# How long to keep a protocol log

By The Optimized Team (Product). Published: 2026-08-13T10:00:00+00:00. Updated: 2026-10-29T05:47:43.910741+00:00.
Canonical: https://optimizedtracker.com/blog/how-long-to-keep-a-protocol-log

Clinics follow retention rules that vary by state and country. Your own log has no legal clock, so the real question is how long its history stays useful.

Keep your protocol log for as long as the history in it could still be useful to you or to a clinician. No rule puts an expiry date on your own copy. The retention periods you see quoted apply to clinics and hospitals, and they describe the minimum those organizations must hold, not what you should do with your own notes.

This article is about records only. It does not say what to take, how much, or for how long. It covers how long a log stays worth keeping and how to retire old entries without losing the trail.

## What providers are required to keep

Clinics and hospitals work from retention rules, and those rules differ a lot by place. In the United States they come mostly from state law. A [survey of hospital record practices](https://pmc.ncbi.nlm.nih.gov/articles/PMC2435263/) looked at 32 states. Eleven required 10 years for adult records, usually counted from the most recent care. Fifteen required less than 10 years. Massachusetts required 30 years, the longest in the survey.

The [American Health Information Management Association](https://pmc.ncbi.nlm.nih.gov/articles/PMC2435263/) (AHIMA) benchmark that the survey cites is 10 years after the most recent encounter for an adult, and the age of majority plus the statute of limitations for a minor. A [comparison of several countries](https://pmc.ncbi.nlm.nih.gov/articles/PMC3508852/) shows how far the numbers spread:

| Jurisdiction | Adult record period | Source note |
|---|---|---|
| US federal floor | 5 years for inpatient records, where the state sets nothing longer | Comparative study, 2012 |
| AHIMA benchmark | 10 years after the most recent encounter | Cited in the hospital survey |
| Alabama | 5 years | Hospital survey |
| Indiana | 7 years | Hospital survey |
| Texas | 10 years after last treatment | Hospital survey |
| Massachusetts | 30 years | Hospital survey |
| NHS England | 8 years after treatment ends | Comparative study |
| New South Wales, Australia | 10 to 15 years, depending on the type of hospital | Comparative study |

Both studies are more than a decade old, and rules change. Read the table as a picture of the spread, not as current law for your state.

### Minimums are not ceilings

A retention period is the shortest time a provider may keep a record. [Guidance written for clinicians](https://pmc.ncbi.nlm.nih.gov/articles/PMC8667710/) says to keep records until well after the statute of limitations has run, and notes that those limits do not cover every kind of claim. Time limits are often paused for minors, too. In England, child records are kept until the patient's 25th birthday.

Many hospitals keep adult records longer than the law asks. The same survey found that virtually no state requires permanent retention, yet permanent retention was the most common practice in most categories. The legal number is where the clinic starts. It tells you little about how long your own file is worth holding.

## Your own log has no expiry date

Nothing in those rules reaches your personal copy. What the rules do tell you is that a clinic may eventually dispose of its files, and that your records are probably spread across several offices. That is why [MedlinePlus](https://medlineplus.gov/personalhealthrecords.html) recommends keeping your own personal health record. Its suggested contents include dates and results of tests, major illnesses and surgeries with dates, allergies, and the medicines and supplements you take, with how long you have taken each.

Your protocol log is one slice of that record. It may also be the only place a detail lives, such as which vial and which concentration a given entry refers to. For a closer look at the places an entry can end up, see [where your tracking data actually lives](/blog/peptide-tracking-and-your-data).

Some entries age better than others:

- **Dated lab values and the dates of tests.** A value from three years ago is still the baseline for today's value. Keep them.
- **Surgeries, allergies and reactions.** A new clinician will ask about these, and the answer may not be in any chart you can reach.
- **Product, batch and concentration details.** They matter most next to the entry they describe. Keep them attached to it.
- **Daily check-ins.** Self-reported scores are noisy and lose detail fast. Their value is mostly in the trend, so a yearly summary can stand in for the raw rows.

One caution applies to all of it. A personal log is self-reported, and an old entry is context, not proof. Keeping it does not make it more accurate, and a single old value is not a trend.

## Archive instead of delete

Text is small. Even a log with thousands of entries is a tiny file, so storage is rarely a reason to delete. The better habit is to move old entries to an archive that is read-only and exportable, and to keep working in a log that holds only the current period. If you want a plan for the copies themselves, [keeping a copy that outlives your phone](/blog/backing-up-and-exporting-your-log) covers exports and backups.

Sometimes you will want to remove something for good: a duplicate import, an export that sat in an old cloud folder, an entry you made in the wrong log. Clinicians have a practice worth borrowing here. The guidance for clinicians recommends a destruction log that records what was destroyed, when, how, and which dates of care it covered, and says to keep that destruction record permanently. For a personal log, one line is enough:

- What you removed (for example, "Export of the 2023 log, old phone")
- The date you removed it
- The date range it covered
- Where the surviving copy is

That one line is cheap. Months later, when a number looks missing, it settles the question.

## A retention note for your own log

Write the rules down once, at the top of the log, so you are not deciding them again under pressure. A short table does the job:

| Entry type | Keep | Review |
|---|---|---|
| Lab values and test dates | Indefinitely | Yearly |
| Surgeries, allergies, reactions | Indefinitely | Yearly |
| Product, batch and concentration details | With the entry they describe | When you archive |
| Daily check-ins | Archive after a year, keep a summary | Yearly |
| Exports and backups | Newest dated copy plus one older copy | At each export |

These are record-keeping choices, not medical ones. If a record might matter for a legal, insurance or employment reason, check your state's rules or ask your clinician or a lawyer before you remove anything. A log that follows a structure like this is also easier to audit later; the article on [a protocol record you can audit](/blog/organize-a-protocol-you-can-audit) covers the fields themselves. A tracker such as OptimizedTracker keeps entries in one dated place, which makes the yearly review a matter of filtering rather than searching.

## What to write in the note

The note itself needs only a few lines:

- The date you wrote it
- Where each copy of the log lives, and who else holds a copy (a clinic, a patient portal)
- What you archived and when
- The date of your next review

Set the review for the same time each year. If the answer to "will I need this entry later?" is ever unclear, keep it. A small file costs almost nothing to keep. A missing history can't be rebuilt.