The unexpected death of a physician creates an immediate and often overlooked crisis for everyone connected to the practice. Patients lose a trusted provider. Staff face sudden unemployment and uncertainty. Family members are managing grief alongside legal and financial obligations they may not have anticipated. And somewhere in the middle of all of it, tens of thousands of patient records sit in filing cabinets, on hard drives, or in an EHR system, waiting for someone to figure out what happens next.
Medical records do not cease to be a legal and ethical obligation when a physician dies. Patients retain their right to access their health information. State and federal laws continue to govern how long records must be kept, who may access them, and how they must eventually be disposed of. The death of the practitioner does not suspend any of those requirements. It simply changes who is responsible for meeting them, which is why many practices work with a medical records custodian well before a crisis forces the issue.
This article explains who bears responsibility for medical records after a physician dies unexpectedly, how the situation differs between solo practices and group settings, what obligations exist toward patients, and how a professional medical records custodian can bring order to what is otherwise a difficult and legally sensitive transition.
Who Is Responsible for Medical Records After a Physician Dies?
When a physician dies unexpectedly, responsibility for their medical records does not dissolve with the practice. In most states, the executor or personal representative of the physician’s estate assumes initial legal responsibility for the records, alongside whatever obligations exist under the physician’s professional liability coverage, state licensing law, and HIPAA.
The specific chain of responsibility typically involves several parties:
- The estate executor or personal representative takes on the physician’s legal obligations including the duty to preserve and manage patient records. This person may have no medical background and often no experience with health information law, which is why engaging a medical records custodian early in the process is advisable.
- The state medical board may have specific requirements or resources for practices that close unexpectedly due to a physician’s death. Many state boards have guidance documents, referral services, or emergency contact protocols for exactly this scenario.
- Surviving practice partners, if the physician was part of a group practice, typically share responsibility for the deceased physician’s patient records and can often absorb the records into the group’s existing management structure.
- The professional liability insurer should be notified promptly. The insurer may have obligations related to tail coverage and may also have guidance on record preservation that affects any future claims.
- The physician’s malpractice attorney, if one was retained, may need to be involved in decisions about records that relate to pending or anticipated litigation.
In a solo practice, there are no partners to absorb the records. The executor stands largely alone in managing a situation that combines grief, legal complexity, and time-sensitive record obligations, frequently without specialized knowledge of any of them.
Solo Practice vs. Group Practice: A Critical Distinction
The practical consequences of a physician’s unexpected death vary significantly depending on the structure of the practice.
Solo Practitioners
A solo physician’s practice is the most vulnerable situation. When the physician dies, the practice effectively closes on the same day. There is no remaining provider to see patients, no clinical team to manage record requests, and often no staff with authority to access or transfer the records.
The executor of the estate must move quickly on several fronts simultaneously: securing the physical premises and any records stored there, ensuring that EHR or practice management system access is preserved rather than lapsed (vendor contracts may auto-terminate without active renewal), notifying patients, and establishing a process for handling ongoing record requests during what may be a lengthy estate settlement process.
State laws vary on the specific requirements, but most medical boards require that patients be given reasonable notice and a reasonable opportunity to transfer their records to a new provider before a practice closes. In an unexpected death, that notification and records transition process must be managed retroactively and under time pressure.
Group Practices and Multi-Provider Organizations
When a physician in a group practice dies, the remaining providers and practice management can typically absorb the immediate obligations. The deceased physician’s patients can be transferred to other providers in the group. Their records remain within the practice’s existing record management system. The practice’s HIPAA-compliant infrastructure continues to govern access and security.
The primary additional burden in a group setting involves patient communication, updating the practice’s provider roster, and working through any records that the deceased physician maintained separately or informally outside the main system. The group’s existing medical records policies and, if applicable, their medical records custodian agreement typically extends to cover the transition.
The more complex scenario within a group practice arises when the deceased physician was a majority partner or sole owner of the practice entity. In that situation, the business structure and the record obligations may both require resolution through the estate, and the situation can begin to resemble a solo practice closure in terms of complexity.
What Happens to the Records Themselves
Regardless of who is responsible, the records themselves require specific handling from the moment of the physician’s death.
Securing and Preserving Physical Records
Paper records stored at the practice location must be secured against unauthorized access as soon as possible. If the office is being closed or the lease is ending, arrangements must be made to move records to a secure location before the space is vacated. Records cannot be left in an unsecured office, transferred to a family member’s home, or placed in a commercial storage unit without appropriate safeguards.
HIPAA’s Privacy Rule applies to protected health information for 50 years following the death of the patient, not the physician. That means patient records must be maintained, protected, and accessible for requests well beyond the typical active care window, and the estate or custodian managing those records is bound by HIPAA throughout.
Electronic Health Records and System Access
EHR systems present a particular challenge in unexpected practice closures. If the physician was the primary account holder with the EHR vendor, the estate may need to work quickly to preserve access before the account lapses, auto-renews under different terms, or is flagged for closure by the vendor.
The estate executor should contact the EHR vendor as soon as practicable to explain the situation, preserve login credentials, and determine what options exist for exporting or migrating records. Most reputable vendors have a protocol for exactly this situation, but it must be initiated, not assumed.
Depending on the volume of records and the vendor’s export capabilities, records may need to be exported into a portable format, printed as PDFs, or otherwise preserved in a way that does not depend on an ongoing software subscription to remain accessible.
Patient Notification and Record Requests
Patients of a deceased physician have the same rights to their records as patients of any other provider. They must be notified that the practice has closed and informed of how to request their records, transfer their care, and access their health history.
In most states, the obligation to notify patients falls on the practice, the estate, or whoever assumes custodianship of the records. Notification typically includes:
- Written or electronic notice sent to patients seen within a defined recent period
- Information on how to request a copy of records or authorize transfer to a new provider
- A point of contact for record requests during the transition period
- Any applicable deadlines for requesting records before they are transferred to long-term custodianship or archived
State medical boards and state medical associations often publish guidance on patient notification requirements for unexpected practice closures. Consulting that guidance early in the process helps ensure that the estate or custodian meets the required standards.
Once notification goes out, record requests typically follow. Those requests must be fulfilled in accordance with HIPAA’s access timelines, generally within 30 days of a patient’s written request, even if the practice has closed. This is one of the primary reasons a professional medical records custodian is valuable: they provide a stable, compliant infrastructure for receiving, processing, and fulfilling record requests throughout the retention period.
The Role of a Professional Medical Records Custodian
A professional medical records custodian is an organization that assumes formal responsibility for storing, managing, and releasing medical records on behalf of a practice that can no longer manage them in-house. For the estate of a deceased physician, a medical records custodian provides several things that are difficult to arrange independently:
- Secure storage of both physical and electronic records in a HIPAA-compliant environment
- A defined process for receiving and fulfilling patient record requests, including appropriate authorization verification
- Chain of custody documentation for all records transferred to custodianship
- Retention tracking aligned with applicable state and federal retention periods
- Eventual secure destruction of records at the end of their retention period, with certificates of destruction
- A stable point of contact for patients, attorneys, insurers, and other authorized parties throughout the retention window
For the estate executor, engaging a custodian early shifts the ongoing operational burden to an experienced party and reduces the risk of inadvertent HIPAA violations, missed record requests, or improperly managed records.
Why Advance Planning Would Have Helped and What to Do Without It
Most physicians who die unexpectedly have not made formal arrangements for their records. That is the nature of an unexpected event. But the situation is manageable when the right resources are engaged quickly.
The first priority is securing the records and preserving access to any electronic systems. The second is contacting the state medical board and state medical association to understand what resources and requirements apply. The third is engaging a professional medical records custodian to take over the operational management of the records and establish a compliant process for record requests, a step retiring physicians are increasingly encouraged to plan for in advance.
For physicians who are reading this as a planning matter rather than an emergency, the takeaway is straightforward. Designating a medical records custodian in advance, documenting where records are stored and how they are organized, and leaving clear instructions for an executor or surviving partner are the steps that transform an unexpected death from a records management crisis into a manageable transition.
Frequently Asked Questions
Who is legally responsible for a deceased physician’s medical records?
In most states, the executor or personal representative of the physician’s estate assumes initial legal responsibility for the records. In a group practice, surviving partners typically share responsibility. The estate is bound by the same HIPAA obligations and state retention requirements that applied during the physician’s lifetime, and those obligations continue until all records have been properly retained and eventually destroyed on schedule.
How long must medical records be kept after a physician dies?
Retention requirements are set by state law and vary by state, typically ranging from seven to ten years from the date of the patient’s last treatment, though some states require longer periods for specific record types or for records belonging to minors. HIPAA applies to protected health information for 50 years after the patient’s death, not the physician’s. The executor, estate, or designated custodian must maintain records for the applicable retention period regardless of the physician’s death.
What happens to a deceased physician’s EHR system?
The EHR or practice management system remains under contract until the estate takes action. The executor should contact the vendor promptly to preserve access, export records if needed, and understand the options for maintaining or migrating the records. Allowing an EHR account to lapse without first exporting or preserving the records can result in loss of access to patient information, which creates both legal and ethical problems.
Do patients still have the right to their records after a physician dies?
Yes. A physician’s death does not affect patients’ right to access their health information. Patients must be notified that the practice has closed and given information on how to request their records. Under HIPAA, record requests must generally be fulfilled within 30 days even if the practice has closed, which is why having a medical records custodian or other designated party managing requests during the retention period is important.
Can the estate destroy a deceased physician’s records immediately?
No. Medical records cannot be destroyed before the end of the applicable retention period, which is set by state law and varies by record type. Destroying records prematurely can violate state medical practice laws, HIPAA, and potentially other regulations. A medical records custodian can track retention schedules for each record set and manage compliant destruction when records become eligible.
What should family members or staff do immediately when a physician dies unexpectedly?
The immediate priorities are securing the physical records and office space, preserving access to any EHR or practice management systems, notifying the state medical board, and contacting the professional liability insurer. Engaging a medical records custodian early in the process provides a compliant framework for managing everything that follows, including patient notifications, record requests, long-term storage, and eventual destruction.
Get Help Managing a Deceased Physician’s Records
When a physician dies unexpectedly, medical records become one of the most urgent and complex obligations the estate must manage.
Emerald Document Imaging provides professional medical records custodian services that give estates, executors, and practice administrators a secure, HIPAA-compliant solution for preserving, managing, and eventually closing out a deceased physician’s records. Contact us to discuss your situation.
