Clinical Record Retention and Secure Destruction: A 2026 Guide for Canadian Therapists

A clinical record should not live forever in a practice-management account “just in case.” It should be retained long enough to meet professional and legal requirements, remain available for legitimate client needs, and then be destroyed so it cannot be reconstructed.

This practical guide is for psychologists, social workers, counsellors and other private-practice professionals in Quebec and Canada. It is general information, not legal advice; confirm the rules that apply to your profession and province.

Why every private practice needs a retention policy

Privacy law does not mean deleting every record quickly. It means knowing why information is held, who can access it, how long it is needed and how it will be securely destroyed.

Quebec's Commission d'accès à l'information states that personal information should be securely destroyed once it is no longer needed for the identified purposes, unless another law requires a retention period. Retention and destruction are therefore two parts of one information lifecycle.

Without a written policy, common risks include forgotten accounts, attachments in email, exports on personal computers and no reliable evidence that a file was destroyed after an incident.

How long should you retain a client record?

There is no single Canada-wide answer. The applicable period depends on your profession, province, service and the circumstances of the record. In Quebec, the Ordre des psychologues du Québec states that a client record must be kept for at least five years from the date of the last professional service. Other colleges and orders may impose different rules.

Treat the professional minimum as a floor, not as your entire policy. A request for access, complaint, litigation or other legal hold may require you to pause destruction for a specific record. Define the trigger event—often the last service date—and record the source of every retention period.

What belongs in the record lifecycle?

Inventory more than progress notes:

• clinical notes, assessments, treatment plans and correspondence;
• intake forms, informed consent and communication authorizations;
• reports, referrals, receipts and documents supplied by the client;
• relevant email, text or portal exchanges;
• backups, exports, attachments and paper copies.

Map each item to its location. A policy covering your main application but not Google Drive, a phone or automated backups is incomplete.

How to securely destroy a clinical record

Deleting a file in an interface does not always remove every copy. Your procedure should address the following.

Digital records

Confirm how permanent deletion, trash, exports and backups work in your software. Remove local copies and record the date, scope and method. If the provider cannot confirm purge behaviour, ask for its retention and deletion practices before relying on it for clinical data.

Paper records

Use secure shredding or a specialized provider that can issue a certificate of destruction. Never put clinical notes in ordinary recycling, even if the notes are old or incomplete.

Devices and media

Before recycling or transferring a computer, phone or external drive, use a media-appropriate erasure process and remove synced accounts. A deleted shortcut or unverified reset may leave data recoverable.

A monthly solo-practice checklist

• Your policy identifies the rules for your profession and jurisdiction.
• Each record has a last-service date and an active, closed or review status.
• Access requests, complaints and legal holds are flagged as destruction exceptions.
• Secondary locations are inventoried: email, phones, exports and backups.
• Former staff and vendor access has been removed.
• Destruction is logged with date, category, period and method.
• Clients receive appropriate notice when a practice closes or records are transferred.

What practice-management software should do

Software cannot decide your regulatory retention period. It can reduce avoidable risk by centralizing records, limiting exports, controlling access and making closure workflows easier to document. Ask where data is hosted, how backups work and what happens when a record is deleted or the account is closed.

FYL.care helps private practices organize client records and administration in one workspace. Create your free account and start by documenting your retention policy before migrating records.

FAQ

Should I delete a record as soon as a client stops attending?

No. Follow the minimum period set by your profession and document any exceptions. Once the period and legitimate needs have ended, destroy the record securely.

Is emptying my software's trash enough?

Not necessarily. Check the provider's backup, export and synchronization practices. Request confirmation when you need evidence of deletion.

Can I keep a copy on my personal computer?

Only when it is necessary, protected and covered by your policy. Multiple copies increase unauthorized-access risk and make complete destruction harder.

What should I do when closing my practice?

Plan record custody, transfer or destruction according to your professional rules. Tell clients who is responsible and how they can exercise access rights; do not silently delete records.

Do text messages belong in the record?

Keep exchanges that document a relevant service issue or professional decision, in line with your standards. Personal messaging apps should not be assumed to be secure clinical-record systems.