What is the HIPAA privacy rule requirement for the retention of health records?
A) HIPAA does not include requirements.
B) Records must be kept for at least 10 years.
C) For at least the period of the statute of limitations for medical malpractice claims
D) Until the minor reaches the age of majority plus the statute of limitations

Question

Quizplus · Accepted Answer

The HIPAA privacy rule does not include requirements for the retention of health records. However, the privacy rule does require that appropriate administrative, technical, and physical safeguards be applied so that the privacy of health records is maintained. The records of any patient covered by Medicare or Medicaid must be kept at least 10 years. In all cases, health records should be kept for at least the period of the statute of limitations for medical malpractice claims, which may be 3 years or longer, depending on state law.

What Is the HIPAA Privacy Rule Requirement for the Retention