Most people should keep medical billing records for at least seven years. That covers the longest federal requirement, gives you protection for tax audits, and outlasts the statute of limitations on medical debt in nearly every state. But certain situations, especially records involving children or ongoing legal disputes, call for holding on even longer.
The right number of years depends on why you might need the records. Tax deductions, insurance disputes, debt collection, and legal claims each have their own timelines, and the smartest approach is to keep records long enough to satisfy all of them.
The Seven-Year Federal Baseline
The Centers for Medicare and Medicaid Services requires providers to maintain medical records for seven years from the date of service. While this rule technically applies to healthcare providers rather than patients, it’s a useful benchmark. If your provider is expected to keep billing documentation for seven years, you should plan on doing the same. After that window closes, your provider may no longer have copies to give you if a question comes up.
Tax Records and IRS Timelines
If you deduct medical expenses on your tax return, the IRS expects you to have documentation to back up those claims. The general rule is to keep tax-related records for at least three years from the date you filed the return. If you file an amended return to claim a medical deduction you missed, you have three years from the original filing date or two years from when you paid the tax, whichever is later.
In practice, this means a medical bill from 2024 that you deduct on your 2024 tax return (filed in April 2025) should be kept until at least April 2028. If there’s any chance of an amended return or a more complex tax situation, such as underreported income, the IRS can look back six years. Keeping billing records for seven years covers you comfortably on the tax front.
Insurance Disputes and Appeals
If your health insurer denies a claim, you have 180 days from the denial notice to file an internal appeal. If that appeal is denied, you typically get 60 days to request an external review, though some states allow more time. These windows are relatively short, so insurance disputes aren’t the main reason to keep records for years.
That said, billing errors and surprise charges sometimes surface months after treatment. Keeping your explanation of benefits statements (EOBs) and itemized bills for at least a few years lets you catch duplicate charges, verify that your insurer processed everything correctly, and push back if something looks wrong. If you’re in the middle of any kind of payment plan or dispute, hold on to every piece of paper until it’s fully resolved, then start your retention clock.
Medical Debt and Statutes of Limitations
Every state sets its own statute of limitations for how long a creditor can sue you over unpaid medical debt. These timelines typically range from three to six years, though a handful of states allow longer. Once the statute of limitations expires, a collector can no longer take you to court over the debt (though they may still contact you about it).
Your billing records are your best defense if a collector pursues a debt you’ve already paid or one that’s past the legal deadline. Without documentation, you’re left arguing from memory. Keeping records for at least six years after the date of service protects you in most states. If your state has a longer window, adjust accordingly.
Legal Claims and Malpractice
Medical malpractice statutes of limitations vary widely by state, but most allow patients two to three years from the date of injury to file a claim. The complication is the “discovery rule”: in most states, the clock doesn’t start until you know (or reasonably should have known) that a medical error caused harm. That means a surgical billing record from five years ago could still be relevant if complications from that procedure only became apparent recently.
Billing records establish what procedures were performed, when, and by whom. They’re not a substitute for full medical records, but they create a paper trail that can be critical if you ever need to reconstruct a timeline of care.
Records Involving Children
If you’re holding on to medical billing records for a child, the timeline stretches significantly. The American Academy of Pediatrics recommends retaining pediatric medical records for at least 10 years or until the child reaches the age of majority (18 in most states) plus the applicable state statute of limitations for lawsuits, whichever is longer.
In some states, the statute of limitations for malpractice doesn’t begin until the child turns 18. In a state with a two-year statute of limitations, a malpractice case related to newborn care could legally be filed 20 years after delivery. That’s an extreme example, but it illustrates why parents should keep children’s records far longer than their own. A safe rule of thumb is to hold on to your child’s billing records until they are at least 25 to 28 years old, depending on your state’s laws.
What to Actually Keep
Not every piece of paper from a medical visit is worth filing. Focus on the documents that carry the most information per page:
- Itemized bills showing procedure codes, dates of service, and charges
- Explanation of benefits (EOB) statements from your insurer, which show what was billed, what the insurer paid, and what you owe
- Payment receipts and bank or credit card statements proving you paid a balance
- Collection notices or correspondence about disputed charges
- Tax forms related to health savings accounts (HSAs) or medical expense deductions
You don’t need to keep appointment reminder cards, general brochures, or duplicate copies of the same bill. If you receive both a provider bill and an EOB for the same visit, keep both, since they contain different information.
Storing and Disposing of Records Safely
Medical billing records contain sensitive personal information: your name, date of birth, insurance ID, and details about your health conditions. Store paper records in a locked file cabinet or fireproof safe. Digital copies should be kept in an encrypted folder or a password-protected cloud service, not loose on your desktop.
Scanning paper records into PDFs is a practical way to reduce clutter while preserving everything. If you go this route, keep digital backups in at least two locations (for example, an external hard drive and a cloud account) and verify that scans are legible before shredding the originals.
When it’s finally time to dispose of records, don’t just toss them in the recycling bin. Cross-cut shredding is the standard for paper documents containing personal health information. For electronic files, simply deleting them isn’t enough, since deleted files can often be recovered. Use a file-wiping tool that overwrites the data, or physically destroy old hard drives and USB drives. The U.S. Department of Health and Human Services points to NIST Special Publication 800-88 as the technical standard for securely destroying electronic media, but for most people, a free disk-wiping utility handles the job.