SellMedicalRecordsToAI
Ask about our old records

Who keeps a closing practice's records, and what may be…

2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.

2 of 9 rules Rules on a closing practice's records counting the rules whose own texts were read, 9 Nov 2026
6 of 9 Where it applies: United States, federal top answer out of 3
9 of 9 What it says, in its own words: stated the rules that state it in their texts; quotes below
9 Texts reviewed 11 named, every answer dated and hash-pinned

The duty it sets

  1. a duty of confidentiality2 rules
  2. what happens to records when a practice closes, a doctor leaves or a business is wound up2 rules
  3. keeping records, or for how long2 rules
  4. using, selling or de-identifying the information2 rules
  5. the patient's right to see or copy the record1 rule
9 rules, each counted once; where a rule's texts contradict each other it counts as "varies".
Counts
RowValue
a duty of confidentiality2 rules
what happens to records when a practice closes, a doctor leaves or a business is wound up2 rules
keeping records, or for how long2 rules
using, selling or de-identifying the information2 rules
the patient's right to see or copy the record1 rule

Where it applies

  1. United States, federal6 rules
  2. United Kingdom2 rules
  3. a US state1 rule
9 rules, each counted once.
Counts
RowValue
United States, federal6 rules
United Kingdom2 rules
a US state1 rule

What it says, in its own words

  1. stated9 rules
9 rules, each counted once.
Counts
RowValue
stated9 rules

Every answer from every rule

Every row is a single rule, and every answer expands to the wording it was taken from, the text it came from and when it was read. "Not stated" is used when the text says nothing on the point.

RuleThe duty it setsWhere it appliesWhat it says, in its own words
11 U.S.C. 351, disposal of patient records in bankruptcy
what happens to records when a practice closes, a doctor leaves or a business is wound up

If a health care business commences a case under chapter 7, 9, or 11, and the trustee does not have a sufficient amount of funds to pay for the storage of patient records in the manner required under applicable Federal or State law LII, 11 U.S. Code 351

United States, federal

11 U.S. Code § 351 - Disposal of patient records LII, 11 U.S. Code 351

promptly publish notice, in 1 or more appropriate newspapers, that if patient records are…

promptly publish notice, in 1 or more appropriate newspapers, that if patient records are not claimed by the patient or an insurance provider (if applicable law permits the insurance provider to make that claim) by the date that is 365 days after the date of that notification, the trustee will destroy the patient records LII, 11 U.S. Code 351

42 CFR 482.24(b)(1), a Medicare hospital's record retention
keeping records, or for how long

Medical records must be retained in their original or legally reproduced form for a period of at least 5 years. eCFR, 42 CFR 482.24

United States, federal

Medical records must be retained in their original or legally reproduced form for a period of at least 5 years. eCFR, 42 CFR 482.24

Medical records must be retained in their original or legally reproduced form for a…

Medical records must be retained in their original or legally reproduced form for a period of at least 5 years. eCFR, 42 CFR 482.24

45 CFR 164.502(a)(5)(ii)(B), what counts as a sale
using, selling or de-identifying the information

where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information eCFR, 45 CFR 164.502

United States, federal

a disclosure of protected health information by a covered entity or business associate, if applicable eCFR, 45 CFR 164.502

a disclosure of protected health information by a covered entity or business associate…

a disclosure of protected health information by a covered entity or business associate, if applicable, where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information. eCFR, 45 CFR 164.502

45 CFR 164.514(e), the limited data set
using, selling or de-identifying the information

A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations. eCFR, 45 CFR 164.514

United States, federal

Standard: Limited data set. eCFR, 45 CFR 164.514

A covered entity may use or disclose a limited data set under paragraph (e)(1) of this…

A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations. eCFR, 45 CFR 164.514

45 CFR 164.524(a)(1), the patient's right of access
the patient's right to see or copy the record

an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set eCFR, 45 CFR 164.524

United States, federal

an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set eCFR, 45 CFR 164.524

an individual has a right of access to inspect and obtain a copy of protected health…

an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set, for as long as the protected health information is maintained in the designated record set eCFR, 45 CFR 164.524

45 CFR 164.530(j)(2), keeping HIPAA documentation
keeping records, or for how long

A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later. eCFR, 45 CFR 164.530

United States, federal

Implementation specification: Retention period. eCFR, 45 CFR 164.530

A covered entity must retain the documentation required by paragraph (j)(1) of this…

A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later. eCFR, 45 CFR 164.530

Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are
a duty of confidentiality

See also the conditions and safeguards in Article 9(3) of the legislation.gov.uk, Data Protection Act 2018 Schedule 1

United Kingdom

In this paragraph “health or social care purposes” means the purposes of legislation.gov.uk, Data Protection Act 2018 Schedule 1

In this paragraph “health or social care purposes” means the purposes of

In this paragraph “health or social care purposes” means the purposes of legislation.gov.uk, Data Protection Act 2018 Schedule 1

Florida Statutes 456.057(12) and (13), records owners leaving practice
what happens to records when a practice closes, a doctor leaves or a business is wound up

records owners shall place an advertisement in the local newspaper or notify patients, in writing, when they are terminating practice, retiring, or relocating, and no longer available to patients, and offer patients the opportunity to obtain a copy of their medical record. Online Sunshine, Florida Statutes 456.057

a US state

Notwithstanding the provisions of s. 456.058, records owners shall notify the appropriate board office when they are terminating practice Online Sunshine, Florida Statutes 456.057

records owners shall notify the appropriate board office when they are terminating…

records owners shall notify the appropriate board office when they are terminating practice, retiring, or relocating, and no longer available to patients, specifying who the new records owner is and where medical records can be found. Online Sunshine, Florida Statutes 456.057

GMC, Confidentiality: good practice in handling patient information
a duty of confidentiality

This guidance sets out eight principles of confidentiality that you should apply to your practice. General Medical Council guidance page

United Kingdom

It was updated on 25 May 2018 to reflect the requirements of the General Data Protection Regulation and Data Protection Act 2018 General Medical Council guidance page

This guidance sets out eight principles of confidentiality that you should apply to your…

This guidance sets out eight principles of confidentiality that you should apply to your practice. It provides a framework to help you decide when you can share information. General Medical Council guidance page

Quoted wording for all 27 answers
  • 11 U.S.C. 351, disposal of patient records in bankruptcy, LII, 11 U.S. Code 351, read 2026-11-09, The duty it sets: If a health care business commences a case under chapter 7, 9, or 11, and the trustee does not have a sufficient amount of funds to pay for the storage of patient records in the manner required under applicable Federal or State law
  • 11 U.S.C. 351, disposal of patient records in bankruptcy, LII, 11 U.S. Code 351, read 2026-11-09, Where it applies: 11 U.S. Code § 351 - Disposal of patient records
  • 11 U.S.C. 351, disposal of patient records in bankruptcy, LII, 11 U.S. Code 351, read 2026-11-09, What it says, in its own words: promptly publish notice, in 1 or more appropriate newspapers, that if patient records are not claimed by the patient or an insurance provider (if applicable law permits the insurance provider to make that claim) by the date that is 365 days after the date of that notification, the trustee will destroy the patient records
  • 42 CFR 482.24(b)(1), a Medicare hospital's record retention, eCFR, 42 CFR 482.24, read 2026-11-07, The duty it sets: Medical records must be retained in their original or legally reproduced form for a period of at least 5 years.
  • 42 CFR 482.24(b)(1), a Medicare hospital's record retention, eCFR, 42 CFR 482.24, read 2026-11-07, Where it applies: Medical records must be retained in their original or legally reproduced form for a period of at least 5 years.
  • 42 CFR 482.24(b)(1), a Medicare hospital's record retention, eCFR, 42 CFR 482.24, read 2026-11-07, What it says, in its own words: Medical records must be retained in their original or legally reproduced form for a period of at least 5 years.
  • 45 CFR 164.502(a)(5)(ii)(B), what counts as a sale, eCFR, 45 CFR 164.502, read 2026-11-02, The duty it sets: where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information
  • 45 CFR 164.502(a)(5)(ii)(B), what counts as a sale, eCFR, 45 CFR 164.502, read 2026-11-02, Where it applies: a disclosure of protected health information by a covered entity or business associate, if applicable
  • 45 CFR 164.502(a)(5)(ii)(B), what counts as a sale, eCFR, 45 CFR 164.502, read 2026-11-02, What it says, in its own words: a disclosure of protected health information by a covered entity or business associate, if applicable, where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information.
  • 45 CFR 164.514(e), the limited data set, eCFR, 45 CFR 164.514, read 2026-11-05, The duty it sets: A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations.
  • 45 CFR 164.514(e), the limited data set, eCFR, 45 CFR 164.514, read 2026-11-05, Where it applies: Standard: Limited data set.
  • 45 CFR 164.514(e), the limited data set, eCFR, 45 CFR 164.514, read 2026-11-05, What it says, in its own words: A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only for the purposes of research, public health, or health care operations.
  • 45 CFR 164.524(a)(1), the patient's right of access, eCFR, 45 CFR 164.524, read 2026-11-07, The duty it sets: an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set
  • 45 CFR 164.524(a)(1), the patient's right of access, eCFR, 45 CFR 164.524, read 2026-11-07, Where it applies: an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set
  • 45 CFR 164.524(a)(1), the patient's right of access, eCFR, 45 CFR 164.524, read 2026-11-07, What it says, in its own words: an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set, for as long as the protected health information is maintained in the designated record set
  • 45 CFR 164.530(j)(2), keeping HIPAA documentation, eCFR, 45 CFR 164.530, read 2026-11-02, The duty it sets: A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later.
  • 45 CFR 164.530(j)(2), keeping HIPAA documentation, eCFR, 45 CFR 164.530, read 2026-11-02, Where it applies: Implementation specification: Retention period.
  • 45 CFR 164.530(j)(2), keeping HIPAA documentation, eCFR, 45 CFR 164.530, read 2026-11-02, What it says, in its own words: A covered entity must retain the documentation required by paragraph (j)(1) of this section for six years from the date of its creation or the date when it last was in effect, whichever is later.
  • Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are, legislation.gov.uk, Data Protection Act 2018 Schedule 1, read 2026-11-07, The duty it sets: See also the conditions and safeguards in Article 9(3) of the
  • Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are, legislation.gov.uk, Data Protection Act 2018 Schedule 1, read 2026-11-07, Where it applies: In this paragraph “health or social care purposes” means the purposes of
  • Data Protection Act 2018, Schedule 1 paragraph 2(2), what health or social care purposes are, legislation.gov.uk, Data Protection Act 2018 Schedule 1, read 2026-11-07, What it says, in its own words: In this paragraph “health or social care purposes” means the purposes of
  • Florida Statutes 456.057(12) and (13), records owners leaving practice, Online Sunshine, Florida Statutes 456.057, read 2026-11-09, The duty it sets: records owners shall place an advertisement in the local newspaper or notify patients, in writing, when they are terminating practice, retiring, or relocating, and no longer available to patients, and offer patients the opportunity to obtain a copy of their medical record.
  • Florida Statutes 456.057(12) and (13), records owners leaving practice, Online Sunshine, Florida Statutes 456.057, read 2026-11-09, Where it applies: Notwithstanding the provisions of s. 456.058, records owners shall notify the appropriate board office when they are terminating practice
  • Florida Statutes 456.057(12) and (13), records owners leaving practice, Online Sunshine, Florida Statutes 456.057, read 2026-11-09, What it says, in its own words: records owners shall notify the appropriate board office when they are terminating practice, retiring, or relocating, and no longer available to patients, specifying who the new records owner is and where medical records can be found.
  • GMC, Confidentiality: good practice in handling patient information, General Medical Council guidance page, read 2026-11-09, The duty it sets: This guidance sets out eight principles of confidentiality that you should apply to your practice.
  • GMC, Confidentiality: good practice in handling patient information, General Medical Council guidance page, read 2026-11-09, Where it applies: It was updated on 25 May 2018 to reflect the requirements of the General Data Protection Regulation and Data Protection Act 2018
  • GMC, Confidentiality: good practice in handling patient information, General Medical Council guidance page, read 2026-11-09, What it says, in its own words: This guidance sets out eight principles of confidentiality that you should apply to your practice. It provides a framework to help you decide when you can share information.

Documents we read but did not count

2 named documents were read and left out because they are not what this board covers; each reason is below. They are counted, never answered.

How the figures are worked out

Each rule's own 45 CFR Part 164, 42 CFR 482.24, Florida, Texas and California medical-record rules, the Bankruptcy Code, the GMC's guidance and the Data Protection Act 2018 were read through estate-fetch and stored whole (sha256 on every row).

For every text, three questions were answered from its own words: the duty it sets, where it applies, what it says, in its own words.

Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the text read does not address the question.

A rule with several texts reads 'varies' where they disagree.

9 rules, 9 texts.

All 11 sources
Reference or embed these figures

2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.

The duty it sets, by rule: a duty of confidentiality 2 of 9, what happens to records when a practice closes, a doctor leaves or a business is wound up 2 of 9, keeping records, or for how long 2 of 9, using, selling or de-identifying the information 2 of 9, the patient's right to see or copy the record 1 of 9 (9 rules, read 9 November 2026).

Where it applies, by rule: United States, federal 6 of 9, United Kingdom 2 of 9, a US state 1 of 9 (9 rules, read 9 November 2026).

What it says, in its own words, by rule: stated 9 of 9 (9 rules, read 9 November 2026).

Suggested citation: "Who keeps a closing practice's records, and what may be done with them", updated 2026-11-09, https://sellmedicalrecordstoai.com/datasets/medical-records-custody-law/.

Embed code, no JavaScript
2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.
Who keeps a closing practice's records, and what may be done with them, sellmedicalrecordstoai.com

Download formats: JSON, CSV, Markdown.

CSV download (27 answers, worked out 2026-11-09)

Questions this data answers

Who must keep a practice's medical records when it closes or its doctor retires, for how long, and what do the sale and de-identification rules say about licensing them?

2 of 9 rules read say what happens to records when a practice closes, a doctor leaves or a business is wound up, newest read 9 November 2026.

Ask about our old records