At the federal level, HIPAA Compliance does not specify a uniform data retention period. Instead, healthcare providers are required to keep records “as long as may be necessary to treat the patient ...