Record Retention & Legal Protection
Your privacy is important to us. We are committed to protecting your personal and health information with transparency, integrity and confidentiality while delivering quality healthcare services.
Record Retention & Legal Protection Policy
Sri Lakshmi Multi Speciality Hospital recognises that accurate, complete and secure medical records are essential for quality patient care, continuity of treatment, legal compliance, clinical governance and organisational accountability. Medical records constitute important legal documents and shall be maintained with the highest standards of integrity, confidentiality and security.
This Policy has been developed with reference to the National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023, the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Clinical Establishments (Registration and Regulation) Act, 2010 (where applicable), the Tamil Nadu Clinical Establishments (Regulation) Act, 1997 (where applicable), the Consumer Protection Act, 2019, the Indian Evidence Act, 1872, the Bio-Medical Waste Management Rules, 2016 (for applicable records), and the standards prescribed by the National Accreditation Board for Hospitals & Healthcare Providers (NABH).
The Hospital is committed to retaining records for the minimum periods required under applicable laws and recognised professional standards while ensuring secure storage, controlled access, lawful preservation and confidential disposal of records.
Purpose of this Policy
The purpose of this Policy is to establish a structured framework for the retention, preservation, retrieval, protection and lawful disposal of Hospital records. The Policy supports patient care, legal compliance, audit readiness, risk management and effective Hospital administration.
This Policy also ensures that medical records remain available whenever required for patient treatment, regulatory inspections, accreditation assessments, insurance verification or medico-legal proceedings.
Record Management
Proper creation, maintenance and preservation of records.
Legal Protection
Supporting legal compliance and defence of medico-legal matters.
Confidentiality
Protecting patient information throughout the retention period.
Compliance
Supporting NABH standards and statutory obligations.
Scope of this Policy
This Policy applies to all patient records and Hospital documents generated, received, maintained or stored by Sri Lakshmi Multi Speciality Hospital, irrespective of whether the records are maintained in paper or electronic form.
It applies to all departments including Outpatient Services, Inpatient Services, Emergency Department, Operation Theatre, Intensive Care Units, Pharmacy, Laboratory, Radiology, Billing, Medical Records Department, Administration and all other Hospital units responsible for creating or maintaining records.
"Every Hospital record is an important clinical, administrative and legal document that shall be maintained accurately, securely and confidentially."
General Principles of Record Retention
Sri Lakshmi Multi Speciality Hospital shall retain records for periods that comply with applicable Indian laws, professional regulations, contractual obligations and recognised healthcare standards. Where different legal requirements apply, the Hospital shall follow the longer applicable retention period unless otherwise directed by a competent authority.
Records shall remain complete, accurate, legible, retrievable and protected from unauthorised access, alteration, destruction or loss throughout their retention period.
Our Record Management Commitment
Sri Lakshmi Multi Speciality Hospital is committed to preserving medical records responsibly, supporting patient care, legal compliance, regulatory inspections, accreditation requirements and the protection of patient rights.
Categories of Hospital Records
Sri Lakshmi Multi Speciality Hospital shall classify, organise and maintain Hospital records according to their clinical, administrative, legal and operational purpose. Proper categorisation supports efficient record retrieval, regulatory compliance, continuity of patient care and medico-legal protection.
The following categories of records are maintained by the Hospital as part of routine healthcare operations.
Hospital Record Categories
- Outpatient (OPD) medical records.
- Inpatient (IPD) medical records.
- Emergency department records.
- Operation Theatre (OT) records.
- Intensive Care Unit (ICU) records.
- Consent forms and procedure records.
- Laboratory reports.
- Radiology and imaging records.
- Prescription records.
- Medication administration records.
- Discharge summaries.
- Billing and financial records.
- Insurance and TPA records.
- Medico-Legal Case (MLC) records.
- Death records.
- Electronic Medical Records (EMR).
- Administrative and statutory records.
Minimum Record Retention Periods
Sri Lakshmi Multi Speciality Hospital shall retain medical and administrative records for periods that comply with applicable Indian laws, professional regulations, contractual obligations and recognised healthcare best practices. Where different legal requirements apply, the Hospital shall retain records for the longer applicable period unless otherwise directed by a competent authority.
| Record Type | Recommended Minimum Retention Period |
|---|---|
| Outpatient (OPD) Records | Minimum 3 Years |
| Inpatient (IPD) Records | Minimum 10 Years |
| Emergency Department Records | Minimum 10 Years |
| Operation Theatre Records | Minimum 10 Years |
| ICU Records | Minimum 10 Years |
| Consent Forms | Minimum 10 Years or along with the related medical record, whichever is longer |
| Laboratory Reports | Minimum 10 Years |
| Radiology / CT / MRI / Imaging Records | Minimum 10 Years |
| Prescription Records | Minimum 10 Years |
| Discharge Summaries | Minimum 10 Years |
| Billing & Financial Records | Minimum 8 Years or longer where required by applicable tax or financial laws |
| Insurance / TPA Records | Minimum 8 Years |
| Medico-Legal Case (MLC) Records | Until final disposal of the case and thereafter in accordance with applicable law and Hospital policy; generally not less than 10 Years |
| Birth & Death Records | Minimum 10 Years or longer where required by applicable law |
| Electronic Medical Records (EMR) | Same retention period as the corresponding physical medical record |
"Where litigation, regulatory investigation, audit, insurance claim or legal proceedings are pending, the relevant records shall not be destroyed until all legal obligations have been fulfilled, irrespective of the normal retention period."
Record Storage & Preservation
Hospital records shall be stored in a manner that protects them from unauthorised access, alteration, loss, damage, deterioration or destruction. Appropriate physical and electronic safeguards shall be implemented throughout the retention period.
Access Control & Record Security
Access to Hospital records shall be restricted to authorised personnel whose duties require such access. Appropriate authentication, authorisation and monitoring mechanisms shall be maintained to protect confidential patient information.
Requests for access to records by patients, authorised representatives, regulatory authorities or courts shall be handled in accordance with applicable laws, Hospital policies and documented procedures.
Retrieval of Hospital Records
Sri Lakshmi Multi Speciality Hospital shall maintain an efficient record retrieval system to ensure that authorised medical records are readily available for patient care, regulatory compliance, legal proceedings, audits and other legitimate purposes. Retrieval procedures shall preserve record integrity, confidentiality and traceability.
Every request for retrieval shall be documented, authorised where required and processed within a reasonable timeframe in accordance with Hospital procedures and applicable laws.
Retrieval Principles
- Timely retrieval of authorised records.
- Maintenance of retrieval logs.
- Protection against loss or alteration.
- Verification of requester identity where applicable.
- Confidential handling during retrieval and transport.
- Prompt return of records after authorised use.
Record Availability
Efficient retrieval supports continuity of patient care, legal compliance and operational efficiency while maintaining confidentiality and record integrity.
Legal Hold & Medico-Legal Cases
Where any Hospital record is connected with pending or anticipated litigation, consumer complaints, police investigations, medico-legal cases, insurance claims, regulatory inspections, government inquiries or judicial proceedings, the record shall immediately be placed under a Legal Hold.
Records subject to a Legal Hold shall not be altered, destroyed, archived for disposal or otherwise removed until the matter has been fully resolved and all legal, regulatory and organisational retention obligations have been satisfied.
"Legal Hold overrides the normal record retention period. Records involved in legal or regulatory proceedings shall be preserved until formal written authorisation for release is provided."
Examples Requiring Legal Hold
- Medical negligence allegations.
- Consumer Commission proceedings.
- Court proceedings.
- Police investigations.
- Insurance disputes or claims.
- Government or statutory inspections.
- Medico-Legal Case (MLC) investigations.
Secure Disposal of Records
Records shall be disposed of only after expiry of the applicable retention period and only when there is no pending Legal Hold, litigation, regulatory requirement or other lawful obligation requiring continued preservation.
Disposal shall be carried out using secure methods that prevent unauthorised disclosure, reconstruction or misuse of confidential patient information. All disposals shall be authorised, documented and recorded in the Hospital's Record Disposal Register.
Electronic Medical Records (EMR)
Electronic Medical Records (EMRs) shall be maintained with the same legal validity, confidentiality and retention requirements as paper medical records. Appropriate safeguards shall be implemented to protect electronic records from unauthorised access, alteration, corruption, accidental deletion or cyber threats.
The Hospital shall implement appropriate backup, cybersecurity and disaster recovery measures to ensure the availability, integrity and recoverability of electronic medical records throughout the applicable retention period.
EMR Security Measures
- Role-based user access controls.
- Strong password and authentication measures.
- Regular data backup procedures.
- Disaster recovery and business continuity planning.
- Audit trails for authorised access and modifications.
- Protection against malware and cyber threats.
Digital Record Protection
Secure electronic record management strengthens patient safety, regulatory compliance, medico-legal preparedness and continuity of healthcare services.
Responsibilities of Hospital Personnel
Every employee, consultant, registered medical practitioner, nurse, pharmacist, technician, administrative employee, Medical Records Department personnel and any other authorised individual responsible for creating, handling, storing or retrieving Hospital records shall comply with this Policy and applicable statutory requirements.
Failure to comply with this Policy may result in disciplinary action and, where applicable, legal or regulatory consequences.
Hospital Responsibilities
Sri Lakshmi Multi Speciality Hospital shall establish, maintain and periodically review appropriate systems, infrastructure, policies and procedures for effective medical record management. Hospital Management shall ensure that records remain secure, accessible and protected throughout their lifecycle.
Hospital Commitments
- Maintain a Medical Records Department (MRD) or equivalent record management system.
- Provide secure physical and electronic storage facilities.
- Implement access controls and information security safeguards.
- Conduct periodic record management audits.
- Ensure legal preservation of records during investigations or litigation.
- Support compliance with NABH standards and applicable Indian laws.
Governance Commitment
Hospital Management is committed to maintaining accurate, secure and legally compliant records that support patient safety, continuity of care, accreditation and medico-legal preparedness.
Continuous Improvement
Sri Lakshmi Multi Speciality Hospital shall periodically review record management practices, audit findings, technological developments and changes in applicable laws to strengthen record retention, information security and legal compliance.
Lessons learned from audits, inspections, medico-legal matters, patient feedback and internal quality reviews shall be incorporated into Hospital policies, procedures and staff training programmes.
Continuous Quality Improvement
Continuous review of record management practices improves patient safety, operational efficiency, legal readiness and compliance with NABH accreditation requirements.
Policy Review
This Record Retention & Legal Protection Policy shall be reviewed periodically by Hospital Management to ensure continued compliance with applicable Indian laws, regulatory requirements, professional standards and NABH accreditation criteria.
"Accurate medical records are essential for quality healthcare, patient safety and legal protection."
Contact Information
Questions regarding this Policy, requests relating to medical records or concerns regarding record management may be directed to the Medical Records Department (MRD) or Hospital Administration.
Sri Lakshmi Multi Speciality Hospital
Address:
No. 5/91, Near Apollo Hospital OMR,
Church Road, Perungudi,
Chennai – 600096, Tamil Nadu, India.
Phone: +91 98407 92932
Email: contactus@slmsh.com
Regulatory & Standards Reference
This Record Retention & Legal Protection Policy has been developed with reference to applicable Indian laws, professional regulations and recognised healthcare standards governing medical records, information management and legal compliance.
Applicable Indian Laws & Regulations
- National Medical Commission (Registered Medical Practitioner – Professional Conduct) Regulations, 2023.
- Digital Personal Data Protection Act, 2023.
- Information Technology Act, 2000.
- Consumer Protection Act, 2019.
- Clinical Establishments (Registration and Regulation) Act, 2010 (where applicable).
- Tamil Nadu Clinical Establishments (Regulation) Act, 1997 and applicable Rules.
- Indian Evidence Act, 1872.
- Bio-Medical Waste Management Rules, 2016 (for applicable records).
- Applicable Central and State Government healthcare record retention requirements.
Quality & Accreditation Standards
- NABH Standards – Medical Records Services (MRS).
- NABH Standards – Information Management System (IMS).
- NABH Standards – Governance & Leadership (GL).
- NABH Standards – Continuous Quality Improvement (CQI).
- Professional Medical Record Management Principles.
- Healthcare Information Governance Best Practices.
"Sri Lakshmi Multi Speciality Hospital is committed to maintaining accurate, secure and legally compliant medical records that support quality patient care, continuity of treatment, regulatory compliance, medico-legal protection and future NABH accreditation, in accordance with applicable Indian laws and recognised professional standards."