Answer
HIPAA includes documentation retention requirements, and other legal, contractual, operational, or state requirements may apply to particular records. Define and document a schedule for the record type rather than assuming one universal HIPAA period.
References
- Documentation requirements HHS Office for Civil Rights