Record retention starts with knowing which rules apply to your practice
Mental health records are not just session notes stored for later reference. They support continuity of care, payer review, clinical supervision, client access requests, risk management, and practice operations. For therapists, counselors, social workers, psychologists, psychiatrists, and behavioral health practices, record retention means deciding how long to keep clinical records, where to store them, who can access them, and how to destroy them when they are no longer required.
There is no single retention period that applies to every behavioral health professional in every setting. Requirements may vary based on state law, licensing board rules, payer contracts, organizational policy, client age, type of service, and whether the record includes psychotherapy notes, medical records, billing documentation, assessment results, or other protected health information. Clinicians should follow applicable laws, payer requirements, professional ethics, and organizational policies. This article is for general educational purposes and is not legal advice.
Many professional guidelines use seven years as a common reference point. For example, the American Psychological Association has advised keeping records for at least seven years after the last client contact, and for minors, until the client reaches the age of majority plus seven years [source:1]. Minor-client records often require special attention because the retention clock may not begin the same way it does for adult clients [source:2].
Why retention rules matter in behavioral health documentation
Record retention can feel like a back-office task until a former client requests records, a payer asks for documentation, a clinician changes practices, or a complaint requires review of past care. A clear retention process helps a practice respond without searching through old drives, paper files, email attachments, or disconnected note folders.
Strong retention habits may support several parts of clinical practice:
- Continuity of care: Past diagnoses, interventions, treatment goals, risk assessments, and medication history can help inform future services.
- Clinical decision-making: Organized progress notes make it easier to see patterns, changes in symptoms, and response to treatment.
- Payer documentation: Records may be needed to support billed services, medical necessity, treatment plans, and session frequency.
- Client rights and access: A practice needs a reliable way to locate records when a client requests access under applicable rules.
Retention is also about not keeping records forever without a plan. Holding unnecessary records can increase storage burden and make old information harder to manage. A written policy gives the practice a consistent process for archiving, reviewing, and destroying records once the applicable retention period has passed.
What belongs in a mental health record retention policy
A record retention policy should be practical enough for daily use. A solo therapist does not need a hospital-sized policy manual, but the policy should still answer basic questions: what records are kept, how long they are kept, where they are stored, who can access them, and what happens when the retention period ends.
A behavioral health retention policy often covers:
- Record categories: Progress notes, intake documentation, treatment plans, assessments, releases of information, discharge summaries, billing records, and correspondence.
- Retention timelines: Adult records, minor records, closed-client records, inactive-client records, and records tied to payer or agency requirements.
- Storage location: EHR systems, secure document storage, locked physical files, encrypted backups, or approved practice platforms.
- Destruction process: How paper and electronic records are destroyed, who approves destruction, and how the practice documents it.
The policy should also name the person responsible for maintaining the process. In a solo practice, that may be the clinician-owner. In a group practice, it may be a compliance lead, practice administrator, clinical director, or designated records custodian.
Common retention timelines and why clinicians should verify them
Many mental health professionals have heard the “seven-year rule.” That can be a useful starting point, but it should not be treated as the only rule. The American Psychological Association guidance referenced above uses seven years after last client contact, with a longer timeline for minors based on age of majority plus seven years [source:1]. Other rules may apply depending on license type, employer policy, payer contract, or state-specific regulation.
For example, a clinician in private practice may follow a state licensing board requirement, while a clinician working in a community agency may also need to follow agency policy and grant or payer documentation requirements. A psychiatrist may have medical record obligations that differ from a counselor’s practice requirements. A practice serving minors may need a separate process for calculating the destruction date.
Because timelines can vary, clinicians should verify requirements through reliable sources, such as:
- State licensing board rules for their profession
- State health record retention laws
- Professional association ethics guidance
- Payer contracts and audit requirements
If the practice is part of a larger organization, the organization’s internal policy may set a longer retention period than the minimum legal requirement. When requirements conflict or seem unclear, clinicians should seek legal or compliance guidance rather than relying on a general online article.
Adult records, minor records, and closed-client files
Adult client records are often tracked from the date of last professional contact. That may be the last therapy session, medication management visit, formal discharge date, or documented contact related to care. The practice should define this clearly in its policy so staff do not calculate retention dates differently.
Minor records require more care. A common professional guideline is to retain records until the client reaches the age of majority plus seven years [source:2]. If a 15-year-old client ends therapy, the record may need to be kept beyond seven years from the last session because the retention period may be tied to when the client becomes an adult. Exact requirements can vary, so practices should confirm the applicable rule in their jurisdiction and setting.
Closed-client files should be marked clearly. A closed file is not the same as a deleted file. It means the active course of care has ended, and the record is now being retained according to policy. Useful closed-file information may include the last date of service, discharge summary, reason for closure, referral information when applicable, and the planned destruction review date.
Paper records and electronic records need the same level of planning
Some practices still maintain paper files, especially for older records, signed forms, psychological testing materials, or records inherited from a prior practice. Others use electronic systems for nearly everything. Many small practices use a mix of both. The retention policy should address each format.
Paper records need locked storage, limited access, and a process for removal. A file cabinet in a shared office suite may not be enough if non-practice staff can access the area. If paper records are moved offsite, the practice should know who controls the storage, how files are indexed, and how records can be retrieved.
Electronic records need access controls, backups, and clear account management. A clinician should be able to answer basic questions: who can view client records, who can export them, what happens when a staff member leaves, and how old records are preserved if the practice changes software. Electronic records should not be scattered across personal laptops, unapproved cloud folders, text messages, or email inboxes.
HIPAA considerations without assuming one rule solves everything
HIPAA affects how protected health information is handled, but a HIPAA-aware process is broader than simply keeping records for a certain number of years. Behavioral health practices should think about privacy, security, access, documentation, and disposal together. Record retention is one part of that system.
Practical safeguards may include role-based access, strong passwords, secure backups, audit activity review where available, and staff training on record handling. For paper records, safeguards may include locked storage, sign-out procedures, private shredding bins, and policies for transporting files. For electronic records, safeguards may include approved platforms, encryption features where available, and clear procedures for exporting or deleting data.
Clinicians should avoid assuming that a software tool alone makes a practice compliant. A documentation platform may support a better process, but compliance depends on how the practice configures the tool, trains users, controls access, responds to requests, and follows applicable policies.
How to organize records so retention dates are easier to manage
A retention policy is only useful if the records themselves are organized. Many documentation problems come from inconsistent naming, missing discharge dates, unclear file status, or notes saved outside the main record. Small inconsistencies build up quickly after hundreds of sessions.
A simple structure can help:
- Assign each client a primary record location. Avoid keeping parts of the record in multiple untracked systems.
- Use consistent note types. Label intake notes, progress notes, treatment plans, assessments, and discharge summaries clearly.
- Document the last date of service. This date often drives retention review for closed adult records.
- Add a retention review date. This helps the practice know when a file should be reviewed for possible destruction.
For group practices, consistency matters even more. If one clinician writes SOAP notes, another writes DAP notes, and another stores addenda separately, the practice may struggle to locate complete records later. Templates can help keep documentation organized while still allowing clinicians to individualize the note.
Secure destruction should be documented, not improvised
When records reach the end of the required retention period, the practice should not delete or shred them casually. Secure destruction should follow a written process. The goal is to protect client confidentiality while creating a record that shows the practice followed its policy.
For paper records, secure destruction often involves shredding or using a vendor that provides a certificate of destruction. For electronic records, the practice should confirm that deletion removes the information in a way that prevents ordinary recovery, or that the vendor’s destruction process meets the practice’s requirements. Backups, archived files, and exported copies should be considered.
A destruction log may include:
- Client identifier or file number
- Record type and date range
- Date and method of destruction
- Name of the person or vendor completing destruction
Do not destroy records that are subject to an active request, audit, investigation, legal hold, complaint, or payer review. If there is uncertainty, pause destruction and seek appropriate guidance.
Frequent record retention mistakes in mental health practices
Retention problems usually come from unclear habits rather than intentional neglect. A clinician may save notes in a temporary folder after a busy day, forget to close a file, or keep old records indefinitely because destruction feels risky. Over time, those habits create confusion.
Common mistakes include:
- Using one retention rule for every situation: Adult records, minor records, billing records, and testing records may not follow the same timeline.
- Failing to mark closed files: Without a closure date, the practice may not know when the retention period begins.
- Saving records outside approved systems: Notes in personal drives, email, or unapproved apps can be hard to track and protect.
- Skipping destruction documentation: If records are destroyed, the practice should be able to show when and how it happened.
Another common issue is inconsistent progress note structure. A vague note may technically be retained, but still fail to show the clinical picture clearly. A useful record should reflect the service provided, the client’s presentation, interventions, response, progress toward goals, and plan for next steps.
Example: applying a retention process in a small therapy practice
Consider a three-clinician therapy practice that has been open for nine years. The practice has adult clients, adolescent clients, and a mix of self-pay and insurance-based services. Notes are stored electronically, but older consent forms and releases are in paper folders. The clinicians know they need to keep records, but they do not have a consistent review process.
The practice creates a written retention policy. It identifies which records are part of the clinical file, confirms state and payer requirements, and sets a default review schedule. Adult closed files are reviewed based on the last date of service. Minor records are flagged separately because the retention period may extend until age of majority plus seven years under common professional guidance [source:2].
Next, the practice updates its documentation workflow. Each clinician uses consistent templates for intake sessions, individual therapy, treatment plans, and discharge summaries. The administrator runs a quarterly report of closed files and checks whether any are eligible for review. Records that are not yet eligible remain archived. Records that appear eligible are reviewed before destruction, and any approved destruction is logged.
This process does not guarantee compliance. It does, however, give the practice a clearer way to manage records, reduce confusion, and avoid last-minute searching when a client, payer, or clinician needs information.
Record retention checklist for therapists and behavioral health teams
Use this checklist as a starting point for internal review. Adapt it to your license type, practice setting, payer mix, and jurisdiction.
- ☐ Identify the laws, board rules, payer requirements, and organizational policies that apply to your records.
- ☐ Create a written policy for adult records, minor records, closed files, billing records, and destruction procedures.
- ☐ Store records in approved systems with appropriate access controls.
- ☐ Use consistent templates for progress notes, treatment plans, assessments, and discharge summaries.
Once the basics are in place, schedule recurring maintenance rather than waiting for a problem.
- ☐ Record the last date of service and closure status for inactive clients.
- ☐ Assign retention review dates to closed records.
- ☐ Train staff on access, storage, release, and destruction procedures.
- ☐ Keep a destruction log for records destroyed under policy.
How AutoNotes may support organized documentation
AutoNotes is not a legal compliance system and does not guarantee that a practice meets every record retention requirement. Clinicians remain responsible for reviewing, editing, finalizing, storing, and retaining records according to applicable laws, payer requirements, and organizational policies.
AutoNotes can help with the documentation side of the retention process by creating structured, editable progress note drafts from session details. Instead of starting with a blank page after a full day of sessions, clinicians can work from service-specific templates for common behavioral health workflows, including individual therapy, group therapy, intake sessions, assessments, and treatment planning.
Consistent documentation can make retained records easier to review later. A note that clearly separates interventions, client response, progress toward treatment goals, and plan can be easier to understand months or years after the session. That matters when a client returns to care, a provider transfers a case, or a payer asks for supporting documentation.
Compared with generic AI writing tools, AutoNotes is built around behavioral health documentation workflows. The clinician stays in control of the final record. The draft is a starting point, not a replacement for clinical judgment.
Questions clinicians often ask about record retention
How long should I keep mental health records?
Retention timelines vary. Seven years after the last client contact is a common professional reference point, and minor records may need to be retained until age of majority plus seven years [source:1] [source:2]. Verify the rule that applies to your license, state, payer contracts, and practice setting.
Can I keep records longer than required?
Some practices choose longer retention periods, especially when organizational policy or risk management guidance supports it. Keeping records longer also creates storage and privacy responsibilities. The decision should be intentional and documented in policy.
Are electronic records treated differently from paper records?
The format may differ, but the need for secure storage, controlled access, retrieval, retention review, and secure destruction still applies. Electronic records also require attention to backups, exports, user permissions, and vendor practices.
What should happen when a client moves away?
The client’s move does not automatically end the practice’s retention responsibilities. Keep the record according to the applicable retention policy, and document any referrals, transfers, or release-of-information activity as appropriate.
Can AI-generated drafts be part of the clinical record?
An AI-assisted draft should be reviewed, edited, and finalized by the clinician before it becomes part of the clinical record. The final note should reflect the clinician’s judgment, the service provided, and the information needed for the record.
Build a retention process that supports clinical work
A workable retention process does not need to be complicated. Start by confirming the rules that apply to your practice, then write a policy that covers storage, access, timelines, closed files, minor records, and destruction. Use consistent documentation templates so records remain readable and clinically useful over time.
If documentation backlog is making record management harder, AutoNotes may help you create structured, editable note drafts faster while keeping you in control of the final note. Start your free trial to see how AutoNotes can support a more organized documentation workflow.
