Virginia Law

A. Practitioners shall comply with the provisions of § 32.1-127.1:03 of the Code of Virginia related to the confidentiality and disclosure of patient records.

B. Practitioners shall provide patient records to another practitioner or to the patient or his personal representative in a timely manner and in accordance with provisions of § 32.1-127.1:03 of the Code of Virginia.

C. Practitioners shall properly manage and keep timely, accurate, legible and complete patient records.

D. Practitioners who are employed by a health care institution, school system or other entity in which the individual practitioner does not own or maintain his own records shall maintain patient records in accordance with the policies and procedures of the employing entity.

E. Practitioners who are self-employed or employed by an entity in which the individual practitioner does own and is responsible for patient records shall:

1. Maintain a patient record for a minimum of six years following the last patient encounter with the following exceptions:

a. Records of a minor child, including immunizations, shall be maintained until the child reaches the age of 18 or becomes emancipated, with a minimum time for record retention of six years from the last patient encounter regardless of the age of the child;

b. Records that have previously been transferred to another practitioner or health care provider or provided to the patient or his personal representative; or

c. Records that are required by contractual obligation or federal law may need to be maintained for a longer period of time.

2. From October 19, 2005, post information or in some manner inform all patients concerning the time frame for record retention and destruction. Patient records shall only be destroyed in a manner that protects patient confidentiality, such as by incineration or shredding.

F. When a practitioner is closing, selling or relocating his practice, he shall meet the requirements of § 54.1-2405 of the Code of Virginia for giving notice that copies of records can be sent to any like-regulated provider of the patient's choice or provided to the patient.