Format migrations: what must survive the conversion

Must I keep records in their original format?

No. HIPAA is technology-neutral about the container a record lives in — what it requires is that the content and integrity of required documentation survive, and that a patient can still get a copy in the form and format they request where you can readily produce it 1Ref 1HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That patients have a right to records in the form and format they request where producible, within 30 days plus one extension, for a reasonable cost-based fee.. The Security Rule's safeguards, including integrity controls over electronic protected health information, travel with the data regardless of which system currently holds it 2Ref 2Office of the Federal Register (2026).45 CFR Part 164 — Security and Privacy.The Security and Privacy Rule text, including documentation-retention and integrity-safeguard requirements that apply regardless of the record's current format..

That means a paper-to-electronic conversion, or a migration from one EHR to another, is not itself a compliance problem. The problem shows up only if the conversion drops content, breaks authentication, or makes the record harder to produce than it was before.

What must survive a format conversion

Three things have to make the trip intact: the clinical content itself, whatever authenticates who wrote each entry and when, and enough structure to reconstruct the record at the visit level rather than as a flattened summary. A conversion that compresses years of notes into a single undated block has technically "kept" the data while destroying its evidentiary and clinical value.

Build a short verification step into any conversion project — pick a handful of charts spanning different years and formats, and confirm dates, authorship, and full note text all reproduce correctly on the other side before you trust the batch conversion of everything else.

Treat attachments the same way you treat the note text. Scanned consent forms, imaging reports, and correspondence from other clinicians are part of the record, and a conversion tool that only migrates structured note fields while leaving attachments behind has silently shrunk the chart even though the summary screen looks complete.

Paper to electronic: converting without losing evidentiary value

Scanning paper into a digital format is the most common conversion a solo practice runs, and the standard is the same as any other migration: the scanned image or extracted text has to be a faithful, complete reproduction of the original. A skipped page, a cut-off margin, or a scan run at a resolution too low to read a handwritten note undermines the record in exactly the situation you'll need it most — an audit, a board complaint, or a malpractice claim.

American Psychological Association guidance on record-keeping treats disposition and format changes as part of ordinary retention planning, always layered under whatever your state requires for the underlying record 3Ref 3American Psychological Association (2007).Record Keeping Guidelines.Guidance treating format changes and disposition planning as part of ordinary record-keeping practice, layered under state retention rules.. Keep a conversion log — what was scanned, when, and by what process — as its own piece of documentation.

A migration can't be the reason access breaks

Format changes sit inside the information-blocking rule's reach, not outside it. A vendor migration or a practice's own conversion project cannot become the reason a patient's request, a referral, or an authorized exchange suddenly can't be fulfilled — the rule prohibits unreasonably interfering with access, exchange, or use of electronic health information, and a self-inflicted format problem doesn't get a pass just because it was unintentional 4Ref 4Office of the National Coordinator / ASTP (2026).Information Blocking.That a migration or conversion cannot be the mechanism through which access, exchange, or use of electronic health information is unreasonably interfered with..

Build access continuity into the migration plan itself: know how you'll answer a records request that lands mid-conversion, and don't let a vendor cutover date become the reason a 30-day access deadline slips.

The right of access still runs on your converted format

Once a conversion is complete, the record you produce for a patient follows the same right-of-access rules as it did before — 30 days to respond, one 30-day extension available, the form and format the patient requests where you can readily produce it, and only a reasonable cost-based fee 1Ref 1HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That patients have a right to records in the form and format they request where producible, within 30 days plus one extension, for a reasonable cost-based fee.. If your new system cannot readily reproduce a format you used to be able to offer, document why and be ready to explain the limitation if OCR ever asks.

Privacy Rule obligations — minimum necessary, permitted uses and disclosures, notice — apply to the record in its new format exactly as they applied in the old one; conversion changes the container, not the governing rules 5Ref 5HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.That Privacy Rule obligations governing use and disclosure of PHI apply to the record regardless of which format currently holds it..

When a court order or subpoena wants a specific form

A court order or subpoena sometimes specifies the form a record must be produced in, and that instruction controls independent of what your everyday conversion workflow produces. HIPAA distinguishes a court order, where you disclose only what the order authorizes, from a subpoena alone, where disclosure requires satisfactory assurances of notice to the patient or a protective order 6Ref 6HHS Office for Civil Rights (2026).Court Orders and Subpoenas.That a court order limits disclosure to what it authorizes while a subpoena alone requires separate notice or protective-order assurances, relevant when a legal request specifies a particular form.. If a legal request asks for the original rather than your converted version, read it carefully before assuming your standard export satisfies it.

When in doubt about what a specific order requires, that reading is worth a few minutes with the document rather than a guess — the consequence of producing the wrong form is a second round of the same request, now on a shorter clock.

A conversion checklist before you destroy the original

Do not destroy an original record until you have verified the converted version independently, not just trusted the software's completion message. Confirm a sample set of records reproduces completely, confirm the converted format is one your retention schedule can actually sustain for the required years, and confirm you can still answer a records request, a subpoena, or a tax-related retention inquiry from the new format alone.

Retention periods keep running through a format change — converting a chart does not restart its clock, and the carrier's longer clock for malpractice purposes doesn't reset either. Log the conversion date and method as part of the record itself, so anyone reviewing the chart later understands why the original artifact looks different from what a given year's date would suggest.

Keep the verification record separate from the clinical record but easy to locate — a simple spreadsheet noting which charts were sampled, what was checked, and who signed off is enough. If a converted record's completeness is ever questioned, that log is what turns "we believe it's fine" into "here's how we confirmed it."