What Happens to Medical Records When a Doctor Retires in Australia?

Retirement marks the end of a career — but not the end of your professional obligations. For private practitioners across Australia, what happens to medical records when a doctor retires is one of the most commonly asked and least well-prepared-for questions in practice management. The answer is more involved than most practitioners expect, and the consequences of getting it wrong fall on patients, families, and estates long after the consulting room door has closed for the last time.

The good news is that this is a solvable problem. But it does require planning — and it requires understanding what the law actually asks of you.

What the law requires

Under Australian privacy and health records law, medical health records must be retained for a minimum of seven years from the date of last contact for adult patients. For patients who were treated as minors, records must generally be retained until that patient turns 25, or for seven years from the date of last entry — whichever period is longer. Some states and territories impose additional obligations beyond these federal minimums.

These obligations do not disappear when you retire. They travel with the records — wherever those records end up, and whoever holds legal responsibility for them.

The law is also clear that health information is sensitive information, subject to higher protections under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. These protections govern not just how records are held, but who can access them, under what circumstances they can be disclosed, and how they must eventually be destroyed.

Who holds legal responsibility?

In private practice, medical health records typically belong to the practitioner or practice entity responsible for providing the health service. When a practitioner retires and closes a solo practice, legal responsibility for those records passes — along with the obligation to manage them — to whoever the law and the relevant agreement designates as responsible.

On the death of a practitioner, medical health records generally become part of the estate and the responsibility of the executor. This is worth thinking about carefully: an executor has legal obligations around those records, but may have no clinical knowledge, no access to the relevant practice management software, and no understanding of what the privacy law requires of them.

This is not a hypothetical. It is one of the most common situations families find themselves in after a practitioner dies.

The approaches practitioners most often take — and the problems they create

Most retiring practitioners are aware they need to do something with their medical health records. What they often underestimate is how inadequate common workarounds can be.

Asking a colleague to hold the records

This is perhaps the most widespread assumption: that a trusted colleague can step in and manage the records. In most cases, this is not a lawful arrangement. Under the Australian Privacy Principles, health information can generally only be used or disclosed for the purpose for which it was collected — primarily, the provision of a health service. A colleague who is not providing a health service to those patients, and who has no separate authority, consent, or lawful basis in place, will typically not have a proper basis to hold, access, or manage that information.

This is not a technicality. It is the kind of arrangement that can expose the colleague to privacy liability, and leave the records in an uncertain legal position. Well-intentioned informal arrangements are not the same as properly structured medical record custodianship.

Leaving it with family

Family members are in an even more difficult position. They may have access to the physical records or the login credentials — but access is not the same as authority. Managing medical health records after retirement requires knowledge of retention obligations, an understanding of what constitutes a lawful disclosure, and the ability to respond to requests from patients, legal representatives, and subpoenas. These are obligations that most family members are not equipped to carry, and placing this burden on them during an already difficult period is something most practitioners would want to avoid.

Keeping the PMS subscription running

Some practitioners assume that simply leaving their practice management software active solves the problem. It does not. A running PMS subscription does not constitute custodianship — there is no one with authority to respond to record requests, no retention management in place, no plan for eventual lawful destruction, and a recurring cost that will need to be managed indefinitely. When the subscription lapses, access to the records may be lost entirely.

What medical record storage after retirement actually requires

The phrase “medical record storage” suggests something simpler than the reality. Storing records is only one part of what is required after a practitioner retires or closes a practice.

Proper medical record storage after retirement involves verified authority from the person or entity responsible for the records; secure, compliant storage in line with Australian privacy law; a process for responding to authorised requests from patients, legal representatives, insurers, and parties presenting subpoenas; active retention management to track when records can be lawfully destroyed; and documented destruction processes when the retention period expires.

This is what medical record custodianship means — and it is meaningfully different from simply putting files somewhere safe.

Patients still have the right to access their records

Retirement does not remove patients’ right to access their own health information. If a patient — or their legal representative — needs records after a practitioner has retired, there needs to be a clear pathway to make that request and receive a lawful response. Without planned custodianship, that pathway may not exist. Patients may be left not knowing where their records are, or who to contact.

What should a retiring practitioner do?

The most important step is to ensure the administration of your records is planned before you stop practising — not after. This means having a formal arrangement in place with a lawful record custodian who has the authority, systems, and processes to manage your records for the full retention period.

If you are still in active practice but want to ensure the groundwork is in place, the Legacy Readiness Plan is a useful starting point. It documents the administrative information needed to set up a Legacy Plan — so that if something happens to you before you formally exit practice, your family or legal representative has everything they need to act without delay.

If you are ready to formally appoint a record custodian — whether because you are retiring now, or planning an imminent exit — the Legacy Plan provides lawful, professional custodianship of your medical health records. It covers secure transfer and storage, authorised access and retrieval, retention management, and eventual lawful destruction in line with Australian law.

Planning for what you’ve built

You have spent your career meeting your obligations to your patients. The records you hold are part of that — and so is what happens to them when you retire. Taking the time to put proper custodianship arrangements in place is not a bureaucratic exercise. It is the last piece of responsible practice administration. It protects your patients, protects your family, and means you can retire knowing the professional obligations you have carried throughout your career will continue to be met.