This policy describes and defines the retention and destruction of Protected Health Information (PHI) of patients of the healthcare component of Pacific University. The entire record must be maintained for the required period.

This policy is in accordance with all regulations related to the retention and storage of PHI, including but not limited to the follow healthcare regulations: HIPAA, HITECH, Oregon Administrative Rules, Oregon Revised Statutes and Oregon Medical Board.  In cases where regulation and laws offer conflicting retention schedules, Pacific University will comply with the most restrictive requirement.

Additional Key Documents
HCOCC Record Retention Schedule
FRM-4840-1 Certificate of Destruction - On Site
FRM-4840-2 Certificate of Destruction - Vendor