West Virginia Medical Records Retention Laws (2026 Guide)

West Virginia has no single statute mandating a statewide medical records retention period. Hospitals must keep records for at least five years under W.Va. CSR 64-12-7.2.6, while physicians face a regulatory minimum of three years under 11 CSR 1A, with the West Virginia Board of Medicine recommending 10 years for both.

Overview of West Virginia Medical Records Retention

West Virginia stands out among U.S. states because it lacks a comprehensive statute that sets a specific, mandatory retention period for medical records held by all types of health care providers. Multiple bills have been introduced in the West Virginia Legislature to fill this gap, including HB 4396 in 2008 and SB 363 in 2011, but none have been enacted into law.

This means that West Virginia providers must look to a combination of regulatory board rules, hospital licensure requirements, federal requirements, and professional best practices to determine how long to keep patient records.

The absence of a single, clear retention statute creates a patchwork of obligations. Hospitals, physicians, nursing facilities, and other providers each face different minimum standards depending on the rules that apply to their license type.

The Gap in West Virginia Law

West Virginia Code Chapter 16, Article 29 governs "Health Care Records," but its three sections address only patient access, copying fees, and parental access to minor records. The article contains no provision establishing a retention period.

What Chapter 16, Article 29 Actually Covers

W.Va. Code 16-29-1 requires licensed health care providers to furnish copies of patient records within 30 days of a written request. The statute allows records to be provided in paper or electronic form, including through secure web portals, computer discs, email, or portable memory devices.

W.Va. Code 16-29-2 sets fee limits for copies. Third parties requesting records cannot be charged more than a $20 search and handling fee, 40 cents per page for paper copies, plus postage. Where the provider stores the record electronically, subsection (b)(2) provides that the record is delivered in electronic or digital form unless a paper copy is specifically requested, at no more than 20 cents per page and no more than $150 in total. Providers cannot charge indigent individuals if the records support a Social Security Act claim or appeal.

W.Va. Code 16-29-3 addresses parental access to a minor child's health records, generally prohibiting providers from denying access to a parent, guardian, foster parent, or kinship placement. Exceptions apply when the minor has graduated high school, is emancipated, or is married.

None of these sections tell providers how long they must keep the records.

Failed Legislative Attempts

HB 4396 (2008) would have required custodians to retain adult records for 10 years following the last date of treatment or contact. It also proposed specific rules for minors, disabled persons, and deceased patients. The bill did not pass.

SB 363 (2011) proposed a 7-year retention period for adult records, with similar provisions for minors and disabled patients. This bill also failed to advance.

Until the West Virginia Legislature enacts a general retention statute, providers must rely on the specific rules described below.

Hospital Medical Records Requirements

West Virginia hospitals are subject to the most clearly defined retention rules in the state, found in the hospital licensure regulations.

W.Va. CSR 64-12-7.2.6: Hospital Licensure Rules

Under W.Va. Code of State Rules Series 64-12, which governs hospital licensure, section 7.2.6 requires hospitals to preserve medical records for a minimum of five years in their original form or in a legally reproduced form. This applies to all patient records, including those for patients treated in the emergency room and outpatient departments.

The hospital licensure rules also require hospitals to:

• Maintain a medical records department under the supervision of a qualified person
• Keep a medical record for every individual evaluated or treated, whether inpatient or outpatient
• Use a coding and indexing system that allows retrieval by diagnosis and procedure
• Ensure all entries are legible, authenticated, and dated promptly
• Provide copies to the Office of Health Facility Licensure and Certification within 48 hours of a written request

Short-form medical records may be used for patients hospitalized for less than 48 hours, except for maternity and newborn infant cases.

Physician Medical Records Requirements

WV Board of Medicine Rules

The West Virginia Board of Medicine has authority under 11 CSR 1A to discipline licensees who fail to maintain complete medical records for at least three years after the last date of treatment. This three-year minimum is the enforceable regulatory floor for physicians and other Board licensees.

However, the Board strongly recommends that licensees retain records for at least 10 years after the last entry or last date of service, whichever is longer. This recommendation is based on several practical considerations:

• Medicare and Medicaid may conduct audits up to 10 years after treatment or billing
• The West Virginia medical malpractice statute of repose runs for 10 years under W.Va. Code 55-7B-4
• Insurance audits and legal proceedings may require records well beyond the three-year minimum

The Board advises all licensees to develop and implement a written medical record retention and production policy in consultation with legal counsel.

What Physicians Should Address in Retention Policies

The Board of Medicine recommends that every physician's retention policy cover:

• The categories of documents to be maintained (electronic health records, test results, encounter notes, immunization records, billing records)
• Specific timeframes for retaining each category of document
• Procedures for notifying patients about the retention policy
• How patients can request copies and the associated fees
• Archiving and retrieval processes

Minor Patient Records

West Virginia does not have a statute specifying how long minor patient records must be retained. The failed bills would have required retention for the longer of two years after the minor reaches the age of majority (18) or a set number of years from the last treatment date.

Board of Medicine Guidance

The WV Board of Medicine recommends that records for minor patients, including immunization records, be maintained at least until the statute of limitations passes for all claims that may arise from the care provided.

Statute of Limitations Considerations

Under W.Va. Code 55-7B-4(c), a medical injury claim involving a child under age 10 at the time of injury must be filed within two years of the injury or before the child turns 12, whichever provides the longer period. The 10-year statute of repose in West Virginia medical liability law sits in subsections (a) and (b), not in subsection (c), and each of those subsections applies except as provided in subsection (c). It therefore does not cut short a claim brought under the minor provision.

This means a physician who treats an infant could face a malpractice claim up to 12 years later (the child's 12th birthday). Providers treating minors should retain records at least until the child turns 12 or until 10 years after the last treatment, whichever is later.

Records of Patients with Disabilities

The Board of Medicine recommends retaining records for patients with cognitive or legal disabilities for 20 years to ensure availability if legal disputes arise.

Federal Requirements That Apply in West Virginia

Because West Virginia lacks a comprehensive state retention statute, federal requirements take on greater importance as the practical baseline for many providers.

HIPAA Documentation Requirements

The HIPAA Privacy Rule does not require covered entities to retain patient medical records for any specific period. According to HHS, state laws generally govern how long medical records must be retained.

What HIPAA does require under 45 CFR 164.530(j) is that covered entities retain their privacy policies, procedures, notices, complaint dispositions, and related administrative documentation for six years from the date of creation or the date when the document was last in effect, whichever is later.

This six-year requirement applies to HIPAA compliance documentation, not to patient medical records themselves. However, many providers mistakenly apply the six-year period to patient records. In West Virginia, where there is no general state retention law, using six years as a minimum for patient records would be a reasonable baseline, though the Board of Medicine recommends 10 years.

HIPAA Privacy and Security Protections

Regardless of how long records are retained, HIPAA requires covered entities to apply appropriate administrative, technical, and physical safeguards to protect the privacy of medical records and other protected health information for the entire time the information is maintained, including through the disposal process.

CMS Conditions of Participation

Hospitals participating in Medicare must comply with the Conditions of Participation under 42 CFR 482.24. This regulation requires hospitals to retain medical records in their original or legally reproduced form for a period of at least five years.

The CMS five-year requirement aligns with the West Virginia hospital licensure requirement under W.Va. CSR 64-12-7.2.6, but CMS also requires:

• Medical records to be accurately written, promptly completed, properly filed and retained, and accessible
• Records to contain sufficient information to justify admission, support the diagnosis, and describe the patient's progress
• Final diagnosis to be recorded within 30 days of discharge

Medicare and Medicaid Audit Periods

CMS may audit providers and review medical records up to 10 years after treatment or billing. Providers who destroy records before this window closes risk being unable to defend billing decisions in an audit, which could lead to repayment demands and penalties.

Patient Access to Medical Records

West Virginia law provides clear rights for patients seeking their records, even though retention duration is not defined by statute.

The 30-Day Rule

Under W.Va. Code 16-29-1, health care providers must furnish copies of patient records within 30 days of receiving a written request from the patient, their personal representative (as defined by HIPAA), authorized agent, or authorized representative.

Electronic Format Options

If a provider routinely stores records electronically, patients may request copies in electronic form. Permitted electronic formats include downloadable access through a secure web portal, computer disc, email, or portable memory device.

Fee Limitations

Under W.Va. Code 16-29-2, fees for third-party record requests cannot exceed:

• A $20 search and handling fee
• 40 cents per page for paper copies
• Actual postage costs if mailing is requested
• Applicable taxes

If the provider stores the requested record in electronic form, W.Va. Code 16-29-2(b)(2) provides that the record will be delivered in electronic or digital form unless the requester specifically asks for a paper copy. For those electronic copies the fee cannot exceed 20 cents per page and cannot exceed $150 in total, inclusive of all fees including the search and handling fee, apart from applicable taxes.

The per-page figures are statutory base amounts rather than fixed current ceilings. Under W.Va. Code 16-29-2(e), the per-page copying fee under subsection (b) is adjusted to reflect the consumer price index for medical care services every October 1, beginning October 1, 2017.

Providers may not charge indigent patients if the records are needed to support a Social Security Act claim or appeal. A person qualifies as indigent if they are represented by a pro bono program or verify their financial inability to pay.

Enforcement

A patient who is denied access to records may bring an enforcement action. A provider found to be in violation must pay the patient's attorney fees and court costs.

Destruction of Medical Records

Without a state statute governing destruction, West Virginia providers should follow HIPAA standards and best practices.

HIPAA Destruction Standards

The HHS Office for Civil Rights provides guidance on proper disposal of protected health information:

Paper records must be shredded, burned, pulped, or otherwise rendered unreadable and indecipherable before being discarded.

Electronic records must be cleared, purged, or destroyed through methods such as degaussing, overwriting, or physically destroying the storage media by pulverization, melting, or incinerating.

Covered entities and their business associates must develop and implement policies and procedures to address the disposal of protected health information, including for records maintained by business associates.

Board of Medicine Guidance on Destruction

The WV Board of Medicine advises physicians to destroy discarded records through shredding or incineration to protect patient confidentiality. Providers should document the destruction process, including what was destroyed and when.

Practice Closure Requirements

When a physician or medical practice closes in West Virginia, specific obligations apply to patient records.

Board of Medicine Requirements

According to the WV Board of Medicine, closing practices must:

• Provide written notice to current patients (those seen within the last year or with scheduled appointments) with instructions on how to obtain their records
• Post a closure notice at the office at least 30 days before the final date
• Notify high-risk patients without ongoing care by certified mail or phone
• Place newspaper advertisements at least 30 days before closure in relevant geographic areas
• Post online notices and send emails if the practice uses digital communication

Records Custodian Arrangements

The Board recommends that closing practices enter into an agreement with another local practice to serve as the custodian of unclaimed patient records. This arrangement ensures records remain accessible to patients and subsequent providers after the practice closes.

Regulatory Notifications

Closing practices must also notify:

• The West Virginia Board of Medicine regarding practice ownership changes
• The Centers for Medicare and Medicaid Services (if applicable)
• The U.S. Drug Enforcement Administration (if controlled substances were maintained)
• State Board of Pharmacy Controlled Substance Monitoring Programs
• The practice's professional liability carrier

Physician Assistant Considerations

If a physician assistant was supervised at the practice, the PA must notify the Board when the collaborating physician relationship ends. The PA cannot practice until a new approved practice agreement is in place.

Recommended Retention Periods by Provider Type

Because West Virginia lacks a single comprehensive statute, providers should follow the most protective standard that applies to their practice. The following table summarizes recommended minimum retention periods based on existing rules, federal requirements, and Board guidance.

Frequently Asked Questions

Does West Virginia have a law requiring doctors to keep medical records for a specific number of years?

West Virginia does not have a general statute that sets a mandatory retention period for all health care providers. The WV Board of Medicine can discipline physicians who fail to retain records for at least three years after the last treatment date, but this is a regulatory rule, not a statute. The Board recommends a 10-year retention period. Hospitals are separately required to keep records for at least five years under W.Va. CSR 64-12-7.2.6.

How long should a West Virginia hospital keep patient medical records?

West Virginia hospitals must retain medical records for a minimum of five years in their original or legally reproduced form under W.Va. CSR 64-12-7.2.6. Medicare-participating hospitals face the same five-year minimum under 42 CFR 482.24. However, because CMS may audit records up to 10 years after billing, and the state medical malpractice statute of repose runs for 10 years under W.Va. Code 55-7B-4, a 10-year retention period is widely recommended.

How long must records for minor patients be kept in West Virginia?

West Virginia has no statute specifying a retention period for minor patient records. The WV Board of Medicine recommends keeping them at least until the statute of limitations for all potential claims has expired. Under W.Va. Code 55-7B-4(c), a medical injury claim for a child under age 10 can be filed until two years after the injury or before the child turns 12, whichever is longer. The 10-year statute of repose in W.Va. Code 55-7B-4(a) and (b) does not shorten that period, because both of those subsections apply except as provided in subsection (c). Providers should consult legal counsel to determine the appropriate retention period for each minor patient's records.

Does HIPAA require medical records to be kept for six years?

No. HIPAA does not require covered entities to retain patient medical records for any specific period. The commonly cited six-year requirement under 45 CFR 164.530(j) applies only to HIPAA compliance documentation such as privacy policies, procedures, and complaint records. Patient medical record retention is governed by state law, and in West Virginia, no general state retention statute exists.

What must a West Virginia physician do with patient records when closing a practice?

The WV Board of Medicine requires closing physicians to notify current patients in writing at least 30 days before closure, explaining how to obtain records. The practice should post office notices, place newspaper advertisements, and send email or online notifications when applicable. The Board recommends arranging for another local practice to serve as custodian of unclaimed records. The physician must also notify the Board of Medicine, CMS (if applicable), the DEA (if controlled substances were involved), and the practice's professional liability carrier.