How Long Do Dentists Keep Records: State, Federal, and HIPAA Rules

How long do dentists keep records depends almost entirely on the state where you were treated. Across the country, state dental boards set minimums that run roughly from five to ten years after your last visit, with longer periods when the patient is a minor and separate federal rules that can extend the clock further for practices that bill Medicare or Medicaid. There is no single national retention period.

State Minimums for Adult Records

Every state dental board publishes its own retention floor, and the range nationwide is roughly five to eleven years measured from the date of your last examination or treatment. Some states sit at the shorter end. Others push toward a decade or more. The only reliable way to pin down the rule that governs your file is to check with the dental board in the state where you were treated.

These numbers are minimums, not caps. Plenty of dentists hold records well beyond the required period, particularly for active patients or when a malpractice carrier recommends longer retention. A record that still exists is easier to work with than one that was lawfully destroyed, so many practices keep files longer than the law demands.

Longer Retention for Children’s Records

Pediatric records follow a different clock. In most states, the retention countdown does not start until the child reaches the age of majority. That age is 18 in most states, 19 in a couple, and 21 in Mississippi and the District of Columbia. Once the patient hits that age, the ordinary adult retention period begins to run.

The practical effect is significant. A child treated at age eight in a state with a seven-year adult retention period and an age of majority of 18 would have records preserved until roughly age 25. The reasoning is that minors cannot make their own legal decisions about care, and dental problems from childhood can surface many years later.

Federal Rules That Can Extend the Clock

Federal law does not set a retention period for your clinical chart, but two federal regimes still affect how long dental offices hold onto paperwork.

HIPAA Administrative Records

HIPAA protects your health information and guarantees your right to access it. It does not tell your dentist how long to keep your X-rays. Where HIPAA imposes a retention requirement, it targets the practice’s own compliance paperwork. Under 45 CFR 164.530, a dental office must keep HIPAA-related documentation, such as privacy policies, patient acknowledgment forms, and internal procedures, for at least six years from the date the document was created or last in effect, whichever is later.1eCFR. 45 CFR 164.530 – Administrative Requirements That six-year clock covers administrative records, not your clinical file, which remains subject to the state’s longer period.

Medicare and Medicaid Providers

Practices that participate in federal programs face separate retention rules. Under 42 CFR 422.504, Medicare Advantage organizations must maintain books, records, and documents for ten years.2eCFR. 42 CFR 422.504 – Contract Provisions Providers who submit cost reports to CMS must keep patient records for at least five years after the cost report closes.3CMS. Medical Record Retention and Media Format for Medical Records If your dentist accepts a government insurance program, the federal floor may exceed the state requirement.

Why the Retention Window Matters to You

The practical reason these rules exist has less to do with regulatory compliance and more to do with malpractice. Dental malpractice claims can be filed years after treatment, and in many states the statute of limitations does not start running until the patient discovers, or reasonably should have discovered, the problem. If you suspect you received substandard care, the dental record is your primary evidence. Knowing how long your state requires those records to exist tells you the realistic window you have to act.

How to Request Your Records

Under HIPAA, you have a legal right to inspect and obtain a copy of your dental records. The physical chart belongs to the practice, but the information in it is yours to access.4U.S. Department of Health & Human Services (HHS). Individuals’ Right under HIPAA to Access their Health Information

The Timeline

Call the dental office and ask about its records request procedure. Most practices will have you fill out a written authorization form. Once the office receives your request, HIPAA gives it 30 calendar days to respond, either by providing the records or by issuing a written denial with an explanation. The office can take one 30-day extension, but only if it notifies you in writing during the first 30 days, explains the delay, and gives you a specific date by which it will respond.5eCFR. 45 CFR 164.524 – Access of Individuals to Protected Health Information An office that goes past 60 days without delivering your records is in violation of federal law.

What You Can Be Charged

The office can charge a reasonable, cost-based fee for copying. Under HIPAA, that fee may cover only the labor of copying, supplies like paper or a USB drive, and postage if you want the records mailed. It cannot include search fees or general overhead.4U.S. Department of Health & Human Services (HHS). Individuals’ Right under HIPAA to Access their Health Information Many states also cap per-page fees, commonly between $0.25 and $1.50 per page, though the rules vary and some states allow additional charges for X-ray duplication.

Unpaid Bills Cannot Block Access

A dental office cannot refuse to release your records because you owe money for past treatment. HIPAA is explicit that the right of access exists independently of any outstanding balance.4U.S. Department of Health & Human Services (HHS). Individuals’ Right under HIPAA to Access their Health Information The practice can charge the reasonable copying fee, but it cannot hold records hostage over a disputed bill.

Getting Records from a Closed Practice

Records rarely disappear when a practice closes, though they can be harder to track down. If the dentist retired or sold the practice, the buyer typically takes custody of patient charts and is responsible for maintaining them for the remainder of the retention period. Contact the new practice first.

When a practice shuts down without a successor, whether due to death, bankruptcy, or simple closure, records may end up with the executor of the dentist’s estate, an appointed custodian, or a records storage company. Most states require closing dentists to notify patients in advance and arrange for storage or transfer. If you cannot find where your records went, the state dental board is the best starting point. Boards typically track custodians for closed practices.

What Happens When Dentists Don’t Keep Records

Recordkeeping violations are among the more common reasons state dental boards open investigations. Penalties depend on the severity and whether a patient was harmed, and they range from a formal reprimand and mandatory continuing education to license suspension or revocation for repeated or egregious failures. Fines are common and vary by state. A first-time paperwork lapse that caused no harm draws a lighter response than a pattern of missing records that compromised patient care.

Federal penalties apply when a practice violates HIPAA itself, for example by refusing to release records or failing to keep required administrative documentation. The Office for Civil Rights at HHS can impose civil monetary penalties that scale with culpability, from unknowing violations up to willful neglect that goes uncorrected, with an annual cap of $2,190,294 for all violations of a single provision.6Federal Register. Annual Civil Monetary Penalties Inflation Adjustment Even a low-tier fine adds up when each affected patient counts as a separate violation.