The safest retention period is the longest rule that applies to the record
Therapy record retention is not controlled by one simple national deadline. A solo therapist may need to consider state licensing rules, professional ethics codes, payer contracts, Medicaid rules, organizational policies, client age, and the type of record involved. A five-year rule may apply in one setting, while a seven- or ten-year requirement may apply in another.
For that reason, therapists should treat record retention as a policy decision, not a guess. The practical question is: What is the longest applicable retention period for this client record? That answer may differ for an adult client, a minor client, a client covered by a specific payer, or a record created while working for an agency.
This article is educational and does not provide legal advice. Clinicians should follow applicable laws, payer requirements, licensing board rules, ethics standards, and organizational policies. If requirements conflict, many practices choose the longer retention period after confirming with legal counsel, their licensing board, or a compliance consultant.
Why therapy record retention is more than an administrative task
Progress notes, assessments, treatment plans, consent forms, safety plans, and discharge summaries do more than document that a session happened. They show the clinical reasoning behind treatment, the interventions used, the client’s response, progress toward goals, and the plan for continued care.
A clear retention policy may support several parts of clinical practice:
- Continuity of care: If a client returns after a year away, prior notes can help the clinician understand diagnosis history, risk concerns, past interventions, and treatment goals.
- Clinical accountability: Records can show how the provider assessed symptoms, addressed safety concerns, updated the treatment plan, and responded to changes in presentation.
- Payer and audit readiness: Insurance plans may request documentation supporting medical necessity, session length, diagnosis, interventions, and treatment progress.
- Practice operations: A written retention schedule helps staff know which records to keep, archive, transfer, or securely destroy.
Retention is also connected to client trust. Clients may request records, ask for a summary of treatment, transfer care, or need documentation for another provider. A well-organized chart makes those requests easier to handle within the limits of applicable law and professional standards.
What counts as a therapy record
Before setting a retention schedule, define what your practice considers part of the clinical record. Different record types may carry different handling requirements. Some practices keep all client-related documents on the same schedule. Others separate clinical records, billing records, HIPAA-related documents, and psychotherapy notes.
A typical behavioral health record may include:
- Intake forms, informed consent, releases of information, and privacy acknowledgments
- Diagnostic assessments, biopsychosocial assessments, screening tools, and risk assessments
- Progress notes, such as SOAP, DAP, BIRP, GIRP, or narrative notes
- Treatment plans, treatment plan reviews, discharge summaries, and referral records
Other materials may also need a policy, including email messages, secure portal messages, collateral contacts, crisis documentation, consultation notes, billing records, denied claims, authorization records, and telehealth consent forms.
Psychotherapy notes may need special attention. In many practices, psychotherapy notes are treated separately from progress notes. Progress notes generally document the clinical service: diagnosis, symptoms, interventions, client response, risk, and plan. Psychotherapy notes, where used, may contain a clinician’s private process notes and may not be part of the standard chart in the same way. Clinicians should confirm how their state, license, employer, and privacy policies define and retain each record type.
How to determine your state-specific retention deadline
A state-by-state answer starts with the license and setting. A psychologist, professional counselor, clinical social worker, marriage and family therapist, psychiatrist, or substance use counselor may be subject to different rules in the same state. A private practice may follow one set of rules, while a hospital, community mental health agency, school-based program, or residential program may follow additional facility requirements.
Use this sequence before assigning a destruction date to any therapy record:
- Check your licensing board rules. Look for record retention language in your profession’s practice act, administrative rules, board guidance, or ethics standards.
- Review state health record laws. Some states set retention periods for health care providers, facilities, or specific behavioral health programs.
- Check payer contracts. Commercial insurance, Medicaid, Medicare, employee assistance programs, and managed care contracts may require records to be available for audits for a defined period.
- Account for minors. Records for minors are often retained longer than adult records because the clock may run from the age of majority or another state-specific milestone.
After those steps, review your practice policies. A group practice may set a single internal rule that is longer than the minimum for any one clinician. That can make training easier and reduce the chance that a record is destroyed too early.
State-by-state retention planning without relying on guesses
Many online retention charts oversimplify the issue by listing one number per state. That can create problems for therapists because behavioral health rules may vary by license type, client age, payer, and setting. A state may have one requirement for psychologists, another for social workers, another for facilities, and another for certain publicly funded services.
A more reliable approach is to create a state-specific retention worksheet for your practice. Use one worksheet for each state where you are licensed or provide services. This is especially useful for telehealth clinicians licensed in multiple states.
| Retention question | What to verify | Example policy decision |
|---|---|---|
| Adult client records | Minimum period after last date of service under your license, setting, and payer rules | Keep adult records for the longest applicable period after the final clinical contact |
| Minor client records | Whether the period runs from last service, age of majority, or another state-specific date | Retain until the client reaches the required age, then apply any additional years required |
| Assessment and intake records | Whether assessments follow the same schedule as progress notes | Keep intake, assessment, and diagnosis documentation with the clinical chart |
| Billing and payer records | Audit, repayment, authorization, and contract requirements | Retain billing support for at least the payer-required audit period |
| HIPAA-related documents | Privacy notices, authorizations, accounting-related records, and security documentation | Maintain a separate administrative retention schedule when needed |
| Closed practice or clinician departure | State rules for client notice, custodian of records, and access after closure | Name a records custodian and document how clients can request records |
For a multi-state practice, repeat the worksheet for each state. If you are licensed in Colorado and Florida, for example, do not assume one state’s retention period applies to both. If you provide telehealth across state lines, confirm which state rules apply to the clinical service, the provider license, and the record location.
Examples of how retention periods are calculated
Retention rules often sound clear until you apply them to real client charts. These examples show how a practice might think through the calculation. They are not legal advice and do not replace state-specific review.
Adult client with a longer payer requirement
A therapist’s licensing rules require adult records to be kept for seven years after the last date of service. A payer contract requires audit access for ten years. The practice may decide to keep the record for ten years because that is the longer applicable period.
Minor client whose record extends beyond age 18
A 16-year-old client ends therapy in May. The applicable rule says minor records must be kept until the client reaches the age of majority, plus seven years. If the age of majority is 18, the practice calculates the retention date from the client’s 18th birthday and retains the record until age 25.
Group practice with multiple license types
A group practice includes counselors, social workers, psychologists, and prescribers. Each license type may have different record expectations. The practice may adopt one internal retention policy based on the longest applicable requirement, while still documenting the specific rules that apply to each profession.
Client moves to another state
A client moves after treatment ends and later requests records for a new provider. The original therapist usually keeps records based on the rules that apply to the provider and practice, not simply the client’s new residence. Telehealth and multi-state licensure can add complexity, so the clinician should verify the applicable rules before transferring or destroying records.
Common record retention mistakes in therapy practices
The most common problems are not dramatic. They are usually small process gaps that build over time: no written policy, inconsistent note naming, unclear closure dates, or no documented destruction process.
- Using one generic deadline for every record: Adult, minor, payer, facility, and administrative records may have different requirements.
- Forgetting the last date of service: Retention periods often depend on the final clinical contact, discharge date, or another defined event.
- Mixing drafts with finalized notes: Practices should be clear about what becomes part of the official clinical record.
- Destroying records without a log: A destruction log can show what was destroyed, when, by whom, and under which policy.
Another common issue is keeping records forever without a plan. Longer retention may be appropriate in some circumstances, but indefinite storage can increase administrative burden and make it harder to manage access, security, and retrieval. A defined policy helps the practice balance care needs, legal requirements, storage limits, and privacy obligations.
Secure storage and disposal should be part of the policy
A retention policy should explain not only how long records are kept, but also how they are protected during that period. Electronic records should be stored in systems with appropriate access controls, password practices, user permissions, backup processes, and security settings. Paper records should be kept in locked storage with limited staff access.
For many practices, the policy should address:
- Who can access active, closed, and archived records
- How records are backed up or recovered after a system problem
- How client requests for records are documented and fulfilled
- How records are securely destroyed after the retention period ends
Secure disposal may include shredding paper records, permanently deleting electronic files according to policy, and using vendors that provide destruction certificates when appropriate. The practice should also decide how to handle duplicate files, exported PDFs, downloaded reports, and records stored outside the main EHR or practice management system.
A practical retention policy outline for therapists
A written policy does not need to be long to be useful. It should be specific enough that a clinician, biller, office manager, or records custodian can follow it without guessing.
Consider including these sections:
- Scope: Define which records are covered, such as progress notes, assessments, treatment plans, consents, billing records, and administrative privacy documents.
- Retention schedule: List the required period for adult records, minor records, payer records, and any special categories.
- Responsible person: Name the role responsible for monitoring retention, archiving, client requests, and destruction.
- Storage method: Identify where records are stored and how access is limited.
The policy should also describe how updates are handled. Laws, board rules, payer contracts, and internal procedures may change. Many practices review retention policies at least annually or when adding a new license type, payer, service line, or state.
How AutoNotes may support cleaner documentation before records are retained
AutoNotes does not replace a retention policy, legal review, or clinician judgment. It can, however, help therapists create more organized clinical documentation before records are finalized and stored. That matters because retained records are only useful if they clearly describe the service provided.
AutoNotes helps behavioral health professionals create structured, editable progress note drafts from session details. Clinicians can choose templates for common workflows such as individual therapy, group therapy, intake sessions, assessments, treatment planning, and other clinical services. The provider reviews, edits, and finalizes each note before it becomes part of the record.
For retention planning, consistent note structure may support:
- Clearer documentation of interventions, client response, progress, and plan
- More consistent formatting across clinicians in a group practice
- Faster completion of notes before charts are closed or archived
- Easier review when responding to payer, client, or continuity-of-care requests
Generic AI writing tools are not built around behavioral health documentation requirements. AutoNotes is designed for therapy workflows, so clinicians start with a note format that reflects real clinical services rather than a blank text box. The note still requires review. The clinician remains responsible for accuracy, clinical judgment, and final approval.
If documentation backlog is making record management harder, start your free trial and test how structured AI-assisted drafts fit into your current documentation workflow.
Frequently asked questions about therapy record retention
How long should therapists keep adult client records?
Many practices see retention periods in the five- to ten-year range after the last date of service, but the correct period depends on state law, license type, payer rules, and practice policy. Clinicians should verify the requirements that apply to their specific setting.
Are records for minors kept longer?
Often, yes. Minor records may need to be retained until the client reaches the age of majority, plus an additional period required by state law, board rule, payer contract, or organizational policy.
Does HIPAA set one national retention period for therapy records?
HIPAA privacy and security obligations affect how protected health information is handled, but therapy record retention also depends on state law, licensing rules, payer requirements, and practice policies. Some HIPAA-related administrative documents may follow a different retention schedule than clinical records.
Can I destroy records once the retention period ends?
Possibly, if no longer retention requirement applies and your policy allows destruction. Records should be destroyed securely, and many practices keep a destruction log showing the date, record category, method, and person responsible.
Should clients receive my retention policy?
Many practices describe record retention and access practices in informed consent materials, privacy documents, or practice policies. The language should match how the practice actually stores, archives, releases, and destroys records.
What if my EHR stores records indefinitely?
Indefinite storage by a software system does not replace a practice retention policy. Clinicians should understand how archived records are accessed, exported, restricted, or deleted if the practice later decides secure destruction is appropriate.
What happens if I close my practice?
Practice closure requires planning for client notice, record access, storage, and a records custodian. State boards may have specific rules about how clients are notified and how long records remain available after closure.
Can AutoNotes manage my legal retention deadlines?
AutoNotes may help create organized, editable clinical documentation drafts, but clinicians still need their own retention policy and should follow applicable laws, payer requirements, and organizational policies. AutoNotes should not be treated as legal advice or a substitute for compliance review.
Build a retention policy before the next chart review
The best time to clarify record retention is before a client requests records, a payer asks for documentation, or a clinician leaves the practice. Start with your state and license, then add payer rules, minor-specific requirements, storage procedures, and secure disposal steps.
A clear policy helps therapists keep the right records for the right amount of time. Strong note habits make that policy easier to follow. AutoNotes can help clinicians create structured progress note drafts faster, while keeping the provider in control of review, edits, and final documentation.
Try it free to see how AutoNotes can support a more organized documentation process.
