How long a clinic must keep medical records in India

Retention rules come from several places at once and vary by state and speciality. This is a working summary; confirm the periods that apply to your practice with your own advisor.

The periods

• Outpatient records — 3 years from the date of the last entry, under the Indian Medical Council (Professional Conduct) Regulations. This is the baseline most clinics work to.
• Indoor case papers — 3 years under the same regulations, with many states and accreditation standards asking for five.
• Medico-legal cases — until the case concludes, and sensibly for some years after. Never apply the three-year rule to an MLC.
• PNDT records — 2 years after the notified period, and inspected. If you have an ultrasound, treat these as the strictest thing you keep.
• Schedule H1 register — 3 years.Details here.
• Schedule X records — 2 years.
• GST records — 6 years from the due date of the annual return. Longer than the clinical minimum, which surprises people.

Why the minimum is the wrong target

Two practical reasons to keep records longer than the rules require.

Consumer complaints. The limitation period under the Consumer Protection Act is two years from the cause of action, but the cause of action is not always the date of treatment, and condonation of delay is routinely granted. A record you destroyed on the three-year anniversary is a record you cannot produce in your own defence.

Clinical continuity. A patient's history from six years ago is often the most useful thing in the file. Retention minimums are a legal floor, not a clinical recommendation.

Digital storage costs almost nothing. The reason paper records were destroyed on schedule was physical space; that constraint no longer applies.

Retention and the DPDP Act

The Digital Personal Data Protection Act says personal data should not be kept longer than necessary for the purpose. That sits alongside, not above, a statutory retention obligation — where the law requires you to keep a record, keeping it is the necessary purpose.

What the Act does change: you need a written policy saying how long you keep what, and you need to be able to act on an erasure request for data you are not required to keep.The full checklist.

What happens when a clinic closes

Closing does not end the retention obligation. Records must remain available for the balance of their retention period, and patients must be able to obtain copies. In practice that means:

• Export everything before you switch anything off.
• Keep the export somewhere durable, not on the clinic laptop you are selling.
• Tell patients where to write for a copy, and answer when they do.

This is also why closing an account in good software should hide the records, not delete them — and why you should establish that before you sign up rather than when you leave.More on leaving cleanly.

A retention policy worth writing down

One page, on the wall, saying:

1. What categories of record the clinic holds.
2. How long each is kept, and from when.
3. Who decides that something can be destroyed.
4. How destruction is recorded.
5. Who answers a patient's request for a copy, and within how long.

Clinikr keeps records for as long as your clinic keeps them — we do not delete on our own schedule — and lets youexport everything as CSV at any time, including after you stop paying.