how long must hipaa records be kept
So how long must these logs be retained and stored â According to HIPAA regulations, these logs must be kept for a minimum of six years. While some companies do keep records around much longer, this is the absolute minimum required. This applies to the date the log was last in effect.