The retention of medical records is, unfortunately, not a cut and dry sentence highlighted in the opening paragraph of HIPAA. There are several factors to consider when determining what documents need to be stored and for how long. It is important to realize that HIPAA makes no firm assertion as to medical records retention leaving the long-term storage of medical records to state and other federal laws.