Kgothatso Keeps Up With Medicine - fifth year medical student Kgothatso Legong explains when and why patient records expire after death.

______

In South Africa, patient record files are confidential documents that contain sensitive information about a person's medical history, treatment, and health status. It is important to ensure the protection and security of these records, even after the death of a patient. The Protection of Personal Information (POPI) Act, which came into effect in 2013, regulates how personal information should be collected, processed, stored, and disposed of to protect the privacy and confidentiality of individuals.

One of the key principles of the POPI Act is that personal information should not be kept longer than necessary for the purpose for which it was collected. This principle applies to patient record files as well. After the death of a patient, the question arises: how long should their record files be kept?

There is currently no specific legislation in South Africa that stipulates the exact period for which patient record files should be retained after the death of a patient. However, healthcare providers are generally required to keep patient records for a certain period of time before they can be disposed of. This period varies depending on the type of record and the healthcare setting.

In a healthcare facility, patient record files are usually retained for a minimum of 5-10 years after the patient's last treatment date. This retention period allows for the possibility of legal claims, audits, or other purposes where the records may be required. After this period, the records can be securely disposed of in accordance with the POPI Act.

It is important to note that patient record files contain sensitive and confidential information that should be protected even after the death of a patient. This information should not be disclosed to unauthorized persons or used for any other purpose than what it was intended for. The healthcare provider has a legal and ethical obligation to ensure the security and privacy of patient records at all times.

In cases where the patient record files are no longer needed, healthcare providers should take appropriate measures to securely dispose of them. This may include shredding paper records or permanently deleting digital records. It is important to follow the guidelines set out in the POPI Act for the secure disposal of personal information to prevent any breaches of confidentiality.

Healthcare providers should also consider the wishes of the deceased patient and their family when deciding how long to retain patient record files. Some patients may have specific preferences regarding the storage or disposal of their records after their death, and it is important to respect these wishes to honour their privacy and dignity.

In conclusion, patient record files should be retained for a reasonable period of time after the death of a patient to comply with legal requirements and to maintain the security and confidentiality of personal information. Healthcare providers should follow the guidelines set out in the POPI Act for the storage and disposal of patient records to protect the privacy and rights of individuals. Respecting the wishes of the deceased patient and their family is also important when deciding how long to retain patient record files. Ultimately, the goal is to ensure that patient information is handled in a responsible and ethical manner to uphold the trust and confidentiality of healthcare services.