Legal requirements for the disposal of medical records vary by country and state. In the U.S., both federal and state laws govern the retention and disposal of these records. The [Health Insurance Portability and Accountability Act (HIPAA)]() sets national standards for the protection of health information, including guidelines for its disposal. Failure to comply with these regulations can result in severe penalties.