Adult day centers create records every day attendance, assessments, care plans, progress notes, medication records, incident reports, authorizations, billing documentation, and staff files. The harder question is often not what to document, but how long each record needs to be kept.
There is no single nationwide retention period for every adult day center or every record type. Adult day care record retention requirements can come from state licensing rules, Medicaid programs, payer contracts, HIPAA documentation requirements, and the specific type of record involved.
That is why using one blanket rule—such as "keep everything for six years"—can be misleading. Last verified: October 6, 2026. This guide provides an operational framework, not legal advice. Always confirm the current requirements that apply to your state, program, payer, and center.
How Long Should Adult Day Care Records Be Kept?
The answer depends on the record and the authority governing it. Some adult day programs require certain records to be retained for five years, others six or seven years, and some records may need to remain longer when an audit, investigation, litigation, or other applicable hold remains open.
Before deciding how long to keep adult day care records, identify the record type, state licensing or certification requirements, Medicaid or HCBS rules, managed-care or payer contracts, applicable HIPAA requirements, the event that starts the retention period, and whether an audit, investigation, or litigation hold is active.
- Identify the type of record
- Check state licensing or certification requirements
- Check Medicaid or HCBS requirements
- Review managed-care and payer contracts
- Determine whether HIPAA documentation rules apply
- Identify the event that starts the retention period
- Check for active audits, investigations, disputes, or litigation holds
Why Adult Day Care Record Retention Requirements Vary
Adult day centers may be subject to several rules at the same time. A participant record can be affected by state licensing requirements, Medicaid rules, payer contracts, privacy requirements, and the type of service documented.
| Source | What It May Affect |
|---|---|
| State licensing or certification | Participant, personnel, medication, incident, and administrative records |
| Medicaid / HCBS | Documentation supporting services, authorizations, units, and claims |
| Managed-care or payer contracts | Audit access, billing support, and contractual retention periods |
| HIPAA | Required privacy and security documentation where HIPAA applies |
| Other funded programs | Program-specific attendance, meal, or administrative records |
| Audit or litigation hold | May extend retention beyond the normal destruction date |
For a broader explanation of what records centers commonly maintain, see our adult day care documentation requirements guide. That page focuses on what should be documented, while this guide focuses on how long those records should remain available.
Adult Day Care Record Retention Examples by State
There is no safe nationwide number because state and program rules differ. The examples below show why centers should verify the requirements that govern their own operations instead of copying another provider's retention schedule.
| Example | Retention Requirement Highlight |
|---|---|
| Arkansas | Certain client records are generally retained for five years, with longer retention when an unresolved audit, litigation, or other action involves the records |
| Georgia | Participant program records are retained for at least six years after discharge or termination under the cited adult day program guidance |
| Washington | Requires a permanent client registry, written retention policies, and secure paper or electronic record systems |
| New York MLTC / SADC | Certain records and supporting documentation must be maintained at least six years for audit and surveillance purposes |
These examples are provided to illustrate variation, not to create a universal retention schedule. Always confirm the current rules governing your center, program, and payer relationships.
Does HIPAA Require Adult Day Care Records to Be Kept for Six Years?
Not every participant or medical record. This is one of the most common misunderstandings around HIPAA record retention requirements for adult day care.
HHS states that the HIPAA Privacy Rule does not establish a general medical-record retention period. State law or another applicable rule generally determines how long medical or participant records must be kept. HIPAA does, however, require certain documentation created under the Privacy and Security Rules such as specified policies and procedures—to be retained for six years where those requirements apply.
So the correct approach is not to assume that HIPAA requires every record to be retained for six years. Instead, identify which documentation is subject to HIPAA requirements and separately determine the retention period for participant, service, medication, billing, and other records. For broader privacy and security requirements, see our adult day care HIPAA compliance guide.
Medicaid Record Retention Requirements for Adult Day Care
Medicaid can add another retention layer. Federal Medicaid provider-agreement rules require participating providers to maintain records necessary to disclose the extent of services furnished and provide relevant information when requested. More specific retention periods may come from state Medicaid rules, waiver programs, managed-care contracts, or provider agreements.
For an adult day center, supporting Medicaid records may include attendance, authorizations, service or care plans, progress notes, billing units, claims, transportation documentation where required, corrections, and other records supporting the service billed.
- Attendance and service dates
- Authorizations
- Care or service plans
- Progress or daily notes
- Billing units
- Claims
- Transportation records where required
- Corrections and supporting documentation
The important point is that the final claim is not always the only record that matters. A future reviewer may need the service-day evidence supporting that claim.
How Long Should Adult Day Care Attendance Records Be Kept?
Adult day care attendance record retention depends on the state, Medicaid program, payer, and other rules governing the center. Attendance can become important years after a service date because it may support questions about participant presence, service duration, authorized units, transportation, or billed services.
If your main question is what an attendance record should contain—including time stamps, corrections, and exports see Adult Day Genie's adult day care attendance records resource. The retention question is different: how long does that attendance record need to remain available?
What If an Audit or Investigation Is Still Open?
A retention schedule should never operate on autopilot. Some rules explicitly require records to remain longer when an audit, investigation, litigation, dispute, or other action involving those records has not been resolved.
A practical internal rule is: do not destroy a record simply because its ordinary retention date has arrived if an applicable legal, regulatory, audit, or contractual hold requires continued preservation.
Your retention process should therefore include a hold check before records are destroyed. For broader audit preparation, see the adult day care audit checklist.
Can Adult Day Care Records Be Stored Electronically?
Electronic storage may be permitted depending on the applicable requirements, but electronic records still need appropriate security, preservation, and retrieval controls. Moving a document from paper to software does not remove the center's recordkeeping responsibilities.
- Authorized access
- Confidentiality controls
- Reliable backups
- Searchability
- Exportability
- Correction history
- Protection against unauthorized deletion
- Secure disposal when the retention period ends
A record that technically still exists but cannot be found, understood, or connected to the correct participant and service date is not very useful when a reviewer requests it.
How to Build an Adult Day Care Record Retention Policy
An adult day care record retention policy should be specific enough for staff to follow. Rather than writing only "retain records according to law," build a working schedule that identifies the record, the authority controlling it, the retention trigger, the required period, and whether a hold applies.
| Record Type | Governing Source | Retention Trigger | Required Period | Hold? |
|---|---|---|---|---|
| Attendance | State / Medicaid / payer | Service date or stated trigger | Verify | Yes / No |
| Participant file | State / program | Discharge or stated trigger | Verify | Yes / No |
| Billing support | Medicaid / payer | Service or billing trigger | Verify | Yes / No |
| Medication / MAR | State / program | Applicable trigger | Verify | Yes / No |
| Incident records | State / program | Event or case closure | Verify | Yes / No |
| HIPAA-required documentation | HIPAA, if applicable | Creation or last-effective date | Six years where applicable | Yes / No |
For every record category, document the source supporting the retention period. "We have always kept it seven years" is not a reliable compliance source.
- Identify who verifies retention requirements
- Define who can place or remove a hold
- Define who can authorize destruction
- Document how records are backed up
- Define how confidential records are destroyed
- Review the schedule when laws, programs, or contracts change
For the broader policy framework, connect this schedule with your adult day care policies and procedures.
How Adult Day Genie Supports Long-Term Record Retrieval
Adult Day Genie does not determine how long your center is legally required to retain a record. Its role is operational: helping centers keep attendance, participant records, daily documentation, corrections, and reports organized so authorized staff can retrieve historical information when needed.
The distinction is simple: the retention rule determines how long a record must remain, while the record system affects whether that record can still be located and understood when someone asks for it.
Adult Day Genie keeps attendance entries time-stamped, preserves correction history rather than silently replacing older entries, and supports reporting and exports for authorized users. Stronger digital record organization can make long-term retrieval easier without claiming that software itself determines compliance.
Adult Day Care Record Retention Checklist
- List every record type your center maintains
- Identify which rule or contract governs each record
- Document what starts each retention period
- Check whether Medicaid or another payer adds requirements
- Identify any HIPAA-required documentation
- Check for active audits, investigations, or legal holds
- Confirm electronic records are backed up and retrievable
- Define who can authorize destruction
- Keep the source supporting each retention period
- Review the schedule when rules or contracts change
A useful retention policy is one staff can follow before a reviewer asks for records, not one created after documentation has already been requested.
Frequently Asked Questions
How long should adult day care records be kept?
There is no single nationwide retention period for every adult day care record. The required period may depend on state licensing rules, Medicaid or payer requirements, record type, program requirements, and whether an audit or legal hold is active.
Does HIPAA require adult day care records to be kept for six years?
Not all participant or medical records. HIPAA requires certain HIPAA-required documentation to be retained for six years where applicable, but HHS does not establish a general six-year medical-record retention rule.
How long should adult day care attendance records be kept?
The required period depends on the rules governing the center, including state requirements, Medicaid programs, and payer contracts. Verify the applicable requirement before setting an attendance-record destruction date.
What are Medicaid record retention requirements for adult day care?
Federal Medicaid rules require participating providers to maintain records necessary to disclose services furnished and provide relevant information when requested. More specific retention periods may come from state Medicaid rules, waiver programs, managed-care contracts, or provider agreements.
Can adult day care records be stored electronically?
Electronic records may be permitted where applicable requirements allow them, but centers still need appropriate security, backup, retrieval, access, preservation, and secure-disposal controls.
Should records be destroyed when an audit is still open?
Not automatically. An audit, investigation, litigation hold, payer requirement, or other applicable rule may require continued retention beyond the normal destruction date.
Final Takeaway
The most important point about adult day care record retention requirements is that there is no universal retention period for every record. Build your schedule around record type → governing requirement → retention trigger → required period → hold status → authorized destruction.
That approach is more reliable than applying one number to every document. Once you know how long a record needs to remain, make sure your system can still retrieve and explain it years later.
Want to see how attendance, participant documentation, correction history, and reporting can stay connected? Book an Adult Day Genie walkthrough and review the workflow using a real record-retrieval scenario from your center.