How Long to Retain Mental Health Records (State-by-State Guide)

Why Record Retention Matters for Therapists

Record retention is not just an administrative afterthought. For licensed mental-health clinicians, retention affects continuity of care, risk management, audit readiness, malpractice defense, and compliance with privacy obligations. A complete, well-maintained record can help you demonstrate clinical reasoning, justify medical necessity, support treatment progress, and respond appropriately if a patient later requests records, a payer audits a claim, or a board complaint is filed.

Retention decisions are also tied to the type of record you are keeping. A psychotherapy progress note is not the same as psychotherapy notes under HIPAA, and a billing record is not the same as a treatment plan. If you use a structured format such as SOAP notes guide or BIRP notes, make sure your retention policy covers the entire designated record set, not just one note style.

For working clinicians, the practical question is usually simple: how long do I need to keep this file before I can safely destroy it? The answer depends on jurisdiction, client age, payer contracts, and your professional risk profile. If your practice is moving to a new workflow, it can help to review your broader documentation system alongside progress notes guide so your storage, indexing, and disposal process all align.

Federal Baseline: HIPAA, Psychotherapy Notes, and Payer Rules

HIPAA Privacy Rule requirements are often misunderstood as a record-retention mandate, but HIPAA does not itself create a single universal retention period for all clinical records. Instead, HIPAA establishes privacy, security, access, and accounting obligations. Under HIPAA, covered entities generally must retain required policies and procedures for 6 years from the date of creation or when last in effect, but that is not the same as saying all patient records can be destroyed after 6 years.

Psychotherapy notes deserve special attention. Under HIPAA, psychotherapy notes are kept separate from the rest of the designated record set and receive heightened protection. However, if you store process notes, session content, diagnosis, treatment response, risk assessment, and medical necessity information inside the regular chart, those materials become part of the designated record set and should be retained according to applicable state law and practice policy.

Billing and payer documentation can extend retention expectations as well. Medicare, Medicaid, managed care contracts, and commercial insurers may require retention of records long enough to support submitted claims or audits. Because these requirements vary, verify each payer agreement and keep your policy consistent with the longest applicable requirement. Clinicians who document to support claims using psychotherapy, family therapy, or group therapy codes should be especially careful that the underlying record supports the billed service. For example, if you bill 90834, 90837, 90847, or 90853, your documentation should clearly show the service provided, clinical rationale, duration when relevant, and response to treatment.

The same principle applies to diagnosis coding. Many therapist records will reference DSM-5-TR diagnoses translated into ICD-10-CM codes such as F41.1 for generalized anxiety disorder, F33.1 for major depressive disorder, recurrent, moderate, or F43.10 for post-traumatic stress disorder, unspecified. You do not need to preserve every draft or abandoned assessment, but you do need a clinically coherent record that supports the final diagnosis and treatment course.

State-by-State Retention Considerations

There is no reliable shortcut that applies to every jurisdiction. Many states set a minimum number of years after the last date of service, while others extend retention for minors until a certain number of years after the client reaches adulthood. Some boards specify different rules for psychologists, physicians, social workers, marriage and family therapists, professional counselors, or facilities. Because statutes and board rules can change, always verify with your state licensing board and your malpractice carrier before updating a policy.

The table below is a practical framework, not legal advice. It highlights common retention patterns therapists should investigate in each state. If you practice in a multistate telehealth context, you may need to consider the laws of the state where you are licensed, the state where the client is located, and any facility or payer requirement that is more stringent. For a deeper clinical documentation workflow, many practices pair this policy review with templates from the templates library and note formats such as DAP notes.

A practical way to think about state retention rules is this: treat your state board rule as the floor, not the ceiling. If a payer, malpractice carrier, facility policy, or state statute requires longer retention, follow the longest requirement. This is particularly important for therapists who document complex treatment courses, use clinical note examples as training references, or maintain records for children and adolescents whose cases may later re-open in adulthood.

When to Retain Records Longer Than the Minimum

Even when you identify a minimum retention period, many clinicians should retain records longer in real-world practice. Longer retention is often appropriate when a client is a minor, when treatment involved high-risk presentations, when the client had ongoing contact over many years, when there is a foreseeable claim, or when a professional relationship ended under contentious circumstances. If a client later files a complaint, requests records, or litigates an issue, your chart may be central evidence.

Consider keeping records longer when any of the following apply:

• The client was a minor or near the age of majority at discharge.
• The case involved suicidality, self-harm, homicidal ideation, abuse concerns, or complex safety planning.
• The client received court-involved services, custody-related treatment, or forensic-related care.
• You billed insurance and may need to support claims or appeals later.
• You are transitioning out of private practice or selling the practice and need continuity for successors.

For documentation quality, a concise progress note is still better than a lengthy but vague note. Use clinically meaningful language that captures medical necessity, response to treatment, and next steps. If your practice uses structured formats such as SOAP notes or PIE notes, consistency makes archiving and retrieval much easier years later.

Sample Note Example

The examples below show how retention-related documentation should remain clinically useful long after the visit itself. The goal is not to over-document every session, but to preserve a defensible record that supports treatment and future retrieval.

These examples are intentionally practical. A future auditor, board investigator, or covering clinician should be able to understand what happened, why care was provided, and where the record is stored. If you want to improve consistency across your team, review your broader documentation style against clinical terminology progress notes so your language stays objective and durable.

How to Destroy Records Safely and Document Disposal

When a record reaches the end of its retention period, destruction should be secure, deliberate, and documented. Paper files should be shredded or otherwise rendered unreadable. Electronic files should be deleted in a way that addresses backups, archives, and cloud storage. If you use an EHR or practice management platform, confirm how the vendor handles deletion requests, archival retention, legal holds, and export options before you terminate service.

A good destruction policy answers four questions: what is destroyed, when it is destroyed, who approves destruction, and how destruction is logged. The destruction log should include the client identifier, date of destruction, method used, and staff member responsible. Do not destroy a file if there is any active litigation hold, open complaint, pending appeal, unresolved audit, or other reason to preserve the record longer.

For practices with many active and inactive files, digital workflows reduce risk because they create consistent timestamps and retrieval trails. If you are building or refreshing your system, consider the documentation and access controls outlined in features and internal policies for your guides center. A clear policy is easier to follow than a memory-based approach when years have passed.

Frequently Asked Questions

How long should therapists keep mental health records?

Therapists should keep records for the period required by their state licensing board or state law, plus any longer requirement imposed by a payer, facility, or malpractice policy. In practice, adult records are often retained for 5 to 10 years, and minors are usually kept longer, often until several years after the client reaches adulthood. Verify with your state licensing board.

Do psychotherapy notes have the same retention rules as progress notes?

No. Psychotherapy notes are treated separately under HIPAA and are not the same as the designated record set. Progress notes, treatment plans, diagnoses, medication information, and billing records are part of the regular chart and should be retained under the applicable state and payer rules.

Should records for minors be kept longer?

Usually yes. Many states extend retention for minors so the record is available after the client becomes an adult. Because the exact timeline varies, therapists should calculate the retention period from the date of majority or other state-specific trigger and confirm the rule for their license type.

Can I destroy records as soon as the minimum retention period ends?

Not always. You should first check for litigation holds, complaints, appeals, audits, or unresolved billing issues. It is often safer to retain records a bit longer than the minimum if the file involves high-risk care, court involvement, or complex insurance billing.

What is the safest way to dispose of old records?

Paper records should be shredded or otherwise made unreadable, and electronic records should be securely deleted with attention to backups, archives, and vendor retention settings. Document the destruction in a log that includes the client, date, method, and staff member responsible.