{
 "name": "Who keeps a closing practice's records, and what may be done with them",
 "title": "Who keeps a closing practice's records, and what may be done with them",
 "kind": "terms-board",
 "url": "https://sellmedicalrecordstoai.com/datasets/medical-records-custody-law/",
 "csv": "https://sellmedicalrecordstoai.com/datasets/medical-records-custody-law.csv",
 "markdown": "https://sellmedicalrecordstoai.com/datasets/medical-records-custody-law/index.md",
 "computed_at": "2026-11-09",
 "license": "https://sellmedicalrecordstoai.com/terms",
 "headline": "2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.",
 "quotes": [
  "2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.",
  "The duty it sets, by rule: a duty of confidentiality 2 of 9, what happens to records when a practice closes, a doctor leaves or a business is wound up 2 of 9, keeping records, or for how long 2 of 9, using, selling or de-identifying the information 2 of 9, the patient's right to see or copy the record 1 of 9 (9 rules, read 9 November 2026).",
  "Where it applies, by rule: United States, federal 6 of 9, United Kingdom 2 of 9, a US state 1 of 9 (9 rules, read 9 November 2026).",
  "What it says, in its own words, by rule: stated 9 of 9 (9 rules, read 9 November 2026)."
 ],
 "citation": "\"Who keeps a closing practice's records, and what may be done with them\", updated 2026-11-09, https://sellmedicalrecordstoai.com/datasets/medical-records-custody-law/.",
 "national": {
  "n": 9,
  "unit": "rules",
  "documents": 9,
  "published_sources": 9,
  "named_sources": 11
 },
 "board": {
  "type": "clauses",
  "noun": {
   "one": "rule",
   "many": "rules"
  },
  "document": {
   "one": "text",
   "many": "texts"
  },
  "fields": [
   {
    "id": "duty",
    "label": "The duty it sets",
    "counts": {
     "hand-over": 2,
     "keep": 2,
     "use-or-sale": 2,
     "access": 1,
     "confidence": 2
    },
    "values": [
     {
      "value": "keep",
      "text": "keeping records, or for how long"
     },
     {
      "value": "hand-over",
      "text": "what happens to records when a practice closes, a doctor leaves or a business is wound up"
     },
     {
      "value": "access",
      "text": "the patient's right to see or copy the record"
     },
     {
      "value": "use-or-sale",
      "text": "using, selling or de-identifying the information"
     },
     {
      "value": "confidence",
      "text": "a duty of confidentiality"
     }
    ]
   },
   {
    "id": "where",
    "label": "Where it applies",
    "counts": {
     "us-federal": 6,
     "uk": 2,
     "us-state": 1
    },
    "values": [
     {
      "value": "us-federal",
      "text": "United States, federal"
     },
     {
      "value": "us-state",
      "text": "a US state"
     },
     {
      "value": "uk",
      "text": "United Kingdom"
     }
    ]
   },
   {
    "id": "what_it_says",
    "label": "What it says, in its own words",
    "counts": {
     "stated": 9
    },
    "values": [
     {
      "value": "stated",
      "text": "stated"
     }
    ],
    "clause": true
   }
  ],
  "lead": {
   "type": "share",
   "field": "duty",
   "value": "hand-over",
   "n": 2,
   "of": 9,
   "label": "Rules on a closing practice's records"
  },
  "vendors": [
   {
    "name": "11 U.S.C. 351, disposal of patient records in bankruptcy",
    "answers": {
     "duty": {
      "value": "hand-over",
      "text": "what happens to records when a practice closes, a doctor leaves or a business is wound up",
      "documents": [
       {
        "document": "LII, 11 U.S. Code 351",
        "url": "https://www.law.cornell.edu/uscode/text/11/351",
        "value": "hand-over",
        "quote": "If a health care business commences a case under chapter 7, 9, or 11, and the trustee does not have a sufficient amount of funds to pay for the storage of patient records in the manner required under applicable Federal or State law"
       }
      ]
     },
     "where": {
      "value": "us-federal",
      "text": "United States, federal",
      "documents": [
       {
        "document": "LII, 11 U.S. Code 351",
        "url": "https://www.law.cornell.edu/uscode/text/11/351",
        "value": "us-federal",
        "quote": "11 U.S. Code § 351 - Disposal of patient records"
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "promptly publish notice, in 1 or more appropriate newspapers, that if patient records are…",
      "documents": [
       {
        "document": "LII, 11 U.S. Code 351",
        "url": "https://www.law.cornell.edu/uscode/text/11/351",
        "value": "stated",
        "quote": "promptly publish notice, in 1 or more appropriate newspapers, that if patient records are not claimed by the patient or an insurance provider (if applicable law permits the insurance provider to make that claim) by the date that is 365 days after the date of that notification, the trustee will destroy the patient records"
       }
      ]
     }
    }
   },
   {
    "name": "42 CFR 482.24(b)(1), a Medicare hospital's record retention",
    "answers": {
     "duty": {
      "value": "keep",
      "text": "keeping records, or for how long",
      "documents": [
       {
        "document": "eCFR, 42 CFR 482.24",
        "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
        "value": "keep",
        "quote": "Medical records must be retained in their original or legally reproduced form for a period of at least 5 years."
       }
      ]
     },
     "where": {
      "value": "us-federal",
      "text": "United States, federal",
      "documents": [
       {
        "document": "eCFR, 42 CFR 482.24",
        "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
        "value": "us-federal",
        "quote": "Medical records must be retained in their original or legally reproduced form for a period of at least 5 years."
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "Medical records must be retained in their original or legally reproduced form for a…",
      "documents": [
       {
        "document": "eCFR, 42 CFR 482.24",
        "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
        "value": "stated",
        "quote": "Medical records must be retained in their original or legally reproduced form for a period of at least 5 years."
       }
      ]
     }
    }
   },
   {
    "name": "45 CFR 164.502(a)(5)(ii)(B), what counts as a sale",
    "answers": {
     "duty": {
      "value": "use-or-sale",
      "text": "using, selling or de-identifying the information",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.502",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
        "value": "use-or-sale",
        "quote": "where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information"
       }
      ]
     },
     "where": {
      "value": "us-federal",
      "text": "United States, federal",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.502",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
        "value": "us-federal",
        "quote": "a disclosure of protected health information by a covered entity or business associate, if applicable"
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "a disclosure of protected health information by a covered entity or business associate…",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.502",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
        "value": "stated",
        "quote": "a disclosure of protected health information by a covered entity or business associate, if applicable, where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information."
       }
      ]
     }
    }
   },
   {
    "name": "45 CFR 164.514(e), the limited data set",
    "answers": {
     "duty": {
      "value": "use-or-sale",
      "text": "using, selling or de-identifying the information",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.514",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
        "value": "use-or-sale",
        "quote": "A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations."
       }
      ]
     },
     "where": {
      "value": "us-federal",
      "text": "United States, federal",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.514",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
        "value": "us-federal",
        "quote": "Standard: Limited data set."
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "A covered entity may use or disclose a limited data set under paragraph (e)(1) of this…",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.514",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
        "value": "stated",
        "quote": "A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations."
       }
      ]
     }
    }
   },
   {
    "name": "45 CFR 164.524(a)(1), the patient's right of access",
    "answers": {
     "duty": {
      "value": "access",
      "text": "the patient's right to see or copy the record",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.524",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
        "value": "access",
        "quote": "an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set"
       }
      ]
     },
     "where": {
      "value": "us-federal",
      "text": "United States, federal",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.524",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
        "value": "us-federal",
        "quote": "an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set"
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "an individual has a right of access to inspect and obtain a copy of protected health…",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.524",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
        "value": "stated",
        "quote": "an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set, for as long as the protected health information is maintained in the designated record set"
       }
      ]
     }
    }
   },
   {
    "name": "45 CFR 164.530(j)(2), keeping HIPAA documentation",
    "answers": {
     "duty": {
      "value": "keep",
      "text": "keeping records, or for how long",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.530",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
        "value": "keep",
        "quote": "A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later."
       }
      ]
     },
     "where": {
      "value": "us-federal",
      "text": "United States, federal",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.530",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
        "value": "us-federal",
        "quote": "Implementation specification: Retention period."
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "A covered entity must retain the documentation required by paragraph (j)(1) of this…",
      "documents": [
       {
        "document": "eCFR, 45 CFR 164.530",
        "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
        "value": "stated",
        "quote": "A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later."
       }
      ]
     }
    }
   },
   {
    "name": "Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are",
    "answers": {
     "duty": {
      "value": "confidence",
      "text": "a duty of confidentiality",
      "documents": [
       {
        "document": "legislation.gov.uk, Data Protection Act 2018 Schedule 1",
        "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
        "value": "confidence",
        "quote": "See also the conditions and safeguards in Article 9(3) of the"
       }
      ]
     },
     "where": {
      "value": "uk",
      "text": "United Kingdom",
      "documents": [
       {
        "document": "legislation.gov.uk, Data Protection Act 2018 Schedule 1",
        "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
        "value": "uk",
        "quote": "In this paragraph “health or social care purposes” means the purposes of"
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "In this paragraph “health or social care purposes” means the purposes of",
      "documents": [
       {
        "document": "legislation.gov.uk, Data Protection Act 2018 Schedule 1",
        "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
        "value": "stated",
        "quote": "In this paragraph “health or social care purposes” means the purposes of"
       }
      ]
     }
    }
   },
   {
    "name": "Florida Statutes 456.057(12) and (13), records owners leaving practice",
    "answers": {
     "duty": {
      "value": "hand-over",
      "text": "what happens to records when a practice closes, a doctor leaves or a business is wound up",
      "documents": [
       {
        "document": "Online Sunshine, Florida Statutes 456.057",
        "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
        "value": "hand-over",
        "quote": "records owners shall place an advertisement in the local newspaper or notify patients, in writing, when they are terminating practice, retiring, or relocating, and no longer available to patients, and offer patients the opportunity to obtain a copy of their medical record."
       }
      ]
     },
     "where": {
      "value": "us-state",
      "text": "a US state",
      "documents": [
       {
        "document": "Online Sunshine, Florida Statutes 456.057",
        "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
        "value": "us-state",
        "quote": "Notwithstanding the provisions of s. 456.058, records owners shall notify the appropriate board office when they are terminating practice"
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "records owners shall notify the appropriate board office when they are terminating…",
      "documents": [
       {
        "document": "Online Sunshine, Florida Statutes 456.057",
        "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
        "value": "stated",
        "quote": "records owners shall notify the appropriate board office when they are terminating practice, retiring, or relocating, and no longer available to patients, specifying who the new records owner is and where medical records can be found."
       }
      ]
     }
    }
   },
   {
    "name": "GMC, Confidentiality: good practice in handling patient information",
    "answers": {
     "duty": {
      "value": "confidence",
      "text": "a duty of confidentiality",
      "documents": [
       {
        "document": "General Medical Council guidance page",
        "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
        "value": "confidence",
        "quote": "This guidance sets out eight principles of confidentiality that you should apply to your practice."
       }
      ]
     },
     "where": {
      "value": "uk",
      "text": "United Kingdom",
      "documents": [
       {
        "document": "General Medical Council guidance page",
        "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
        "value": "uk",
        "quote": "It was updated on 25 May 2018 to reflect the requirements of the General Data Protection Regulation and Data Protection Act 2018"
       }
      ]
     },
     "what_it_says": {
      "value": "stated",
      "text": "This guidance sets out eight principles of confidentiality that you should apply to your…",
      "documents": [
       {
        "document": "General Medical Council guidance page",
        "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
        "value": "stated",
        "quote": "This guidance sets out eight principles of confidentiality that you should apply to your practice. It provides a framework to help you decide when you can share information."
       }
      ]
     }
    }
   }
  ]
 },
 "subject_kind": "rule",
 "rows": [
  {
   "subject": "11 U.S.C. 351, disposal of patient records in bankruptcy",
   "url": "https://www.law.cornell.edu/uscode/text/11/351",
   "document": "LII, 11 U.S. Code 351",
   "question": "duty",
   "answer": "hand-over",
   "answer_text": "what happens to records when a practice closes, a doctor leaves or a business is wound up",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "If a health care business commences a case under chapter 7, 9, or 11, and the trustee does not have a sufficient amount of funds to pay for the storage of patient records in the manner required under applicable Federal or State law",
   "text_sha256": "67edbcbd3bcfeeb876b5fc5a327837853aa3918c76f7ace1888a3e63ccf1d605"
  },
  {
   "subject": "11 U.S.C. 351, disposal of patient records in bankruptcy",
   "url": "https://www.law.cornell.edu/uscode/text/11/351",
   "document": "LII, 11 U.S. Code 351",
   "question": "where",
   "answer": "us-federal",
   "answer_text": "United States, federal",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "11 U.S. Code § 351 - Disposal of patient records",
   "text_sha256": "67edbcbd3bcfeeb876b5fc5a327837853aa3918c76f7ace1888a3e63ccf1d605"
  },
  {
   "subject": "11 U.S.C. 351, disposal of patient records in bankruptcy",
   "url": "https://www.law.cornell.edu/uscode/text/11/351",
   "document": "LII, 11 U.S. Code 351",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "promptly publish notice, in 1 or more appropriate newspapers, that if patient records are…",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "promptly publish notice, in 1 or more appropriate newspapers, that if patient records are not claimed by the patient or an insurance provider (if applicable law permits the insurance provider to make that claim) by the date that is 365 days after the date of that notification, the trustee will destroy the patient records",
   "text_sha256": "67edbcbd3bcfeeb876b5fc5a327837853aa3918c76f7ace1888a3e63ccf1d605"
  },
  {
   "subject": "42 CFR 482.24(b)(1), a Medicare hospital's record retention",
   "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
   "document": "eCFR, 42 CFR 482.24",
   "question": "duty",
   "answer": "keep",
   "answer_text": "keeping records, or for how long",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "Medical records must be retained in their original or legally reproduced form for a period of at least 5 years.",
   "text_sha256": "734b3de944fa662993d422a6b0eba3d62449559f431856ff1e730a0865e1e460"
  },
  {
   "subject": "42 CFR 482.24(b)(1), a Medicare hospital's record retention",
   "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
   "document": "eCFR, 42 CFR 482.24",
   "question": "where",
   "answer": "us-federal",
   "answer_text": "United States, federal",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "Medical records must be retained in their original or legally reproduced form for a period of at least 5 years.",
   "text_sha256": "734b3de944fa662993d422a6b0eba3d62449559f431856ff1e730a0865e1e460"
  },
  {
   "subject": "42 CFR 482.24(b)(1), a Medicare hospital's record retention",
   "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
   "document": "eCFR, 42 CFR 482.24",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "Medical records must be retained in their original or legally reproduced form for a…",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "Medical records must be retained in their original or legally reproduced form for a period of at least 5 years.",
   "text_sha256": "734b3de944fa662993d422a6b0eba3d62449559f431856ff1e730a0865e1e460"
  },
  {
   "subject": "45 CFR 164.502(a)(5)(ii)(B), what counts as a sale",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
   "document": "eCFR, 45 CFR 164.502",
   "question": "duty",
   "answer": "use-or-sale",
   "answer_text": "using, selling or de-identifying the information",
   "status": "stated",
   "retrieved_at": "2026-11-02",
   "quote": "where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information",
   "text_sha256": "b29ab8137ad2f1f91f5596888a2cbf1ab8008f4e908221bbc39e8529ecc3932b"
  },
  {
   "subject": "45 CFR 164.502(a)(5)(ii)(B), what counts as a sale",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
   "document": "eCFR, 45 CFR 164.502",
   "question": "where",
   "answer": "us-federal",
   "answer_text": "United States, federal",
   "status": "stated",
   "retrieved_at": "2026-11-02",
   "quote": "a disclosure of protected health information by a covered entity or business associate, if applicable",
   "text_sha256": "b29ab8137ad2f1f91f5596888a2cbf1ab8008f4e908221bbc39e8529ecc3932b"
  },
  {
   "subject": "45 CFR 164.502(a)(5)(ii)(B), what counts as a sale",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
   "document": "eCFR, 45 CFR 164.502",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "a disclosure of protected health information by a covered entity or business associate…",
   "status": "stated",
   "retrieved_at": "2026-11-02",
   "quote": "a disclosure of protected health information by a covered entity or business associate, if applicable, where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information.",
   "text_sha256": "b29ab8137ad2f1f91f5596888a2cbf1ab8008f4e908221bbc39e8529ecc3932b"
  },
  {
   "subject": "45 CFR 164.514(e), the limited data set",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
   "document": "eCFR, 45 CFR 164.514",
   "question": "duty",
   "answer": "use-or-sale",
   "answer_text": "using, selling or de-identifying the information",
   "status": "stated",
   "retrieved_at": "2026-11-05",
   "quote": "A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations.",
   "text_sha256": "cc8921a4bd9818730c1519b5a8aa5f062e097ecbca5e4f104925f0d505bee32b"
  },
  {
   "subject": "45 CFR 164.514(e), the limited data set",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
   "document": "eCFR, 45 CFR 164.514",
   "question": "where",
   "answer": "us-federal",
   "answer_text": "United States, federal",
   "status": "stated",
   "retrieved_at": "2026-11-05",
   "quote": "Standard: Limited data set.",
   "text_sha256": "cc8921a4bd9818730c1519b5a8aa5f062e097ecbca5e4f104925f0d505bee32b"
  },
  {
   "subject": "45 CFR 164.514(e), the limited data set",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
   "document": "eCFR, 45 CFR 164.514",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "A covered entity may use or disclose a limited data set under paragraph (e)(1) of this…",
   "status": "stated",
   "retrieved_at": "2026-11-05",
   "quote": "A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations.",
   "text_sha256": "cc8921a4bd9818730c1519b5a8aa5f062e097ecbca5e4f104925f0d505bee32b"
  },
  {
   "subject": "45 CFR 164.524(a)(1), the patient's right of access",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
   "document": "eCFR, 45 CFR 164.524",
   "question": "duty",
   "answer": "access",
   "answer_text": "the patient's right to see or copy the record",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set",
   "text_sha256": "674385ba9aa235fbc80a4ccad0146ca0f0f876e8940823443e4f0a75c579ba8c"
  },
  {
   "subject": "45 CFR 164.524(a)(1), the patient's right of access",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
   "document": "eCFR, 45 CFR 164.524",
   "question": "where",
   "answer": "us-federal",
   "answer_text": "United States, federal",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set",
   "text_sha256": "674385ba9aa235fbc80a4ccad0146ca0f0f876e8940823443e4f0a75c579ba8c"
  },
  {
   "subject": "45 CFR 164.524(a)(1), the patient's right of access",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
   "document": "eCFR, 45 CFR 164.524",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "an individual has a right of access to inspect and obtain a copy of protected health…",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set, for as long as the protected health information is maintained in the designated record set",
   "text_sha256": "674385ba9aa235fbc80a4ccad0146ca0f0f876e8940823443e4f0a75c579ba8c"
  },
  {
   "subject": "45 CFR 164.530(j)(2), keeping HIPAA documentation",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
   "document": "eCFR, 45 CFR 164.530",
   "question": "duty",
   "answer": "keep",
   "answer_text": "keeping records, or for how long",
   "status": "stated",
   "retrieved_at": "2026-11-02",
   "quote": "A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later.",
   "text_sha256": "3516cb1ee90d3c604862fa826f7a605f59e56f6733a52eb6188124c304f851e1"
  },
  {
   "subject": "45 CFR 164.530(j)(2), keeping HIPAA documentation",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
   "document": "eCFR, 45 CFR 164.530",
   "question": "where",
   "answer": "us-federal",
   "answer_text": "United States, federal",
   "status": "stated",
   "retrieved_at": "2026-11-02",
   "quote": "Implementation specification: Retention period.",
   "text_sha256": "3516cb1ee90d3c604862fa826f7a605f59e56f6733a52eb6188124c304f851e1"
  },
  {
   "subject": "45 CFR 164.530(j)(2), keeping HIPAA documentation",
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
   "document": "eCFR, 45 CFR 164.530",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "A covered entity must retain the documentation required by paragraph (j)(1) of this…",
   "status": "stated",
   "retrieved_at": "2026-11-02",
   "quote": "A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later.",
   "text_sha256": "3516cb1ee90d3c604862fa826f7a605f59e56f6733a52eb6188124c304f851e1"
  },
  {
   "subject": "Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are",
   "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
   "document": "legislation.gov.uk, Data Protection Act 2018 Schedule 1",
   "question": "duty",
   "answer": "confidence",
   "answer_text": "a duty of confidentiality",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "See also the conditions and safeguards in Article 9(3) of the",
   "text_sha256": "798a4bcc69c82506bb55f777cf13f7a8437cb512368e67fe6ebedab8a00fb4e1"
  },
  {
   "subject": "Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are",
   "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
   "document": "legislation.gov.uk, Data Protection Act 2018 Schedule 1",
   "question": "where",
   "answer": "uk",
   "answer_text": "United Kingdom",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "In this paragraph “health or social care purposes” means the purposes of",
   "text_sha256": "798a4bcc69c82506bb55f777cf13f7a8437cb512368e67fe6ebedab8a00fb4e1"
  },
  {
   "subject": "Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are",
   "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
   "document": "legislation.gov.uk, Data Protection Act 2018 Schedule 1",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "In this paragraph “health or social care purposes” means the purposes of",
   "status": "stated",
   "retrieved_at": "2026-11-07",
   "quote": "In this paragraph “health or social care purposes” means the purposes of",
   "text_sha256": "798a4bcc69c82506bb55f777cf13f7a8437cb512368e67fe6ebedab8a00fb4e1"
  },
  {
   "subject": "Florida Statutes 456.057(12) and (13), records owners leaving practice",
   "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
   "document": "Online Sunshine, Florida Statutes 456.057",
   "question": "duty",
   "answer": "hand-over",
   "answer_text": "what happens to records when a practice closes, a doctor leaves or a business is wound up",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "records owners shall place an advertisement in the local newspaper or notify patients, in writing, when they are terminating practice, retiring, or relocating, and no longer available to patients, and offer patients the opportunity to obtain a copy of their medical record.",
   "text_sha256": "61a4ab35ec6667d87a9887cab6b47e565fff63340672b6b645f9b402617f4112"
  },
  {
   "subject": "Florida Statutes 456.057(12) and (13), records owners leaving practice",
   "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
   "document": "Online Sunshine, Florida Statutes 456.057",
   "question": "where",
   "answer": "us-state",
   "answer_text": "a US state",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "Notwithstanding the provisions of s. 456.058, records owners shall notify the appropriate board office when they are terminating practice",
   "text_sha256": "61a4ab35ec6667d87a9887cab6b47e565fff63340672b6b645f9b402617f4112"
  },
  {
   "subject": "Florida Statutes 456.057(12) and (13), records owners leaving practice",
   "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
   "document": "Online Sunshine, Florida Statutes 456.057",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "records owners shall notify the appropriate board office when they are terminating…",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "records owners shall notify the appropriate board office when they are terminating practice, retiring, or relocating, and no longer available to patients, specifying who the new records owner is and where medical records can be found.",
   "text_sha256": "61a4ab35ec6667d87a9887cab6b47e565fff63340672b6b645f9b402617f4112"
  },
  {
   "subject": "GMC, Confidentiality: good practice in handling patient information",
   "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
   "document": "General Medical Council guidance page",
   "question": "duty",
   "answer": "confidence",
   "answer_text": "a duty of confidentiality",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "This guidance sets out eight principles of confidentiality that you should apply to your practice.",
   "text_sha256": "b43291c47f25655324bb4984dbdf298f68a3e0e0f6dc8d0279f31856b389372a"
  },
  {
   "subject": "GMC, Confidentiality: good practice in handling patient information",
   "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
   "document": "General Medical Council guidance page",
   "question": "where",
   "answer": "uk",
   "answer_text": "United Kingdom",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "It was updated on 25 May 2018 to reflect the requirements of the General Data Protection Regulation and Data Protection Act 2018",
   "text_sha256": "b43291c47f25655324bb4984dbdf298f68a3e0e0f6dc8d0279f31856b389372a"
  },
  {
   "subject": "GMC, Confidentiality: good practice in handling patient information",
   "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
   "document": "General Medical Council guidance page",
   "question": "what_it_says",
   "answer": "stated",
   "answer_text": "This guidance sets out eight principles of confidentiality that you should apply to your…",
   "status": "stated",
   "retrieved_at": "2026-11-09",
   "quote": "This guidance sets out eight principles of confidentiality that you should apply to your practice. It provides a framework to help you decide when you can share information.",
   "text_sha256": "b43291c47f25655324bb4984dbdf298f68a3e0e0f6dc8d0279f31856b389372a"
  }
 ],
 "sources": [
  {
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.530",
   "label": "eCFR :: 45 CFR 164.530 -- Administrative requirements.",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524",
   "label": "eCFR :: 45 CFR 164.524 -- Access of individuals to protected health information.",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502",
   "label": "eCFR :: 45 CFR 164.502 -- Uses and disclosures of protected health information: General rules.",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.514",
   "label": "eCFR :: 45 CFR 164.514 -- Other requirements relating to uses and disclosures of protected health information.",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-C/section-482.24",
   "label": "eCFR :: 42 CFR 482.24 -- Condition of participation: Medical record services.",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.057.html",
   "label": "Statutes & Constitution :View Statutes : Online Sunshine",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=HSC&sectionNum=123145",
   "label": "California Code, HSC 123145",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "not-terms",
   "why": "the stored read is the California code site's navigation shell with no section text"
  },
  {
   "url": "https://www.law.cornell.edu/uscode/text/11/351",
   "label": "11 U.S. Code § 351 - Disposal of patient records | U.S. Code | US Law | LII / Legal Information Institute",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.gmc-uk.org/professional-standards/the-professional-standards/confidentiality",
   "label": "Confidentiality: good practice in handling patient information - professional standards - GMC",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1",
   "label": "Data Protection Act 2018",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "read"
  },
  {
   "url": "https://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0400-0499/0456/Sections/0456.058.html",
   "label": "Statutes & Constitution :View Statutes : Online Sunshine",
   "license": "quoted for comment from the publisher's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018",
   "class": "primary-government",
   "status": "not-terms",
   "why": "the stored read is the Florida statutes search shell with no section text"
  }
 ],
 "methodology": "Each rule's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018 were read through estate-fetch and stored whole (sha256 on every row). For every text, three questions were answered from its own words: the duty it sets, where it applies, what it says, in its own words. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the text read does not address the question. A rule with several texts reads 'varies' where they disagree. 9 rules, 9 texts.",
 "embed": "<figure style=\"margin:0;padding:16px;border:1px solid #d0d0d0;background:#ffffff\"><blockquote style=\"margin:0 0 8px;background:#ffffff\">2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.</blockquote><figcaption style=\"background:#ffffff\"><a href=\"https://sellmedicalrecordstoai.com/datasets/medical-records-custody-law/\" style=\"background:#ffffff\">Who keeps a closing practice's records, and what may be done with them, sellmedicalrecordstoai.com</a></figcaption></figure>"
}