HIPAA mandates 6 years. However, state laws vary, and if your state law requires a retention period that is longer than the HIPAA mandate, the state law rules. Carolyn Price
-----Original Message----- From: Pat Cupo [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 10:25 AM To: WEDI SNIP Security Workgroup List Subject: Acceptable time-frames to keep Audit logs We are currently developing policies & procedures for Audit & System Change Controls. Does anyone have an idea as to how long these Audit logs must be kept? Patrick J. Cupo Senior Systems Coordinator Abington Memorial Hospital (215) 481-5606 [EMAIL PROTECTED] "We Provide Very Good Care" ****************** CONFIDENTIALITY NOTICE ********************** This e-mail contains LEGALLY PRIVILEGED AND CONFIDENTIAL INFORMATION intended only for the use of the recipient named above. If you are not the intended recipient, you are hereby notified that any dissemination or copying of this e-mail is strictly prohibited. If you have received this e-mail in error, please notify the transmitting hospital by telephone or e-mail and delete the original e-mail received in error. THIS INFORMATION HAS BEEN DISCLOSED TO YOU FROM RECORDS WHOSE CONFIDENTIALITY IS PROTECTED BY STATE AND FEDERAL LAW. ANY FURTHER DISCLOSURE, COPYING, DISTRIBUTION OR ACTION TAKEN IN RELIANCE ON THE CONTENTS OF THESE DOCUMENTS WITHOUT THE PRIOR WRITTEN CONSENT OF THE PERSON TO WHOM IT PERTAINS IS PROHIBITED. YOU ARE REQUIRED TO DESTROY THE INFORMATION AFTER THE STATED NEED HAS BEEN FULFILLED. --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-security as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-security as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org