Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date of service, longer where other law or medical standards require, and 15 years for certain records. Expired records must be shredded, incinerated, electronically deleted or otherwise disposed of confidentially.
\nMichigan’s Public Health Code requires a licensee to keep a record for each patient, including tests, examinations, observations and treatments, and to retain it for at least 7 years from the date of service unless federal or state law or accepted medical standards require longer (MCL 333.16213). It defines a medical record as information in any form or medium, and health facilities and agencies have a parallel duty under MCL 333.20175; both sections set a 15-year minimum for certain records they describe.
\nRecords must be kept in a way that protects their integrity and confidentiality and keeps them available to the patient or an authorized representative. A licensee may destroy a record less than 7 years old only after written notice offering the patient a copy and the patient’s written authorization, and records destroyed after the retention period must be shredded, incinerated, electronically deleted or otherwise disposed of in a manner that ensures continued confidentiality.
\nA licensee who sells or closes a practice, retires or stops practicing may not abandon the records and must tell the department who will have custody and how patients can request copies. A licensee unable to comply may arrange for another provider, a health facility or a medical records company to protect, maintain and provide access to the records.
\nUse this for Michigan licensed health professionals and health facilities and agencies; health maintenance organizations are excluded from MCL 333.20175. Other federal or state rules and accepted medical standards can require longer retention, so confirm schedules with counsel.
\nDSE recommends setting retention for Michigan patient records to at least 7 years from the date of service and making destruction a documented, confidential process. Apply the same period to record systems, scanned documents and backups, keep retained records encrypted with access logging, use shredding or verified electronic deletion at the end, and settle custody before any practice sale or closure.
\nSample records reaching 7 years to confirm the right period applied, confirm backups age out on the same schedule, and keep shredding certificates or deletion logs for each disposal.
\nMichigan Legislature — MCL 333.16213, Retention of records. Michigan Legislature — MCL 333.20175, Health facility patient records. Reviewed October 19, 2026.
", "content_text": "Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date of service, longer where other law or medical standards require, and 15 years for certain records. Expired records must be shredded, incinerated, electronically deleted or otherwise disposed of confidentially.\nSource facts\nMichigan’s Public Health Code requires a licensee to keep a record for each patient, including tests, examinations, observations and treatments, and to retain it for at least 7 years from the date of service unless federal or state law or accepted medical standards require longer (MCL 333.16213). It defines a medical record as information in any form or medium, and health facilities and agencies have a parallel duty under MCL 333.20175; both sections set a 15-year minimum for certain records they describe.\nRecords must be kept in a way that protects their integrity and confidentiality and keeps them available to the patient or an authorized representative. A licensee may destroy a record less than 7 years old only after written notice offering the patient a copy and the patient’s written authorization, and records destroyed after the retention period must be shredded, incinerated, electronically deleted or otherwise disposed of in a manner that ensures continued confidentiality.\nA licensee who sells or closes a practice, retires or stops practicing may not abandon the records and must tell the department who will have custody and how patients can request copies. A licensee unable to comply may arrange for another provider, a health facility or a medical records company to protect, maintain and provide access to the records.\nApplicability\nUse this for Michigan licensed health professionals and health facilities and agencies; health maintenance organizations are excluded from MCL 333.20175. Other federal or state rules and accepted medical standards can require longer retention, so confirm schedules with counsel.\nDSE recommendation\nDSE recommends setting retention for Michigan patient records to at least 7 years from the date of service and making destruction a documented, confidential process. Apply the same period to record systems, scanned documents and backups, keep retained records encrypted with access logging, use shredding or verified electronic deletion at the end, and settle custody before any practice sale or closure.\nVerification\nSample records reaching 7 years to confirm the right period applied, confirm backups age out on the same schedule, and keep shredding certificates or deletion logs for each disposal.\nOfficial references\nMichigan Legislature — MCL 333.16213, Retention of records. Michigan Legislature — MCL 333.20175, Health facility patient records. Reviewed October 19, 2026.", "content_markdown": "Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date of service, longer where other law or medical standards require, and 15 years for certain records. Expired records must be shredded, incinerated, electronically deleted or otherwise disposed of confidentially.\n\n## Source facts\n\nMichigan’s Public Health Code requires a licensee to keep a record for each patient, including tests, examinations, observations and treatments, and to retain it for at least 7 years from the date of service unless federal or state law or accepted medical standards require longer ([MCL 333.16213](https://legislature.mi.gov/Laws/MCL?objectName=mcl-333-16213)). It defines a medical record as information in any form or medium, and health facilities and agencies have a parallel duty under [MCL 333.20175](https://legislature.mi.gov/Laws/MCL?objectName=mcl-333-20175); both sections set a 15-year minimum for certain records they describe.\n\nRecords must be kept in a way that protects their integrity and confidentiality and keeps them available to the patient or an authorized representative. A licensee may destroy a record less than 7 years old only after written notice offering the patient a copy and the patient’s written authorization, and records destroyed after the retention period must be shredded, incinerated, electronically deleted or otherwise disposed of in a manner that ensures continued confidentiality.\n\nA licensee who sells or closes a practice, retires or stops practicing may not abandon the records and must tell the department who will have custody and how patients can request copies. A licensee unable to comply may arrange for another provider, a health facility or a medical records company to protect, maintain and provide access to the records.\n\n## Applicability\n\nUse this for Michigan licensed health professionals and health facilities and agencies; health maintenance organizations are excluded from MCL 333.20175. Other federal or state rules and accepted medical standards can require longer retention, so confirm schedules with counsel.\n\n## DSE recommendation\n\nDSE recommends setting retention for Michigan patient records to at least 7 years from the date of service and making destruction a documented, confidential process. Apply the same period to record systems, scanned documents and backups, keep retained records encrypted with access logging, use shredding or verified electronic deletion at the end, and settle custody before any practice sale or closure.\n\n## Verification\n\nSample records reaching 7 years to confirm the right period applied, confirm backups age out on the same schedule, and keep shredding certificates or deletion logs for each disposal.\n\n## Official references\n\n[Michigan Legislature — MCL 333.16213, Retention of records](https://legislature.mi.gov/Laws/MCL?objectName=mcl-333-16213). [Michigan Legislature — MCL 333.20175, Health facility patient records](https://legislature.mi.gov/Laws/MCL?objectName=mcl-333-20175). Reviewed October 19, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/", "url": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-19" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Michigan medical records: keep each patient record at least 7 years and destroy it only by confidential means", "item": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/#article", "identifier": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/", "url": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/", "headline": "Michigan medical records: keep each patient record at least 7 years and destroy it only by confidential means", "description": "Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date…", "abstract": "Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date of service, longer where other law or medical standards require, and 15 years for certain records. Expired records must be shredded, incinerated, electronically deleted or otherwise disposed of confidentially.", "articleBody": "Michigan’s Public Health Code requires licensed health professionals and health facilities to keep each patient record at least 7 years from the date of service, longer where other law or medical standards require, and 15 years for certain records. Expired records must be shredded, incinerated, electronically deleted or otherwise disposed of confidentially.\nSource facts\nMichigan’s Public Health Code requires a licensee to keep a record for each patient, including tests, examinations, observations and treatments, and to retain it for at least 7 years from the date of service unless federal or state law or accepted medical standards require longer (MCL 333.16213). It defines a medical record as information in any form or medium, and health facilities and agencies have a parallel duty under MCL 333.20175; both sections set a 15-year minimum for certain records they describe.\nRecords must be kept in a way that protects their integrity and confidentiality and keeps them available to the patient or an authorized representative. A licensee may destroy a record less than 7 years old only after written notice offering the patient a copy and the patient’s written authorization, and records destroyed after the retention period must be shredded, incinerated, electronically deleted or otherwise disposed of in a manner that ensures continued confidentiality.\nA licensee who sells or closes a practice, retires or stops practicing may not abandon the records and must tell the department who will have custody and how patients can request copies. A licensee unable to comply may arrange for another provider, a health facility or a medical records company to protect, maintain and provide access to the records.\nApplicability\nUse this for Michigan licensed health professionals and health facilities and agencies; health maintenance organizations are excluded from MCL 333.20175. Other federal or state rules and accepted medical standards can require longer retention, so confirm schedules with counsel.\nDSE recommendation\nDSE recommends setting retention for Michigan patient records to at least 7 years from the date of service and making destruction a documented, confidential process. Apply the same period to record systems, scanned documents and backups, keep retained records encrypted with access logging, use shredding or verified electronic deletion at the end, and settle custody before any practice sale or closure.\nVerification\nSample records reaching 7 years to confirm the right period applied, confirm backups age out on the same schedule, and keep shredding certificates or deletion logs for each disposal.\nOfficial references\nMichigan Legislature — MCL 333.16213, Retention of records. Michigan Legislature — MCL 333.20175, Health facility patient records. Reviewed October 19, 2026.", "datePublished": "2026-10-19T00:27:51+00:00", "dateModified": "2026-10-19T01:55:07+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/michigan-medical-records-retention-7-years-mcl-333-16213-20175-destruction/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Michigan medical records: keep each patient record at least 7 years and destroy it only by confidential means" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Advisory priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 411, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Michigan Legislature — MCL 333.16213, Retention of records", "url": "https://legislature.mi.gov/Laws/MCL?objectName=mcl-333-16213" } } ] } }