the person who performed or supervised the destruction. While Alaska does not have a specific statute requiring a destruction log, maintaining one is a widely recommended best practice that protects providers in the event of an audit or legal dispute.

Third-Party Destruction Services

If a healthcare organization uses a third-party vendor for records destruction, HIPAA requires a Business Associate Agreement (BAA) with that vendor. The vendor must comply with all applicable HIPAA safeguards, and the provider should obtain a certificate of destruction as documentation.

Practice Closure and Record Transfer

When a physician retires, dies, or closes a practice in Alaska, specific rules govern what happens to patient records.

Medical Board Notification

The Alaska State Medical Board requires that within 30 days of retiring or closing a practice, a licensee must notify the board of the location of patient medical records. This notification can be submitted by email to the board.

Patient Notification

When a physician retires or a practice closes, patients must be notified and encouraged to find a new provider. Patients should also be informed that, upon their authorization, records will be transferred to their new provider.

Best practices for patient notification include:

• Sending written notice to all active patients well in advance of the closure date
• Publishing a notice in local newspapers
• Posting a notice at the practice location
• Including in the notice: the closure date, how to request records, where records will be stored, how long records will remain accessible, and contact information for future requests

Continued Retention Obligations

Closing a practice does not eliminate the obligation to retain records for the full statutory period. If a physician retires and has patient records from the previous three years, those records must still be maintained for the remaining duration of the seven-year retention period. The physician may transfer custody to another provider, a medical records custodian service, or a secure storage facility.

Statute of Limitations Considerations

Healthcare providers should consider Alaska's medical malpractice statute of limitations when deciding how long to retain records beyond the minimum required period.

Under AS 09.10.070, the statute of limitations for medical malpractice claims in Alaska is two years from the date the claim accrues. A claim accrues when the patient discovers, or reasonably should have discovered, the injury.

Alaska also has a statute of repose under AS 09.10.055(a)(2), which provides an absolute outer limit of 10 years from the date the malpractice occurred. This applies regardless of when the injury was discovered.

For minors, the statute of limitations does not begin to run until two years plus one day after the minor's eighteenth birthday.

Because medical records are often the primary evidence in malpractice litigation, many healthcare attorneys recommend retaining records for at least 10 years to align with the statute of repose. This provides protection even in cases where the discovery rule delays the start of the limitations period.

Frequently Asked Questions

Sources and References

• Alaska Statute 18.20.085 - Hospital Records Retention
• Alaska Statute 18.23.005 - Patient Access to Records
• 12 AAC 40.967 - Unprofessional Conduct (Alaska Medical Board)
• 42 CFR 482.24 - CMS Conditions of Participation: Medical Record Services
• 45 CFR 164.530 - HIPAA Administrative Requirements
• HHS FAQ: Does HIPAA Require Record Retention?
• HHS FAQ: HIPAA Disposal Requirements
• CMS Medical Record Maintenance and Access Requirements
• Alaska State Medical Board - Practice Closure Guidelines
• Alaska Statute 09.10.070 - Statute of Limitations