Security Rule documentation of policies procedures and required actions must be retained for 6 years from creation or the date it was last in effect whichever is later.

Checked 2026-10-01

Vendor
not restricted
Product
not restricted
Subsystem
retention
Deployment
multi-tenant, on-premises, hybrid
Region
us
Release range
current as of 2026-10-01
Checked
2026-10-01

Sources

Cite this note

APA

WarmTransfer. (2026, October 1). HIPAA for contact centers and UC: source note hipaa-contact-center-security-docs-six-years. WarmTransfer. https://warmtransfer.net/knowledge/claims/hipaa-contact-center-security-docs-six-years

BibTeX

@misc{warmtransfer-claim-hipaa-contact-center-security-docs-six-years,
  title  = {HIPAA for contact centers and UC: source note hipaa-contact-center-security-docs-six-years},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/hipaa-contact-center-security-docs-six-years},
  note   = {Source note hipaa-contact-center-security-docs-six-years, checked 2026-10-01}
}

Read in context