This is because HIPAA laws demand the users to store the medical records for six years, while federal law demands them to retain the medical records for at least seven years after the medical service is provided to the patients. In addition, the timeline goes up to ten years for Medicare patients.