How to Dispose of Old Medical Records in New Hampshire

Why Medical Records Are Different From Other Paper

A bank statement holds a number. A medical record holds a story. Diagnoses, prescriptions, test results, surgical notes, behavioral health visits, and pediatric histories all live on paper surviving long after the appointment ends. Medical identity theft costs victims an average of $13,500 according to the Ponemon Institute, and most of it is uninsured because the patient signed the original paperwork without thinking about destruction.

For New Hampshire providers, the obligations stack. The HIPAA Privacy Rule requires reasonable safeguards for protected health information. The HIPAA Security Rule sets technical standards for electronic data. New Hampshire Code of Administrative Rules Med 501.02 requires physicians to keep adult patient records for at least seven years from the last entry and minor records to age 19 plus seven years. Once the window closes, the records still need a compliant destruction path, not a recycling bin.

For New Hampshire households, the rules feel softer but the risk is the same. A discarded Explanation of Benefits with your name, member ID, and diagnosis code is enough for a thief to file a fake claim, refill a controlled substance, or build a fraudulent malpractice case. Our medical shredding service page covers the provider side, and this post pulls both sides together.

The privacy stakes also outlast the medical event itself. A diagnosis from 2008 still carries weight in a 2026 insurance underwriting decision. A controlled substance prescription from a decade ago still appears in pharmacy databases. A mental health note from college still matters when the patient applies for security clearance work. Old paper does not forget, so destruction has to be intentional.

What Counts as a Medical Record in 2026

The list is longer than most people guess. The HHS Office for Civil Rights treats anything with a name plus a health detail as protected health information. Here is what to pull out of the file cabinet, the kitchen drawer, and the attic box before you make the disposal plan.

• Patient charts and progress notes from physicians, dentists, chiropractors, and therapists.
• Explanation of Benefits forms from insurers, Medicare, Medicaid, and supplemental plans.
• Lab and imaging reports from Quest, LabCorp, Dartmouth-Hitchcock, Catholic Medical Center, and any other facility.
• Prescription labels and pill bottles. The label shows your name, prescriber, drug, and pharmacy.
• Hospital discharge summaries and after-visit instructions.
• Medical bills, payment plan letters, and collection notices.
• Insurance cards, both expired and current replacements.
• Sleep study reports, CPAP records, and durable medical equipment paperwork.
• Behavioral health and substance use records, which carry extra protection under 42 CFR Part 2.
• Pediatric immunization cards once the child reaches adulthood and has copies in their own records.
• Genetic testing reports and results. These carry indefinite sensitivity because genetic data does not change.
• Workers compensation injury reports. The form ties a name to a body part, a date of injury, and a diagnosis.

If any item shows a name plus a diagnosis, a treatment, a medication, or a member ID, treat it as a medical record. The cheapest path is shredding. The most expensive path is a breach notification letter and a state complaint.

How Long to Keep Medical Records in New Hampshire

Retention is the part most households and small practices get wrong. Either you keep nothing, which creates legal exposure, or you keep everything, which creates privacy exposure. The middle path is a calendar.

For New Hampshire providers

• Adult patient records: minimum seven years from the date of the last entry under NH Med 501.02.
• Minor patient records: until the patient turns 19, then seven more years.
• Mental health and substance use records: follow Med 501.02 for the floor, plus any longer state and federal requirements under 42 CFR Part 2.
• Medicare and Medicaid claims: CMS recommends at least 10 years for billing records.
• OSHA bloodborne pathogen exposure records: duration of employment plus 30 years.
• Radiology and imaging: typically five to seven years for the images, longer for the report.

For New Hampshire households

• Explanation of Benefits forms: one year after the claim closes, longer if you have a tax deduction or open appeal.
• Medical bills and payment receipts: three years for tax purposes, seven if you itemized medical deductions.
• Test results and imaging reports: at least five years, or for the life of the condition.
• Insurance cards: shred the old one when the new one arrives.
• Prescription labels: peel and shred when the bottle empties.
• Family medical history: keep a summary in a binder, then shred the source paperwork once the summary captures the detail.

When the window closes, the documents become a liability. Move them from the file cabinet to the shred box on the same day you sort them.

HIPAA Rules for Disposal: What Truly Counts

HIPAA does not list a specific shredder model. The Privacy Rule and the Security Rule both require protected health information to be rendered unreadable, indecipherable, and unable to be reconstructed. The HHS Office for Civil Rights has published guidance pointing to cross-cut shredding, pulverization, or incineration as compliant methods. A blue recycling bin behind a clinic in Manchester is not a compliant method.

The four pillars of a HIPAA-aligned disposal program look like this:

1. Written destruction policy. A short document naming the methods, vendors, retention rules, and the staff role responsible.
2. Business Associate Agreement with the shredding vendor. Required any time a third party touches protected health information, including a hauler taking sealed totes off-site.
3. Documented chain of custody. The bin gets locked, the cart gets logged, the truck gets sealed, the plant gets weighed.
4. Certificate of Destruction. The closing document naming the date, weight, method, and witness. You keep it for six years to match the HIPAA documentation retention rule.

Penalties scale fast. The Office for Civil Rights issues fines from $137 per violation at the low tier to $2.1 million per category per year at the willful neglect tier. The 2024 settlements against small dental practices and behavioral health groups both involved improper disposal of paper records.

Our medical shredding service includes a signed Business Associate Agreement, locked totes, sealed transport, and a Certificate of Destruction on every job. The HIPAA Filing Fee of $14.95 and the Plant Environment Fee of $19.95 cover the documentation and the regulated processing on every visit.

Disposal Options for NH Clinics and Practices

Most New Hampshire clinics pick one of three paths. The right answer depends on volume, location, and how much physical access you have.

Drop-off shredding

You bring boxes to our facility at 1215 Main Street, Unit 115, Tewksbury MA, minutes from the NH border. The 2026 rate is $0.99 per pound, or $15 per small box and $20 per large box with a 10 box minimum on box pricing. The HIPAA Filing Fee and Plant Environment Fee apply. Drop-off works well for a single-provider practice clearing out an old chart purge, or for a billing office consolidating an annual archive cleanup.

Witnessed shredding

You bring the records to Tewksbury and watch the destruction in person from a viewing area. The rate is $1.99 per pound with a $100 minimum. Hospitals, group practices, and behavioral health clinics often choose witnessed service for closed patient files and controlled substance records, where the staff signature on the chain of custody matters as much as the destruction itself.

Off-site pickup

We dispatch a secure crew to your office in Nashua, Manchester, Salem, Derry, Portsmouth, or anywhere in southern NH. The crew loads sealed totes onto a logged truck, hands you a chain of custody receipt, and shreds the material at the plant the same day. Off-site adds transportation starting at $129.95 with zone-based pricing. The path fits multi-site practices, hospital ambulatory clinics, and any office without ground-level loading.

For Nashua-based clinics, the Tewksbury site is closer than most local options. Our Nashua shredding service page has the route, parking notes, and the typical turnaround window for both drop-off and off-site work.

Disposal Options for NH Households

You do not need a Business Associate Agreement to shred your own medical records. You do need a process closing the gap between the file cabinet and the truck.

The shoebox method

Keep a labeled box in a closet. Every time you open a piece of mail with a medical detail, drop it in the box. Once a quarter, run the box through a drop-off visit. Most New Hampshire households fill a small $15 box in three to six months.

The annual purge

Set one Saturday a year to clear the file cabinet. Pull every Explanation of Benefits older than 12 months, every bill receipt older than three years, and every expired prescription label. Bag them, weigh the bag, and drive south to Tewksbury for drop-off. A 20-pound load runs around $20 at the per-pound rate.

Estate and end-of-life shredding

When a parent or spouse passes, the medical paperwork piles up fast. Hospice notes, hospital discharge papers, pharmacy refills, durable medical equipment paperwork, and Medicare statements all need to go. Witnessed or off-site service works best because the executor needs the Certificate of Destruction for the estate file.

If you are a caregiver who keeps records for a parent in Bedford, Hudson, or Nashua, set up the same shoebox routine for them. The risk of medical identity theft against an elderly parent runs higher than against any other adult demographic, and the paper trail is usually thicker.

X-Rays, Imaging Films, and Mixed Media Records

Medical records do not stop at paper. Older patient files include x-ray films, ultrasound printouts, EKG strips, CT scan films, microfiche, and bound binders with metal spines. Each one needs a destruction path matching the medium.

X-ray and imaging films

Films contain silver, which has scrap value and creates environmental disposal rules. New Hampshire households and clinics holding old films from the 1980s and 1990s benefit from specialized destruction. We accept x-ray films alongside paper at the Tewksbury plant and route them to a partner facility for silver reclamation and certified destruction. The Plant Environment Fee of $19.95 covers the regulated handling.

EKG strips and paper rolls

Old cardiology and pulmonology offices ran on thermal paper rolls. The rolls fade, but the patient identifiers stay readable for decades. Bundle the rolls into a banker box and bring them to a drop-off visit. Cross-cut shredding handles thermal paper without issue.

Microfiche and microfilm

Hospitals digitized records starting in the late 1990s. Some New Hampshire practices still hold microfiche from the conversion era. The film needs shredding plus secure destruction of the reader cards. Witnessed shredding works best because the operator confirms each card and reel.

Bound chart binders

The old three-ring binders, hardcover patient logs, and color-tabbed master indexes all need to come apart before destruction. Our intake team breaks the binders down at the plant. You do not need to remove rings or spines before drop-off, but bagging the loose paper separately speeds the weigh-in.

If your records include hard drives, server backup tapes, or USB media, ask about media destruction add-ons when you book. The combined media and paper visit covers HIPAA for both formats in one chain of custody.

What Not to Do With Old Medical Records

The five most common disposal mistakes in New Hampshire all show up in OCR enforcement files and in local breach notifications. Avoid the list.

• Do not toss records in the regular trash. Curbside trash is not secure. A single bag from a clinic dumpster has triggered six-figure settlements.
• Do not put records in mixed recycling. The bin sits at the curb, the truck dumps it, and the paper rides loose to a sorting facility. Any step is a leak point.
• Do not rely on a home office shredder for clinic volumes. Strip-cut shredders produce reconstructable strips. Even cross-cut home machines overheat after 20 minutes and miss staples, paper clips, and binder clips.
• Do not store records indefinitely as a hedge. Longer retention means more exposure to fire, water, theft, and breach. Follow the calendar.
• Do not skip the Certificate of Destruction. If a regulator asks how a record left your office, you need a document. A truck receipt is not a Certificate.
• Do not assume a recycling vendor counts as a shredding vendor. Without cross-cut destruction and a signed BAA, the paper is unprotected once it leaves your office.

The fix on each item is the same. Build a written disposal policy, name a vendor with a Business Associate Agreement, and follow the calendar.

Practice Closures, Sales, and Retirement Transitions

New Hampshire physician retirements and practice sales hit a fresh peak each year. Solo practitioners in Concord, Keene, Laconia, and the Seacoast all face the same question. What happens to 20 or 30 years of paper charts when the doors close?

Notify your patients first

NH Board of Medicine guidance and HIPAA both require advance notice to patients before a closure or sale. Send a written notice 30 to 60 days out. Include the closure date, the records custodian contact, the option to request copies, and the destruction date for records the patient does not request.

Set the retention clock

For each patient chart, the seven-year clock starts on the date of the last entry. A chart with a 2018 visit becomes eligible for destruction in 2025. A chart with a 2024 visit waits until 2031. Build a year-by-year disposal schedule and follow it.

Choose a records custodian

If you sell the practice, the buyer often becomes the custodian under a transition agreement. If you close outright, NH guidance allows another licensed provider or a commercial records management firm to hold the charts. The custodian still needs a Business Associate Agreement and a documented destruction process when the retention windows expire.

Plan the final destruction visits

Most closing practices need two to four destruction visits over the seven to ten year wind-down. Witnessed shredding fits the first visit because the retiring physician often wants to watch the destruction in person. Off-site visits handle the later cleanouts once the custodian has the routine established.

Estate attorneys, practice brokers, and retirement consultants across southern New Hampshire route these transitions to our team because the documentation lines up cleanly with the legal close-out. The Certificate of Destruction goes into the closing binder alongside the sale agreement.

What to Expect on Your First NH Shred Visit

The first visit is the hardest because you do not know the layout. Here is what happens from the parking lot to the receipt.

For drop-off, you pull into the lot at 1215 Main Street, Unit 115, Tewksbury. The space sits in a small commercial cluster minutes off Route 38 and a short hop from the NH border at Salem. You bring the boxes in, the team weighs the load, and you pay at the counter. The HIPAA Filing Fee of $14.95 and the Plant Environment Fee of $19.95 are added to every job. The boxes go straight to the shred floor. You leave with the Certificate of Destruction.

For witnessed service, the front desk takes you to the viewing area. You watch the operator feed the load into the cross-cut machine. The whole process takes 15 to 45 minutes for a typical clinic chart purge. You sign the chain of custody and pick up the Certificate before you leave.

For off-site service, the crew calls 30 minutes before arrival. They bring locked totes or roll-off carts to your office. Ground-level or elevator access is required. The crew loads the totes, you sign the chain of custody, and the material is destroyed the same day at the plant. The Certificate is emailed or mailed within one business day.

If you have not booked before, call 978-636-0301 or use the online portal at our scheduling page. Most New Hampshire clinics get a same-week slot for drop-off and one to two weeks out for off-site.

2026 Pricing

Transparent rates with flat fees on every job. Use this table when budgeting your shredding job.

Frequently Asked Questions