A. Improper management of medical records, including failure to maintain timely, accurate, legible and complete medical records constitutes a violation of 61-6-15 .D(33). Physicians must provide every patient with a written copy of their policy or their employer's policy for medical record retention, maintenance and destruction.
B. Written medical record policy shall include:(1) responsible entity/agent name of contact to obtain records or request transfer of records, telephone number and mailing address;
(2) how the records can be obtained or transferred; (3) how long the records will be maintained before they are destroyed; and (4) cost of obtaining copies of records, and of recovering records/transferring records. C. Electronic medical record policy shall include:(1) responsible entity/agent to obtain records, requests for transfer of records, telephone number and mailing address;
(2) how the records can be obtained or transferred; (3) how long the records will be maintained before they are destroyed or purged;(4) a data backup plan, disaster recovery plan and storage which ensures retrievability into reasonably usable form on a timely basis upon any request; and
(5) transfer of data via electronic file with appropriate safeguards to ensure patient confidentiality.
D. Physicians must retain medical records that they own for at least ten (10) years after the date of last treatment or the time frame set by state or federal insurance laws or by medicare and medicaid regulation. Medical records for patients who are minors must be retained until the date that the patient is twenty-one (21) years old. If a physician converts hard copies of medical records to electronic medical records, the hard copy shall be retained by the physician for a minimum of thirty (30) days after electronic transfer has occurred.
E. Physicians shall retain medical billing information for at least two (2) years after the date of last treatment.
F. The board adopts the ethical standards for medical record retention and maintenance set forth in the latest published version of the "code of medical ethics current opinions with annotations" of the council on ethical and judicial affairs of the American medical association. Physicians have an obligation to retain patient records which may reasonably be of value to a patient. Beyond the time frame established in Subsection D of this section, medical considerations are the primary basis for deciding how long to retain medical records. In deciding whether to keep certain parts of the record, an appropriate criterion is whether a physician would want the information if he or she were seeing the patient for the first time. For example, operative notes, chemotherapy records and immunization records must remain part of the patient's chart.
G. Destruction of medical records must be such that confidentiality is maintained. Records must be destroyed by shredding, incinerating (where permitted) or by other method of permanent destruction, including purging of medical records from a computer hard drive, server hard drive or other computer media or disk in accordance with existing practices for data deletion then available.
H. A log must be kept of all charts destroyed, including the patient's name and date of record destruction in accordance and under the same time frame established in Subsection D of this section.