How long should a clinic keep prescriptions and records?
What the medical council regulations say about keeping records, why many clinics keep them longer, and a simple way to keep them without filling a cupboard.
5 minute readUpdated 27 September 2026
Most small clinics in India keep no copy of the prescriptions they write: the patient walks out with the only one. That is fine until a patient comes back without it, a pharmacist calls to query a dose, or a complaint arrives months later. Here is what the rules say and what is sensible.
This is general information, not legal advice. Your state may have its own clinical establishment rules; check them, or ask a lawyer, for your situation.
What the regulations say
The Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 set two rules in clause 1.3:
- Keep the medical records of in-patients for three years from the start of treatment, in a standard format.
- Give records to the patient (or their authorised attendant, or a legal authority) within 72 hours of a request.
The regulations do not set a period for out-patient prescriptions. Many clinics simply apply the same three years to everything, which is the easiest rule to follow.
Why many clinics keep records longer
- Complaints can arrive late. Consumer complaints have a limitation period, commissions can accept late complaints with a reason, and time limits often run differently for children. A record from the visit is the best evidence of what was advised.
- Chronic patients. For a patient with diabetes or hypertension, the prescriptions from three years ago are the history of their treatment.
- It costs nothing if the record is digital. A prescription stored as data takes a few kilobytes.
What "a record" should include
The prescription itself, plus what led to it: complaints, findings, vitals, diagnosis, and any reports you looked at. If you change a prescription after printing, keep the old version marked as void rather than overwriting it, with the reason.
Privacy
Under the Digital Personal Data Protection Act, 2023, the clinic is responsible for the patient data it keeps. Keep records where only you and your staff can reach them, back them up, and be able to hand a patient their own records when they ask.
A simple way to do it
- Paper: a carbon or duplicate pad keeps a copy; file by date. Finding one patient's history is slow.
- Photos on a phone: quick, but unsearchable and mixed with personal photos.
- Prescription software: every prescription is filed under the patient as it is printed.
RxKite does the last one: every printed prescription is kept under the patient with a verification code, voided prescriptions are kept with the reason, backups are encrypted and run nightly, and you can export everything whenever you want. The free plan keeps 10 a month on file; paid plans start at ₹99 a month.