When a doctor retires, your medical records don’t vanish with the practice. They transfer to a new custodian, typically the physician or group that took over the practice, a colleague who agreed to hold them, a hospital, or a commercial medical records storage company. Your right to access those records under HIPAA follows them to whoever now holds the file, and you can request copies the same way you would from any provider.
Where Your Records Actually Go
The most common outcome is the simplest one. A retiring doctor sells or merges the practice, and the buyer inherits the records along with the rest of the business. That successor practice becomes the custodian and handles storage, security, and patient requests. If you received a letter naming the new practice, your file is almost certainly already there.
A solo practitioner who closes without selling is expected to line up a custodian before shutting the doors. That custodian is often a colleague, a local hospital willing to absorb the files, or a commercial storage company that specializes in medical records. Commercial custodians store the files, respond to patient requests, and eventually destroy them once the applicable retention period expires.
State medical practice acts set the rules for these arrangements: how records must be stored, who can hold them, and how patients get access. The specifics vary by state, but the underlying obligation is consistent. Someone has to be responsible, and patients have to be able to reach them.
The Notice You Should Have Received
Retiring physicians are generally expected to notify active patients well before closing day. The standard practice is written notice to patients seen in the prior one to two years, sent 60 to 90 days before the retirement date. A good notice tells you the retirement date, names the new records custodian with contact information, explains how to transfer care, and describes how to request a personal copy of your file.
Many practices also post notices in the office, update the website, and in some states, publish an announcement in a local newspaper. If you moved without updating your address, you may have missed the letter entirely. Patient portals eventually go dark after a practice closes, so if you still have access to one, download what’s there now rather than later.
How to Find the Custodian if You Missed the Notice
Start with any communication you did receive. If nothing turns up, try the old office number, which often forwards to the successor practice for a period after the transition. Check the retiring doctor’s website if it’s still live. If those fail, call your state medical board; boards often have records of custodial arrangements or can point you toward whoever holds the files.
Your health insurance company is another useful lead. Claims data will show which entity took over billing, and that’s usually the same entity holding the records.
How to Request Your Records
Once you know who has your file, submit a written request. Most custodians use a standard authorization form asking for your name, date of birth, approximate dates of treatment, and the records you want. The custodian will verify your identity before releasing anything. HIPAA requires only “reasonable steps” for verification, so the process ranges from confirming details on a form to showing government-issued ID in person.
You can choose the format. If the records exist electronically and you want an electronic copy, the custodian must provide one. If they’re on paper but can reasonably be scanned, an electronic request should be honored. The custodian can’t hand you paper just because that’s easier for them.
Federal law gives the custodian 30 calendar days from receiving your request to provide access. If records are archived offsite or hard to retrieve, the custodian may extend by up to another 30 days, but only if they notify you in writing within the initial 30-day window with a reason and a new target date. One extension per request, no more.
What Copies Cost
HIPAA lets custodians charge a reasonable, cost-based fee for copies. The fee can cover labor for copying, supplies such as paper or portable media, and postage if you want records mailed. It cannot include searching, retrieving, verifying your identity, or maintaining storage systems, even where state law would otherwise allow those charges.
Custodians that don’t want to calculate actual costs for electronic copies can charge a flat fee of up to $6.50 per request. That flat-fee option applies specifically to electronic copies of records that are already maintained electronically. Some states set their own fee schedules for paper copies, with per-page charges commonly falling between $0.25 and $2.00, sometimes with higher rates for the first batch of pages. Certified copies for legal proceedings cost extra. If your state gives you greater access rights than HIPAA, such as requiring one free copy, the state rule controls.
How Long the Records Will Still Exist
There’s no federal standard for how long a medical chart must be kept. HIPAA requires covered entities to retain certain administrative documents for six years, but retention of your actual chart is governed almost entirely by state law.
For adult patients, state retention periods range from roughly 5 to 10 years after the last date of treatment, with most states in the 7-to-10-year range. Hospital and physician-office records sometimes have different requirements within the same state. Records for minor patients get longer protection: most states require retention until the child reaches the age of majority (18 in most states) plus an additional three to six years.
Mental health records and psychotherapy notes are a separate category. HIPAA gives psychotherapy notes stronger privacy protections, and some states impose different retention or access rules for mental health files, so access may not follow the pattern of your general chart.
The practical takeaway: if your doctor retired years ago, check the retention window in your state before assuming the records are still available.
If the Doctor Died or Abandoned the Practice
A planned retirement with proper notice is the best case. When a physician dies unexpectedly or walks away without arrangements, custody gets messier. In a group practice, the group handles the records. For a solo practitioner who dies, the executor or administrator of the estate typically becomes the custodian by default and is responsible for arranging storage or transfer.
HIPAA privacy protections on a deceased patient’s health information last for 50 years after the patient’s death, and the personal representative retains the right to access and authorize disclosures during that period.
When a physician abandons a practice without arrangements, state medical boards sometimes step in. Many have statutory authority to appoint a custodian for abandoned records, though most are reluctant to use it except in extreme cases. Local medical societies or hospitals occasionally volunteer to secure the files. Contacting your state medical board is the right starting point.
If the Practice Went Bankrupt
Bankruptcy triggers a specific federal process, and it’s one where speed matters. If the trustee overseeing the case lacks funds to store records as legally required, the trustee must publish a newspaper notice and attempt to contact each patient directly, warning that unclaimed records will be destroyed after 365 days. Patients and their insurers have that year to claim their files.
If records remain unclaimed after 365 days, the trustee must first try to deposit them with an appropriate federal agency. Only if that request is denied can the trustee destroy the records. If you learn a former doctor’s practice has filed for bankruptcy, request your records immediately rather than assuming someone will preserve them.
Privacy Protections Follow the File
Records don’t lose HIPAA protection because the original doctor stopped practicing. The Privacy Rule applies to every entity that handles your protected health information, including successor practices and commercial storage companies. The new custodian follows the same rules your original doctor did, and your core rights, including access, amendment, and an accounting of disclosures, remain intact.
If You Can’t Find the Records at All
Sometimes records genuinely fall through the cracks: no notice went out, the storage company closed, or nobody can identify the custodian. Escalation options:
- Call your state medical board first. Boards often have information about closed practices and can sometimes appoint a custodian for abandoned records.
- Contact other providers you saw. Specialists, hospitals, labs, and pharmacies may hold copies of key records, referral letters, or test results that partially reconstruct your history.
- Ask your health insurer. Claims data includes diagnosis codes, procedures, and prescribing information. It isn’t a chart, but it’s something.
- File a federal complaint if a custodian exists but refuses access. The U.S. Department of Health and Human Services Office for Civil Rights enforces HIPAA and accepts complaints online, by email at OCRMail@hhs.gov, or by phone at 1-800-368-1019.
The best protection is not waiting until you need the records. Request a complete copy of your chart from every provider while the practice is still open, and keep it yourself, whether on paper or downloaded from a patient portal. A retirement, death, bankruptcy, or abandoned practice then becomes an inconvenience rather than a crisis.