Records procedures May 22, 2015 Related reading: Staff and remote access: more than patient information is at risk Keeping the records long enough… but not too long $800,000 HIPAA penalty for dumping medical records