eCFR 45 CFR 164.316 - Policies and procedures and documentation requirements (HIPAA)
database
Fields
id
sources/sec-ecfr-164-316Publisher
US Government Publishing Office / HHS
Kind
database
Published
2026-10-04
Accessed
2026-10-04
notes
Documentation retention is REQUIRED at 6 years from the date of creation or last effective date, whichever is later, plus availability to implementers and periodic review with updates in response to environmental or operational changes. This is the retention clock that collides with 'just turn logging off' and with any inference-cache TTL shorter than six years.
Notes
Documentation retention is REQUIRED at 6 years from the date of creation or last effective date, whichever is later, plus availability to implementers and periodic review with updates in response to environmental or operational changes. This is the retention clock that collides with 'just turn logging off' and with any inference-cache TTL shorter than six years.
Cross-references
This record references no other records.