Veterinary record retention requirements are set state by state, with most jurisdictions demanding that medical records be kept for three to five years after an animal’s last visit. Controlled substance logs carry a separate federal minimum of two years under DEA rules, and many states push that higher. Falling short of either clock can mean fines, license discipline, and, if a malpractice claim arrives, no evidence to defend yourself with.
How Long Veterinary Records Must Be Kept
Every state veterinary board sets its own number. The range runs from as few as two years to six or more, and the most common window is three to five years measured from the date of the animal’s last visit. The American Association of Veterinary State Boards builds its model recordkeeping regulations around a placeholder period that each jurisdiction fills in, so no single national rule applies.1American Association of Veterinary State Boards. Model Regulations: Medical Recordkeeping Checking directly with your state board is the only reliable way to confirm your exact obligation.
The retention clock resets each time a veterinarian performs a new examination, provides treatment, or refills a prescription. If the animal dies or simply stops coming in, the facility still has to hold the records for the full state-mandated duration from that last contact.
State boards treat recordkeeping violations as a serious matter because incomplete records make it impossible to evaluate whether a standard of care was met. Missing the minimum can trigger administrative fines and disciplinary action against the practitioner’s license.
Controlled Substance Record Requirements
Federal law imposes a separate, overlapping requirement for any records involving scheduled drugs. Under 21 CFR 1304.04, every inventory and record related to controlled substances must be maintained for at least two years from the date the record was created, and kept available for inspection and copying by DEA officials.2eCFR. 21 CFR 1304.04 – Maintenance of Records and Inventories The underlying statute, 21 U.S.C. 827, requires these records to be maintained separately from other business records, or at minimum kept in a form where the required information is readily retrievable.3Office of the Law Revision Counsel. 21 USC 827 – Records and Reports of Registrants
Two years is the federal floor. Some states push it to five years or more, and when state and federal requirements conflict, the stricter one controls.4American Animal Hospital Association. Controlled Substance FAQs Keeping controlled substance logs for the full duration of your state’s general retention period is the simplest way to stay compliant with both regimes.
The DEA has statutory authority to enter any registered practitioner’s premises and inspect, copy, and verify controlled substance records.5Office of the Law Revision Counsel. 21 USC 880 – Administrative Inspections and Warrants These inspections can be unannounced, and sloppy logs are one of the first red flags investigators look for when checking for diversion of medications like ketamine and tramadol.
Disposal of expired or unwanted controlled substances must also be documented. Federal regulations allow several disposal paths: on-site destruction, delivery to a registered reverse distributor, return to the manufacturer, or requesting DEA assistance via Form 41.6eCFR. 21 CFR Part 1317 Subpart A – Disposal of Controlled Substances by Registrants Whichever route you take, retain the disposal records alongside your other DEA logs.
Why Keeping Records Longer Than the Minimum Pays Off
The minimum retention period and the window in which someone can sue for malpractice are two different clocks, and they do not always align. Statutes of limitations for veterinary malpractice vary by state and by how a claim is framed. A claim pleaded as injury to personal property typically carries a two-to-three-year limitation, but a malpractice-specific statute may run longer. Most states also recognize a discovery rule that starts the clock when the owner learns of the injury rather than when it occurred, which can push exposure well past the record retention floor.
If a lawsuit arrives after you have destroyed the file, you have lost the single most important piece of evidence for your defense. Many risk management advisors recommend retaining all records for at least seven years, regardless of what the state minimum requires. The cost of a few extra years of storage is trivial compared to the cost of litigating without the chart.
What Belongs in a Complete Veterinary Record
Retention only matters if the record is worth retaining. The AAVSB’s model regulations identify 22 categories of information that should appear in a medical record when applicable, and state requirements track these closely.7American Association of Veterinary State Boards. 2025 Model Regulations for Veterinary Medical Recordkeeping
Identification and Visit Entries
Each record identifies the client (name, address, phone, email) and any authorized representative who can make care decisions. The patient entry includes the animal’s name or unique identifier, species, breed, age, sex, color, and distinctive markings. Every visit entry records the date and time, the treating veterinarian, and whoever created or updated the entry. If artificial intelligence was used to generate any portion of the record, that must be disclosed.
Clinical Content
Reason for the visit, relevant history, examination findings, lab results, diagnostic images, interpretations, and differential diagnoses all belong in the chart. Treatment plans must specify medication name, dosage, strength, frequency, quantity, route, refills, duration, and directions, along with the prescribing veterinarian. For hospitalized animals, dated progress notes are required at least every 24 hours.7American Association of Veterinary State Boards. 2025 Model Regulations for Veterinary Medical Recordkeeping
Rabies vaccination certificates in many states must include the vaccine producer and lot number, so recording that information routinely is sound practice even where the general immunization standard is less specific.
Surgery, Anesthesia, Consent, and Communication
Procedures require a description of what was done, complications, everyone involved, drugs administered with timing, and an anesthesia or sedation monitoring record identifying who performed the monitoring.8American Animal Hospital Association. 2020 AAHA Anesthesia and Monitoring Guidelines for Dogs and Cats Informed consent must be documented before treatment, and any services the client declined must be noted. That last item matters more than practices often realize: if an owner refuses a recommended diagnostic and the animal is later harmed by the undiagnosed condition, the notation is the practice’s best defense.
Telemedicine
When a medical determination is made via telemedicine, the record must include a written statement describing the digital information the veterinarian used, whether that was photographs, video, owner-reported vitals, or wearable monitor data.1American Association of Veterinary State Boards. Model Regulations: Medical Recordkeeping Documentation standards for virtual visits match those for in-person visits.
HIPAA Does Not Apply, But Confidentiality Still Does
Veterinary practices are not HIPAA-covered entities. The law reaches only providers who conduct specific electronic healthcare transactions for which HHS has adopted standards, and veterinary practices do not qualify. State data privacy laws, breach notification statutes, and professional confidentiality obligations still apply to records containing client personal information.
The AAVSB model regulations require that records be safeguarded against loss, tampering, and access by unauthorized persons, and that everyone with access treat the information as confidential.1American Association of Veterinary State Boards. Model Regulations: Medical Recordkeeping The AAVSB warns that practices should not assume commercial software vendors have adequate data security, and notes that some vendor contracts include provisions releasing practice data back to the software company. Vetting what your contract allows the vendor to do with your data is a compliance obligation, not an afterthought.
Who Owns the Record, and Releasing It to Clients
Across most jurisdictions, the veterinary practice owns the physical or digital record itself, while the client has a right to the medical information contained within it. A pet owner cannot demand the original file, but they can require a copy. The AVMA frames practice data as an asset over which the practice has exclusive rights to decide how data is stored, accessed, and licensed, and takes the position that software vendors must provide a copy of the practice’s data in a usable, transferable electronic format on request.9American Veterinary Medical Association. Principles of Veterinary Data Ownership and Stewardship
When a client asks for a copy, the AAVSB model regulations require that it be provided “in a timely manner upon reasonable request.”7American Association of Veterinary State Boards. 2025 Model Regulations for Veterinary Medical Recordkeeping A critically ill animal being transferred to a specialist warrants same-day release; a routine historical request can take longer. Boards evaluate timeliness case by case.
Diagnostic images must be copied at a quality that preserves the original. Original film radiographs, when requested, should be sent directly to the requesting veterinarian or client with instructions for return, and digital images must be provided in a format that cannot be altered after copying.
Practices may charge a reasonable fee for copying time and materials, though specific limits vary by state. One rule is near-universal: a veterinarian generally cannot withhold records because the client owes money. The animal’s ongoing care takes priority over a billing dispute, and most state practice acts treat withholding as a disciplinary issue regardless of the account balance.
Record Obligations When a Practice Closes or Is Sold
When a facility closes, the AAVSB model framework imposes three notification duties: inform clients about the closure and how to obtain records, notify the state board about how records will be managed, and publish a public notice through electronic or print media explaining where records can be accessed.1American Association of Veterinary State Boards. Model Regulations: Medical Recordkeeping
The closing practice must either retain the records for the full jurisdictional retention period and allow clients reasonable access, or transfer them to one of three destinations:
- A purchasing practice that assumes responsibility for the records.
- A local veterinary facility that agrees to manage them and provide client access.
- A secure storage arrangement with a designated person responsible for client access.
Transferring records to a purchasing or successor practice during a sale does not require individual client authorization for each file. The model regulations specifically permit release without prior client consent when a closure or sale results in a transfer.1American Association of Veterinary State Boards. Model Regulations: Medical Recordkeeping This practical exception keeps patient records from falling into limbo every time a solo practitioner retires.
Disposing of Records After the Retention Period
Once the retention period ends, records cannot simply go in the trash. Paper documents should be shredded through a service that issues a certificate of destruction. Electronic records require secure erasure that overwrites data to prevent recovery. The point is protecting client personal information, not just medical history: names, addresses, phone numbers, and payment details are all embedded in those files.
Controlled substance disposal records are the exception to any purge. Retain them alongside your DEA logs rather than disposing of them with routine patient files. Federal inspection authority does not run on the same calendar as state record retention, and a clean paper trail for every gram of scheduled medication that entered and left your practice is the simplest insurance against a problem you never want to have.